Privacy Policy

Overview

Moonwax ("we", "us", "our") is a music ranking platform operated as an independent project. This policy explains what data we collect, how we use it, and your rights over it. We keep things simple: we collect only what we need to run the service, we do not sell your data, and you can delete your account at any time.

Data we collect

When you use Moonwax, we collect the following information:

• Email address — used for account authentication and important service notices.
• Display name and username — the public identifiers you choose for your profile.
• Bio — optional profile text you provide.
• Rankings — your personal ranked lists of albums, songs, and artists.
• Reviews and notes — any written content you attach to ranked items.
• Follows — the accounts you follow and your followers.
• Activity — ranking and review events that appear in follower feeds.
• Usage data — standard server logs (IP address, browser/device info, pages visited) retained briefly for security and debugging.

We do not collect payment information, precise location data, or any data beyond what is listed above.

How we use your data

• To provide and improve the Moonwax service.
• To display your profile, rankings, and activity to you and (where public) other users.
• To calculate community scores and power the Charts and Discover features.
• To send transactional emails (e.g. password reset) — no marketing emails without opt-in.
• To detect abuse and maintain platform security.

Third-party services

Moonwax uses the following third-party services to operate:

• Supabase — provides authentication and the underlying database. Your account credentials and all app data are stored on Supabase infrastructure. See supabase.com/privacy.
• Spotify — optionally used during import to read your saved albums and playlists. We request read-only access and never store your Spotify credentials. Spotify data is used only to populate your import queue and is not retained after the session. See spotify.com privacy policy.
• MusicBrainz — an open music encyclopedia we query for album, song, and artist metadata (titles, artwork, release dates). No personal data is sent to MusicBrainz. See metabrainz.org/privacy.
• Amazon Web Services (AWS) — hosts the Moonwax application servers and API. Data processed by the app transits through AWS infrastructure. See aws.amazon.com/privacy.

We do not share your personal data with any other third parties, and we do not sell, rent, or trade your data under any circumstances.

Data retention and deletion

We retain your data for as long as your account is active. You can permanently delete your account at any time via Settings → Delete account. Deletion removes your profile, rankings, reviews, follows, and activity from our database. Residual copies in backups are purged within 30 days.

Server logs are retained for up to 90 days for security purposes, then deleted automatically.

Cookies and local storage

Moonwax uses cookies and browser local storage solely for authentication session management. We do not use advertising cookies or third-party tracking pixels.

Children's privacy

Moonwax is not intended for users under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Moonwax after changes are posted constitutes acceptance of the updated policy.