Privacy Policy

tastedtracks
Belgium — full registered address required before launch
Privacy contact: mzy.software.help@gmail.com

• Account data: email, password (stored hashed by our auth provider), username, display name, avatar, bio, favorite artists/tracks.
• Social data: posts, reactions, song replies, follows, pinned songs.
• Waitlist: email and optional name, plus consent records.
• Game (without account): gameplay progress may be stored locally in your browser; we do not require an account to play.
• Technical data: IP address, browser type, device information, and server logs for security and operation.
• Reports: if you report content, we process the information you submit.

• Provide the service (account, feed, profiles, game): performance of a contract.
• Waitlist notifications about launch: consent (you may withdraw at any time).
• Optional marketing emails: separate consent where required.
• Security, fraud prevention, and service improvement: legitimate interests, balanced against your rights.
• Legal compliance and responding to lawful requests: legal obligation.

We use trusted processors to run the service, including Supabase (hosting, database, authentication) and infrastructure providers. Some processors may process data outside the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and processor agreements.

We recommend configuring Supabase in an EU region where possible.

Track titles, artist names, album artwork, store links, and short preview clips are provided via third-party music APIs (including Apple iTunes Search). We do not host full music tracks uploaded by users. Preview playback is subject to the applicable platform terms.

• Account data: kept while your account is active, then deleted or anonymised after deletion, subject to legal retention needs.
• Waitlist data: until launch notification is sent or you withdraw consent, then deleted within a reasonable period.
• Server logs: typically up to 90 days unless needed for security investigations.
• Content reports: retained as long as needed to handle the report and comply with law.

If you are in the EEA/UK, you have the right to access, rectify, erase, restrict, object (where applicable), and data portability. You may withdraw consent at any time without affecting prior processing.

Use Privacy settings (when signed in) to export or delete your account, or email mzy.software.help@gmail.com. We respond within one month as required by GDPR.

You may lodge a complaint with the Belgian Data Protection Authority (APD/GBA) (https://www.autoriteprotectiondonnees.be).

tastedtracks is not directed at children under 16. You must confirm you meet the minimum age when creating an account.

We may update this policy. Material changes will be communicated where appropriate. The "Last updated" date shows the current version.