Last updated: September 8, 2022
APPLICABLE TO ALL USERS
We use two cookies that contain sensitive information:
remember_login: If you choose the "Log in permanently" option when logging in to one of our sites; the cookie will be used to remember your login details.
server_session, session, or connect.sid: If you are logged into one of our sites, your current session ID is stored in this cookie.
We may store dynamic preference information in other cookies, but these do not contain any sensitive information.
Web and FTP access logs
In a practice similar to other WebsItes we keep logs of all web requests made against our servers. These logs include: your IP address, your browser's "User-Agent" string, and which page you requested. Aggregate information about web and FTP traffic is made available to the public via our site usage pages.
When creating an account with a project you need to pick a unique username and choose a password, the username you pick is the only name associated with your account and will be what other users know you as. You may optionally also tell us other information about yourself that will be displayed to other users and the public.
Additionally, in order to edit the data you will need to provide a confirmed email address. This email address will be held in confidence, the only method of revealing your email address to another user is if you choose to send a message to another user and enable the option to "reveal my email address". Changing the email address stored with your account will require you to verify the new address.
Edits and Notes
If you make any changes to a project database, such as adding any data, the details of those changes will be visible to other logged-in users and the change will be associated with your username.
As a logged-in user you can subscribe to one or more artists, labels, collections or other editors. The act of subscribing causes any edits made to (or by in the case of another editor) those entities to be emailed to you. By default, other users can see your list of subscriptions, however, you can opt out of this by editing the appropriate preference.
This does not provide "perfect" privacy though, in some cases it will be possible to infer information about the contents of your subscription list even though you have disallowed others from viewing that list directly. This imperfection arises because various parts of the system behave differently depending on whether or not an entity has any subscribers; also, the number of users subscribed to each artist is available via the artist pages. In the most extreme (possibly contrived) example, imagine that all users have their subscriptions set to "public", except for exactly one user whose list is "private". In that case, any discrepancy for a given artist between the shown list of subscribers and the total number of subscribers must be down to that one user. Thus, you can infer what artists are on that user's list.
The localization service we use for creating localized versions of the sites embeds email addresses into translation files that will be checked into our git repositories. If you participate in translating, your e-mail address will be visible in our git repositories.
No personal data is needed to browse the contents on our platform. You do not have to provide any personally-identifying information if you choose not to. We will never reveal your email address on our controlled web sites. In order to get maximum value out of the platform, you may want to create an account and log in.
Doing so grants you the ability to: edit the databases, contribute your own data, communicate with other users, and keep track of recently released music from artists in your collection. If you choose to create an account then the minimum is that you: choose a unique username and password, use a web browser that accepts "session" cookies, and provide a verified email address.
If you do not create an account (or are not logged in) you will not have access to the above listed features, however, you will still have full access to browse and examine the databases.
Our project's web pages may load some third-party content. Some, but possibly not all sites are listed below:
Cover art and other images: These are provided by the various cover art sites that have given permission to do so and our own Cover Art Archive. This means that the relevant site will know (if they want to) your IP address, User-Agent string, etc., and which Third-Party Sites such as MusicBrainz, Discogs, Spotify and other web pages you were visiting (the one which included the cover art image).
ISNI: Some of our datasets are fetched from our partner ISNI (www.isni.org)
AcoustID: Our fingerprints tab loads fingerprint information from acoustid.org.
reCAPTCHA: Our account creation page loads third party content in order to prevent spammers from creating accounts.
The above information assumes that you are using "normal" web browser settings, whereby images are always loaded and HTTP referrer information is always sent.