Privacy Policy

1. Who We Are

Evil en Lucifer ("Platform", "we", "us") is a digital preservation project dedicated to the cultural heritage of Visual Kei music. The Platform is operated independently and is not affiliated with any major record label or music corporation.

Contact: [email protected]
Website: evilenlucifervk.com

2. Information We Collect

2.1 Account Data

When you create an account, we collect:

• Email address — required for registration and authentication.
• User ID — a unique identifier generated at registration (UUID format). This ID is used internally to associate your data.
• Hashed password — stored in encrypted form. We never see or store your plain-text password.

2.2 Usage Data

While you use the app, we record:

• Listening history — tracks and albums you play, along with timestamps. Used to power playback features, listening stats, and your personal library.
• App interactions — feature usage events (e.g., which screens you visit, playlist actions). Collected in aggregate and anonymized via PostHog.
• Social interactions — community memberships, posts, and reactions you create within the Platform (if you use social features).
• Web analytics and performance (website only) — we use Cloudflare Web Analytics and related operational metrics to measure page visits, performance, availability, and aggregate country-level traffic on evilenlucifervk.com. We do not use precise (GPS-level) location tracking; country is inferred only at an aggregate level from network traffic. This information is not used for behavioral advertising or cross-site tracking, and no Cloudflare account token or credential is exposed to the browser. We do not claim that no technical data whatsoever is processed elsewhere in the delivery path — request metadata such as IP address and headers can be processed transiently by underlying network infrastructure even when the application itself does not store it.

2.3 Museum Archive Compliance Record

If you access the Museum Archive (orphan works collection), we store:

• The timestamp and version of the Museum Access Terms you accepted.
• Account eligibility confirmation.

This record is retained for compliance and rights-management purposes as long as your account exists.

2.4 Join the Scene Submissions (website only)

If you submit the "Join the Scene" form on evilenlucifervk.com to express interest in bringing a band to the Platform, we collect: band name, contact name, email address, country, preferred language, an official or social link for the band, your message, a declaration that you represent the band or are authorized to contact us on its behalf, and minimal technical data used for security and anti-spam purposes (including a Cloudflare Turnstile challenge response).

We use this information to respond to you, evaluate the band for possible inclusion on the Platform, begin a human-led onboarding conversation if appropriate, prevent abuse of the form, and keep a record of the communication.

Submitting this form does not create an account, does not automatically publish a band on the Platform, does not grant access to the Artist Console, does not transfer any rights, and does not create an automatic commercial relationship. Every submission is reviewed by a person before any further action is taken.

We retain Join the Scene submissions only for as long as reasonably necessary to evaluate and respond to the request, maintain relevant rights records, prevent abuse, and comply with applicable obligations. To request correction or deletion of a submission, email [email protected].

2.5 Technical Data

For error monitoring and performance, we collect:

• App version, platform (Android / iOS), and general device category (phone / tablet).
• Crash reports and error stack traces (via Sentry — no personal identifiers included unless you voluntarily submit a bug report).

2.6 What We Do NOT Collect

• We do not collect advertising identifiers (IDFA, GAID).
• We do not collect your real name, phone number, address, or payment card data.
• We do not track your location.
• We do not access your contacts, camera, or microphone (beyond what you explicitly permit for in-app features).
• We do not use any advertising SDK or data-broker integration.

3. How We Use Your Information

4. Third-Party Services

We use a limited set of trusted service providers. Each operates under its own privacy policy.

We do not use Facebook Audience Network, Google AdMob, or any other advertising network.

5. Data Storage and Security

Your data is stored on Supabase infrastructure with encryption at rest and in transit (TLS). Access is restricted to authenticated application code; no third party has unrestricted access to the database.

We apply principle-of-least-privilege access controls and conduct periodic security reviews. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

6. Data Retention

• Account data: retained as long as your account is active. Deleted within 30 days of an account deletion request.
• Listening history: retained for the lifetime of your account. Can be cleared on request.
• Museum Archive compliance record: retained for the lifetime of your account (compliance requirement).
• Crash & error logs: retained for up to 90 days by Sentry.
• Analytics events: retained for up to 12 months in PostHog (anonymized).

7. Your Rights

Depending on your jurisdiction (LGPD — Brazil, GDPR — European Union, CCPA — California), you have the right to:

• Access — request a copy of personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction / Objection — object to or restrict certain processing activities.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any right, email [email protected]. We will respond within 30 days. We may need to verify your identity before processing the request.

8. Museum Archive — Special Notice

Public Standard Alpha notice: The Museum Archive is not publicly available on this website during the Public Standard Alpha. The notice below describes a future restricted and curated service.

9. Children's Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

The Museum Archive is restricted to eligible verified accounts and is enforced at the server level.

10. International Transfers

Your data may be stored and processed in the United States (Supabase, PostHog, Sentry) and other countries where these providers operate. By using the Platform, you consent to this transfer. All providers are bound by data processing agreements or operate under recognized frameworks (EU-US Data Privacy Framework or equivalent).

11. Changes to This Policy

We may update this Privacy Policy periodically. For significant changes, we will notify you within the app. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

The "Effective" date at the top of this document reflects the date of the most recent revision.

12. Cookies and Local Storage

The website uses browser local storage (not advertising cookies) for strictly necessary purposes: keeping you signed in (session token), caching non-sensitive display data such as your username, and supporting security and anti-abuse tools such as Cloudflare Turnstile. Cloudflare Web Analytics (see Section 2.2) does not use cookies to track individual visitors across sites. We do not use advertising or cross-site tracking cookies. If optional, non-essential cookies or similar technologies are introduced in the future, they will be disclosed and controlled through an appropriate consent mechanism where required.

13. Profile Library and External Media References

If you use the Profile Library feature to add games, movies, series, or anime to your profile, we store the following data associated with your account:

• Media reference: external provider identifier (IGDB or TMDB ID), media type, title, and cover or poster URL sourced from the external provider.
• Your personal entry: status, rating (stars), review text, visibility setting (public or private), and timestamps.

If your visibility setting is public, your library entries and reviews may be visible to other users of the Platform. If set to private, entries are visible only to you. You can change visibility or remove items at any time from the app.

Cover images and posters are loaded from external providers (IGDB, TMDB) and are not stored on our servers. We do not claim ownership over third-party metadata, artwork, trademarks, or titles.

Game metadata is provided by IGDB (Twitch). Movie and series metadata uses the TMDB API — this product uses the TMDB API but is not endorsed or certified by TMDB.

14. Contact

For privacy-related requests or questions:

• Email: [email protected]
• Website: evilenlucifervk.com

For copyright and rights inquiries: [email protected]