Privacy Policy

1. Overview

MelodyLane (“we,” “us,” or “our") provides smart links, pre-save campaigns, and fan marketing tools for artists. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website, services, and any campaign pages created through MelodyLane.

2. Every piece of information we collect

This is the complete list. If it isn't here, we don't collect it.

• Account details (artists): Email address, password (stored only as a one-way hash), display name, and sign-in method. If you use Google sign-in, we receive your Google email and name from Google. Why: To create and secure your account.
• Profile & artist details: Handle, artist name, bio, profile/avatar photo, social links, team members you invite. Why: To show your public pages and let teams manage artists.
• Photos & files you upload: Cover art and avatar images (JPG, PNG, WEBP, GIF) and gated download files (audio, ZIP, PDF), plus their file type and size. Files are renamed randomly and kept in private storage. We do not read photo location (EXIF/GPS) data, and we never access your camera, photo library, microphone or contacts. Why: To display your pages and deliver downloads to fans.
• Campaign content: Release titles, dates, links, headlines, descriptions, colours, short links and their destinations, custom domain names. Why: To build and run your smart links.
• Fan emails: Email address, the page it was given on, time of sign-up, the consent tick, and unsubscribe time if they opt out. Why: So the artist can contact fans who agreed, and to honour unsubscribes.
• Visitor analytics (MelodyLane pages): Page views, link/button clicks, pre-saves and download unlocks; the time; which streaming service was chosen; the referring website and campaign source tag; browser and device type and the browser's user-agent text; a random visit ID. Why: To show artists how their pages perform.
• Approximate location: Country only, worked out from the visitor's internet connection. We do not collect GPS, precise location or street address. Why: For country breakdowns in analytics.
• IP address: Used briefly to block abuse (rate limiting on sign-ups, contact, unsubscribe and AI tools). Stored with a time stamp and deleted automatically within about a day. Our hosting providers may also keep IPs in short-lived security logs. Why: Security and spam prevention.
• Google Analytics (only after “Accept all”): Pages visited on the MelodyLane website, rough location, device, browser, and a Google cookie ID. Nothing loads from Google until you accept. On artist smart links hosted on melodylane.io it measures visits to those pages; it never loads on artists' custom domains. Why: To understand how people use the MelodyLane website.
• MelodyLane's Meta Pixel and Conversions API (only after “Accept all”): On MelodyLane's own website pages (never on artists' smart links or custom domains), Meta receives page visits and confirmed account registrations, Meta cookie and ad-click IDs, IP address, device and browser details. Our server can also report the same registration with a shared event ID to avoid double counting. No account email addresses are shared through this signup tracking. Why: To measure and improve MelodyLane's ads on Facebook and Instagram. Choose “Essential only” in Cookie settings at any time to withdraw permission. MelodyLane's TikTok Pixel (only after “Accept all”): On the same MelodyLane pages (never on artist custom domains), TikTok receives page visits and confirmed account registrations, TikTok cookie and ad-click IDs, IP address, device and browser details. No account email addresses are shared. Why: To measure and improve MelodyLane's ads on TikTok. Withdraw anytime with “Essential only” in Cookie settings.
• Artist advertising pixels on smart links (only after “Accept all”): Artists on Pro may add Meta, TikTok, Google Analytics or Google Ads pixels to their smart links. With your consent, those companies receive the page you viewed, the music service you tapped or that you signed up, plus their cookie IDs, ad-click ID, an anonymous visitor ID and device details. If the artist connects Meta's Conversions API and you join their email list, your email is sent to Meta only in hashed (scrambled) form so Meta can match the sign-up; it is never sent in plain text. No email addresses are shared with TikTok or Google. Why: So the artist can measure and run ads to people who visited. Choose “Essential only” or change your cookie choice any time to stop this.
• Crash and error reports: When the app breaks, a technical report: the error message, the code location, the page address and browser details. We don't intentionally include form contents or passwords. Why: To find and fix bugs.
• YouTube Video Hero: Video thumbnails load from YouTube image servers, which receive connection information such as your IP address. Only tapping Play loads the youtube-nocookie.com player and authorizes YouTube to process playback and device information under its policies. Privacy-enhanced mode does not mean zero data collection. You can leave the video unplayed and use the streaming buttons. Changing your cookie choice to Essential only stops an active player; you may explicitly choose to play again.
• Payments: Handled by Stripe. We receive a customer ID, plan, subscription status, renewal date and any promo code used. We never see or store full card numbers. Why: To give you access to paid plans.
• Support messages: Name, email, topic and message you send through the contact form, and your account ID if signed in. Why: To answer you.
• Promo copy you check with AI: Text you paste into the Claim checker is sent to our AI provider to produce the review. We don't save it to your account. Why: To flag unsupported claims.
• Stored on your device: Your cookie choice; your sign-in session; a random visit ID (only after “Accept all”); a temporary note of the page to return to after sign-in; and a local copy of demo page stats in the editor. Why: To keep you signed in and remember choices.

We do not collect: precise/GPS location, contacts, camera or microphone access, health data, government IDs, or full payment card numbers. We do not sell personal information or use it for advertising profiles.

3. How we use information

• To provide, maintain, and improve MelodyLane services.
• To display analytics and insights about your campaigns.
• To process payments and manage subscriptions.
• To communicate with you about product updates, security, and support.
• To comply with legal obligations and protect our rights.

4. Sharing your information

We never sell your data — to anyone, for any reason. We do not sell, rent, trade or broker personal information, including fan email lists collected through MelodyLane pages, and we do not pass it to data brokers, ad networks or data exchanges. We share data only with the trusted service providers necessary to operate MelodyLane, namely Stripe (payments), Google (sign-in and, only with consent, Google Analytics), Meta (advertising measurement on our own website, only with consent), our hosting, database and file-storage providers, our error-reporting provider, and our AI provider (Claim checker text only). We may also disclose information if required by law or to protect our users.

5. Cookies and tracking

Essential storage (always on) keeps you signed in and records your cookie choice, when you made it and the notice version, retaining the most recent acceptance when you withdraw. Optional storage (only after “Accept all”) adds Google Analytics cookies, the MelodyLane Meta Pixel, the MelodyLane TikTok Pixel and a saved visit ID. Consented ad-click and campaign tags may be kept for up to 24 hours in your browser session to connect signup with the ad that brought you here. Choose “Essential only” in Cookie settings to refuse optional storage and stop future browser and server advertising events; you can also clear cookies in your browser.

Analytics that run without consent (strictly necessary / first-party)

Hosting platform. Our site is hosted on Lovable. Like most hosting providers, the platform loads a small script (/~flock.js) and sends essential operational telemetry to its own endpoints on our domain (/__l5e/trackevents and /~api/analytics), such as which page was requested, basic browser and device information and performance or error data, so the site can be served, kept secure and kept running. We use it only for that purpose and never for advertising. For how the platform handles this data, see Lovable's privacy policy.

MelodyLane's first-party service analytics. On smart links and artist pages we record page views, taps (including which service was tapped), pre-saves and download unlocks so artists can see their Insights. For each event we store: the smart link (campaign) ID; the event type; a random session ID; your country (derived from your IP address by our network provider; the IP address itself is not stored); the referring page; your browser's user agent and the browser, device and channel categories derived from it; and an A/B variant or "Paid ads" source tag where used. Without "Accept all", the session ID is a one-off random ID created for that page view and is not saved in your browser; after "Accept all", a random visit ID is saved in your browser's local storage so repeat visits can be counted once. No IP address, name or email is stored with these events (emails are only stored if you choose to sign up on a page).

This runs without cookie consent because it is first-party, strictly necessary for the service artists use, isn't shared with advertisers and doesn't load third-party trackers. Third-party analytics and advertising trackers (Google Analytics, Meta Pixel, TikTok Pixel and artists' own pixels) still load only after "Accept all". These events are kept while the artist's smart link exists and are deleted automatically when that link is deleted.

6. Data retention

We keep your information for as long as your account is active or as needed to provide services. You can delete your account or request data deletion by contacting us. Some data may remain in backups or logs for a limited time.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information. To exercise these rights, contact us at the email below.

8. Children's privacy

MelodyLane is not intended for children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our site and updating the effective date.

10. Fan email collection and legal basis

When a fan joins an artist's list on a MelodyLane page, they must tick a box agreeing to receive emails from that artist. Legal basis: Consent (GDPR Art. 6(1)(a)) — fans tick a box agreeing to receive emails from the artist. Roles: MelodyLane processes fan emails on behalf of the artist, who is the controller. Fans can unsubscribe at any time using the link in any email or on our unsubscribe page, and can ask for their data to be deleted.

11. Who we are and how to contact us

MelodyLane is operated by Avalon City Music Collective (operating MelodyLane) (Independent music collective based in California, United States).

Mailing address: Los Angeles, CA, USA

Privacy questions: support@melodylane.io

EU/UK representative: Not applicable