Privacy policy.

• We collect what we need to run your page and the community, nothing more.
• We don't sell your data, run third-party ads, or use tracking pixels.
• No real money ever changes hands here. Coins are earned, never bought, so we don't hold any payment details.
• You decide who can message you, see your posts, find you in search, and see when you're online.
• You can ask us to delete your account and everything attached to it.

Account info. Your email address and password, handled by our login provider (Netlify Identity). We never see or store your password in plain text. Your email is private and is never shown on your page.

Profile info you choose to add. Username, display name, avatar, banner, bio, tagline, location, genres, instruments, artist type, featured track, social and streaming links, and how you've customized your page. All of this is meant to be public.

Stuff you post. Posts, comments, wall notes, likes, follows, band memberships, chat room messages, direct messages, and anything you upload, like images.

Activity. When you were last active (for the online indicator), a count of profile views, your coin and spin history, the items and badges you have, and your notifications.

Safety records. Reports you file or that are filed about you, and a log of moderation actions taken by staff, like bans, mutes, and removed content.

• To show your bio-link page, posts, and bands to the people you've allowed to see them.
• To deliver messages, notifications, follows, and mentions.
• To run the shop, daily spin, and coin balance.
• To keep the community safe: reviewing reports, stopping spam and scams, and enforcing bans.
• To send account emails like confirmation and password resets. No marketing emails.

Your page is public by default, because getting heard is the point. You can change that in settings:

• Who can view your profile and your posts
• Who can DM you, comment on your posts and profile wall, and tag you
• Whether people can see when you're online or when you were last seen
• Whether you show up in search and whether your follower list is visible
• Which of your badges are shown

If you block someone, they can't see or interact with you. Direct messages are only visible to the people in the conversation, but staff may review them when a message is reported or when we have to investigate abuse. Chat rooms are visible to their members.

Staff can see account details like your email and moderation history so they can help you and keep the site safe.

We use a small number of services to run the site, and they only get what they need to do their job:

• Netlify hosts the site, runs the database and file storage, and handles login.
• Spotify: when you add a Spotify link, we look up the public artist name for that link. Embedded players (Spotify, SoundCloud, and others) are loaded from those services and follow their own privacy policies.
• Google Fonts serves the site's typefaces.

We never sell or rent your personal information, and we don't share it with advertisers.

We only use the cookies needed to keep you logged in and protect your account. There are no advertising or cross-site tracking cookies.

We keep your data while your account is active. When you delete something, like a post, comment, or link, it's removed. If you delete your account, your profile, posts, and messages are removed. We may keep limited moderation records, like a ban for scams or harassment, for as long as we need them to protect the community.

You can view and edit most of your info at any time from your page and settings. You can also ask us to:

• Send you a copy of the data we have about you
• Correct something that's wrong
• Delete your account and the data attached to it

Depending on where you live, laws like the GDPR or CCPA may give you more rights. We'll honour them, and we won't treat you differently for using them.

You need to be at least 13 to make an account. If you're under the age of digital consent where you live, get a parent or guardian's permission first. If we learn that an account belongs to someone under 13, we'll remove it.

Everything is sent over HTTPS, passwords are handled by our login provider, and staff access depends on role. No system is perfect, so use a strong, unique password. If you think your account has been compromised, reset your password and tell us.

If we make a meaningful change to this policy, we'll update the date at the top and post about it on the site before it takes effect.

For privacy questions, data requests, or account deletion, email us at contact@miahmusic.art. We'll get back to you within 30 days.