Privacy Policy
This Privacy Policy explains what information MusicXen ("MusicXen," "we," "us," or "our") collects, how we use it, and the choices you have. It applies to the MusicXen website, our mobile applications (the MusicXen app and the MusicXen Player), and related services (together, the "Service"). By using the Service you agree to this Policy.
1. Information We Collect
Account information. When you create an account we collect your name, username, email address, password (stored only as a salted cryptographic hash — we never store or see your plain-text password), and date of birth. We require a date of birth because venues on MusicXen set age policies for shows (for example, 18+ or 21+), and a member's eligibility for an age-restricted booking is checked against it. You may optionally provide a mobile phone number, gender, city and state or ZIP code, genres, roles, and other profile details.
Profile and content. Photos, music and recordings, posts, comments, reactions, messages, reviews, band and venue information, show and booking details, and other content you submit to the Service.
Listening history. When you play music on MusicXen, we record what you played ("scrobbles") so we can show your listening history and statistics. In our Player app, with your explicit opt-in, listening in other music apps can be recorded the same way using Android's notification access, which you grant and can revoke at any time in your device settings. If you connect a Last.fm account, we import your listening history from Last.fm through its official interface, using an authorization you grant; we never receive your Last.fm password.
Invitations. If a member invites you to MusicXen, that member provides us your email address or phone number so the invitation can be matched to your signup. We use it only for that purpose.
Verification. If you verify your phone number, our verification provider (Firebase) processes the number to send and confirm a one-time code. If you follow an email verification link, we record that your email address was verified.
Technical information. Session cookies (see Section 6), push-notification tokens if you enable notifications, and standard server logs (pages requested, timestamps, and error information) used to operate and secure the Service.
2. How We Use Information
- To create and maintain your account and provide the Service;
- To match musicians, bands, venues, and shows, and to operate booking and performance-agreement tools — including checking age-policy eligibility for bookings;
- To display your profile, content, and listening history as you direct;
- To send service communications: verification emails and texts, booking and show notifications, invitations at a member's direction, and password resets;
- To prevent fraud, spam, and abuse, and to enforce our Terms of Service;
- To improve the Service and to comply with legal obligations.
We do not use your information for third-party advertising, and we do not sell your personal information.
3. What Is Public and What Is Private
- Public: your profile and username page, profile photo, the location and genres you choose to display, posts, comments, reactions, band and venue pages you manage, shows, and reviews.
- Never displayed publicly: your email address, phone number, and password. Your exact date of birth is never shown on your profile; when a booking is checked against an age policy, the members involved in that booking see the member's age and whether the policy is met — not a public listing of birthdays.
- Listening history is private by default. It is visible to others only if you choose to make your listening history or listening statistics public in your settings. Scrobble data synced from your connected accounts follows the same rule.
- Messages you send are visible to their recipients. Content you share to a show's media pool is visible as described where you share it.
4. How We Share Information
We share personal information only:
- With other members, as the features you use direct — for example, your public profile, your messages to their recipients, and age-eligibility results to the parties to a booking;
- With service providers who process data on our behalf under contract: cloud hosting (Render), file storage (Cloudflare), email delivery (Resend), and phone verification and push notifications (Google Firebase). Providers may use the information only to perform their services for us;
- For legal reasons, if required by law, subpoena, or court order, or to protect the rights, safety, and property of MusicXen, our members, or the public;
- In a transfer of the Service, if MusicXen is merged, acquired, or sold, with notice to members where practicable.
We do not sell or rent email addresses, phone numbers, or any other personal information, and we do not share it for third-party marketing.
5. Your Choices and Rights
- Access and export: you can download a copy of your account data from the Service's export tools, or request it by email;
- Correction: you can edit most profile information in your settings at any time;
- Listening privacy: you control whether your listening history and statistics are public; you can disconnect Last.fm and revoke the Player's notification access at any time;
- Deletion: you can close your account through your settings or by contacting us. Closing your account removes your profile from the Service; some information may persist briefly in encrypted backups, and records of signed performance agreements may be retained as required for the parties' records and legal compliance;
- State privacy rights: residents of states with consumer privacy laws (including Utah and California) may request access to, correction of, or deletion of their personal information, and confirmation of whether we process it. We honor these requests for all members regardless of state. We do not discriminate against anyone for exercising a privacy right. Send requests to musicxen@gmail.com.
6. Cookies
We use essential cookies only: a session cookie that keeps you signed in and a signup cookie that remembers your place in the registration process. We do not use third-party advertising or cross-site tracking cookies.
7. Data Retention
We keep account information while your account is active. Listening history you imported or generated remains part of your account until you delete it or close your account. Server logs are retained for a limited period for security and operations, then deleted or anonymized.
8. Security
Passwords are stored as salted one-way hashes; connections to the Service are encrypted in transit (HTTPS); and access to production systems is restricted. No system is perfectly secure, and we cannot guarantee absolute security — please use a unique password for MusicXen.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Members under 18 cannot be booked for shows whose age policies they do not meet. If you believe a child under 13 has an account, contact us and we will remove it.
10. Changes to This Policy
We may update this Policy. Material changes will be announced on the Service or by email, and the "Last updated" date will change. Your continued use after changes take effect constitutes acceptance.