Privacy Policy

1. What we collect

• Account info: email address, username, display name, full name, date of birth, gender, and bio.
• Profile media: avatar and banner images you upload.
• Activity: song ratings, rating history, the genres you pick during onboarding, posts (including any photo or video you attach), comments, likes, follows, blocks, polls you create or vote in, and the badges you earn.
• Private messages: direct messages and group chat messages you send, including any post you choose to share via message.
• Technical data our infrastructure providers (Supabase, Vercel) log automatically, like IP address and browser type, for security and abuse prevention.

Date of birth is collected only to confirm you meet the minimum age requirement. Neither date of birth nor gender is shown on your public profile or to other users. We never invent or infer sensitive data (health, political views, etc.). We don't collect payment information — Mubrary has no paid features yet.

2. How we use it

• To operate the Service: show your profile, feed, and ratings to the right people.
• To recommend albums based on the genres you picked and who you follow.
• To enforce blocks and handle reports for moderation.
• To secure the account and prevent abuse.

Your rating history (every change to a song rating) is stored but never shown to you or anyone else — it exists only for potential future statistics features.

3. Who we share it with

We use third-party infrastructure to run the Service: Supabase (database, authentication, storage), Vercel (hosting), and Resend (delivering account emails like signup confirmation and password reset — this means your email address, and the content of those emails, passes through Resend's systems). We do not sell your data. Album search queries may be sent to the public MusicBrainz API, but this only sends the album/artist name you search for — not your identity.

4. Cookies

We use one functional cookie to remember your light/dark theme choice. We do not use tracking, analytics, or advertising cookies.

5. Your rights

Depending on where you live (including under GDPR/UK-GDPR), you may have the right to access, correct, or delete your personal data.

You can delete your account and all associated data — ratings, posts, comments, messages, follows — at any time from your profile. This action cannot be undone, and removes your data from our production database immediately. A copy may remain in our automated backups for up to 7 days before being purged — see Data Retention below.

Deleting individual pieces of content without deleting your whole account works differently depending on the content type — see Data Retention below.

To request a copy of your data or ask a privacy question, contact us at aybarsmv@gmail.com.

6. Children's privacy

Mubrary is not directed at children under 13, and we do not knowingly collect data from them (COPPA). Signup requires confirming you are 13 or older.

7. Data retention

We keep your data for as long as your account is active. Deleting your entire account removes your personal data and content — including messages you sent — from our production database immediately; a copy may persist in our automated daily backups for up to 7 days before being fully purged.

Deleting individual pieces of content while keeping your account works differently depending on the type:

• Posts are deleted immediately and permanently, along with their comments and likes.
• Comments are hidden immediately (their text is removed from display), but the underlying record is retained — to preserve the surrounding conversation for other users — until you delete your account.
• Removing a rating deletes it along with your full rating history for that song. Editing a rating's score, by contrast, keeps a silent record of past scores for as long as your account exists, so we can potentially build features like a yearly recap in the future; this history is never shown to you or anyone else.

8. Changes to this policy

We may update this policy from time to time and will post the new version here.

9. Contact

Privacy questions: aybarsmv@gmail.com