Privacy

Effective September 16, 2026

What we store

We store your username, email, password hash, recovery-key hash, session records and account preferences. Your music library includes ratings, track metadata, notes, tags, favorites, blocked artists, queues and discovery history. Profiles can include a name, photo, short bio, location and links. Friendships and songs sent to friends are stored to support those features.

Why we use it

We use this information to operate accounts, preserve your library, generate recommendations and comparisons, support sharing and prevent abuse. Passwords and recovery keys are hashed, not stored as plaintext. Technical logs and hashed request identifiers may be used for reliability and rate limiting. Security controls reduce risk but cannot eliminate it.

Fonts load from Google Fonts, which receives your IP address and browser request information. Music artwork and embedded players contact their respective providers.

Your visibility controls

Profiles and ratings start public; notes start private. Ratings, notes and activity have separate visibility controls, with song-level overrides. Friends cannot access content marked private. Your email, password information, private notes and blocked-artist list are not part of a public profile. Public content may be copied or indexed by third parties.

Cookies

Essential cookies identify guest libraries and signed-in sessions. The guest cookie lasts up to a year; clearing it can remove guest access. Account sessions expire after seven days or one day of inactivity. Password changes and recovery revoke existing sessions. No advertising or analytics SDK is installed by VALID TASTE.

Music providers and hosting

Searches or music links are sent to the relevant provider. Apple, Spotify, SoundCloud and image providers may receive technical information such as your IP address when their content loads, and their own cookies and policies may apply. Hosting and backup providers process data needed to operate this website. Data may be processed in their server locations.

Email

Email addresses are unverified and private. Marketing updates are optional and can be disabled in Account settings. We do not sell your personal information. Account recovery uses your recovery key, not an unverified email address.

Retention and deletion

Your library remains while you keep it with us. Deleting your account removes it and associated personal data from the active database. Operational backups are retained for up to 30 days unless a longer period is legally required; deleted data may remain in those copies until expiry. Shared catalog metadata and copies that others saved are separate. Guest users can contact support about access or deletion while they still have their guest session.

Your choices and rights

You can edit ratings, change sharing settings, remove friends, block users, export your library and delete your account. Depending on your location, you may have additional rights to access, correct, delete, restrict or object to processing, or complain to a privacy authority. Contact us to exercise a right; we may need to verify ownership without asking for your password or recovery key.

Age and policy updates

The service is for people aged 16 or older. Contact us if you believe a younger person has supplied personal information. We update this policy when practices change and provide notice of material changes where required.