This Privacy Policy describes how MusicLib (https://music.dherel.com) collects, uses and protects your personal data, in compliance with Brazil's General Data Protection Law (Lei nº 13.709/2018 — "LGPD") and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Who is the data controller
The controller responsible for processing your data on this site is the administrator of MusicLib. Contact for privacy matters and data-subject requests: dherel@gmail.com.
2. What data we collect
This site is a streaming app for your personal music library. We collect only what is needed:
Account data (registered users only): name, username and email provided at sign-up.
Local preferences: language and theme, stored as cookies in your own browser.
Usage statistics (Google Analytics): pages visited, visit duration, device and browser type, and anonymized IP address. These are only collected if you accept analytics cookies.
3. Purpose and legal basis
We process your data to:
Authenticate and operate the account — legal basis: performance of a contract (art. 7(5), LGPD).
Remember your preferences (language/theme) — legitimate interest in improving the experience.
Usage statistics (Google Analytics) — legal basis: consent (art. 7(1) and art. 8, LGPD). Nothing is collected before you accept.
4. Cookies we use
Session: keep you logged in (removed on logout).
Preferences: language and theme (up to 1 year).
Consent (cookie_consent): records whether you accepted or declined analytics cookies (up to 1 year).
Google Analytics (_ga, _ga_*): created only after consent and used anonymously to measure audience.
You can decline or change your mind at any time (see section 7).
5. Sharing & international transfer
We use Google Analytics, a US provider (Google LLC). When you accept, statistics data is sent to Google, which involves an international transfer. Google acts as a processor and applies adequate safeguards. We do not sell your personal data.
6. Retention
Account data is kept while the account exists. Google Analytics statistics are retained per Google's setting (default 14 months) and then aggregated or deleted. Preference/consent cookies expire within 1 year.
7. Your rights (LGPD art. 18)
You have the right to:
Confirm processing and access your data;
Correct incomplete or outdated data;
Portability and anonymization;
Deletion of data (subject to legal retention exceptions);
Withdraw consent at any time, without affecting prior lawful processing;
Object to processing based on legitimate interest.
You can withdraw at any time: (a) clear this site's cookies in your browser (which deletes cookie_consent and the GA cookies); or (b) revisit the site and use the cookie notice to change your choice. When you decline, Google Analytics is not loaded.
9. Security
We apply technical and organizational measures to protect your data (hashed authentication, prepared statements against SQL Injection, security headers, restricted admin access). No system is 100% secure, but we work to reduce risks.
10. Children and teenagers
The service is not directed to children. We do not knowingly collect data from anyone under 13. If you believe a minor provided data, contact us for removal.
11. Changes to this Policy
We may update this Policy to reflect legal or functional changes. The update date appears at the top of this page. We recommend reviewing it periodically.