Privacy Policy
Last updated: 11 October 2026
Musifans is designed to collect as little data as possible: fans can listen to, buy or support an artist without creating an account, and only their email address is needed to receive their purchase. This policy explains which data we process, why, for how long, and what your rights are.
1. Data controller
Neurosound Ltd, publisher of Musifans®, 20 Wenlock Road, London, N1 7GU, England (Companies House no. 17324409). Contact for any question about your data: support+legal@neurosound.bio.
Processing is subject to the UK GDPR and the Data Protection Act 2018. For people located in the European Union, the EU General Data Protection Regulation (GDPR) also applies.
2. The data we process
Artists
- Account: email address, password (stored in irreversibly hashed form, never in plain text), sign-up and last sign-in dates.
- Public profile: artist name, optional first and last name, photo, biography, country, currency, website and social links.
- Content: tracks, artwork, loops, perks, concerts.
- Payments: identity verification, bank details and legal information are collected and stored directly by Stripe. Musifans only receives the Stripe account identifier and its status (payments and payouts enabled or not).
- Sales: amounts, commissions, Stripe fees and payment references, for accounting and for display in the artist dashboard.
Fans
- When buying or supporting: email address and, optionally, first name, a message for the artist and the name of the person a shout-out is for.
- Card details: entered on Stripe's payment page. Musifans never has access to them.
- Fan versions: the first name or nickname you choose to display, and the sequence of loops you created.
All visitors
- Anonymous statistics: when a QR code is scanned, a page is viewed or a preview is played, we record the date, the device type (phone, tablet, computer) and a random visit identifier unrelated to your identity. No IP address is kept in these statistics and no advertising tracker is used.
- Technical logs: the server briefly keeps the information needed for security (IP address, date, page requested), in particular to limit abusive sign-in attempts.
- Reports: your message and, if you provide it, your email address.
3. Why we use it
- Performing the contract (legal basis: contract): creating and managing the artist account, publishing pages, collecting payments, delivering purchased tracks, opening the studio, passing perk orders to the artist, sending confirmation emails.
- Complying with our legal obligations (legal basis: legal obligation): accounting, fraud prevention, responding to authorities.
- Running and securing the service (legal basis: legitimate interests): anonymous statistics provided to artists, abuse prevention, moderation of reported content.
We send no marketing communications and never sell any data.
4. Who receives your data
- The artist concerned by your purchase: your email address, first name and message if any, so they can fulfil your order and reply to you. Artists must not use this information for any other purpose.
- Stripe, to process payments and verify artists' identity. For these operations Stripe acts as an independent controller.
- Brevo, to send transactional emails.
- Our hosting provider, Settle, which operates the datacentres.
5. Transfers outside the United Kingdom and the European Union
The website is hosted in the United States and some providers may process data outside the United Kingdom and the European Economic Area. These transfers are covered by appropriate safeguards, including standard contractual clauses and the UK International Data Transfer Addendum. You can obtain a copy by writing to support+legal@neurosound.bio.
6. Retention periods
- Artist account: for as long as the account exists, then deleted within 3 months of closure, except for sales data.
- Orders and sales data: 6 years, the record-keeping period applicable in the United Kingdom.
- Download link: valid for 30 days after purchase, up to 10 downloads.
- Statistics: kept in anonymous form, without time limit, as they cannot identify you.
- Sign-in tokens: 60 days for "Stay signed in", one hour for a password reset link.
- Reports: 2 years after they have been handled.
7. Cookies and local storage
Fonts are hosted on our own servers: no connection is made to Google when you visit. The cookies below are needed for the site to work, except the Meta pixel, which is only set if you accept it.
Meta pixel (advertising). On the home page, the guide and the sign-up page, and only if you click “Accept” in the banner, Musifans loads the pixel of Meta Platforms Ireland Ltd. (Facebook, Instagram). It measures whether our ads brought you to the site and whether you created an artist space, and helps show our ads to people likely to be interested. When you sign up, your email address is sent to Meta in encrypted (hashed) form to link the sign-up to the ad. Legal basis: your consent. Meta may process this data outside the European Union, under its own safeguards. Artist and track pages, seen by fans, never load this pixel. You can change your mind at any time with the “Manage cookies” link at the bottom of the page.
| Name | Purpose | Duration |
|---|---|---|
mf_s | Session: keeps you signed in and protects forms. | End of session |
mf_r | "Stay signed in", for artists who tick the box. | 60 days |
mf_v | Random visit identifier for anonymous statistics. | End of session |
mf_like | Remembers the artists you liked, so each visitor counts only once. Random identifier, no personal data. | 1 year |
mf_qr | Links a purchase to the QR code scanned just before, for the artist's conversion rate. | 48 hours |
mf_lang | Remembers the language you chose (French, English, Spanish or Italian). | 1 year |
mf_theme | Remembers the display you chose (light or dark mode). | 1 year |
mf_consent | Remembers your choice about the Meta pixel. | 6 months |
_fbp, _fbc | Meta pixel, only if you accept it: ad measurement. | 90 days |
The "Create my version" studio also keeps a draft of your version in your browser's local storage, so it is not lost if the page reloads. It stays on your device and is never sent until you save your version.
8. Security
All pages are served over HTTPS. Passwords are stored in irreversibly hashed form, purchased files can only be reached through a personal, time-limited link, and payment data never passes through our servers.
9. Your rights
You may at any time request access to your data, its rectification or erasure, the restriction of its processing, object to processing based on our legitimate interests, and request the portability of the data you provided. Write to support+legal@neurosound.bio; we reply within one month.
You may also lodge a complaint with the supervisory authority: in the United Kingdom, the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk; in the European Union, the authority of your country of residence (in France, the CNIL, cnil.fr).
10. Minors
Artist accounts are reserved for adults, or for minors authorised by their legal guardian where Stripe allows it. A purchase made by a minor requires the consent of the holder of the payment method.