MetaBrainz
The MetaBrainz Foundation is a non-profit that operates the MusicBrainz project and several other related projects.
Score
Notes
Data isn't used for targeted marketing
Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.
Score
Citation
Our process of automatically deleting your accounts across the MetaBrainz ecosystem is not complete yet (see below for a set of tickets where you can track our progress). If you would like to delete your accounts in the MetaBrainz ecosystem or mark a donation that is currently public as a private donation, please contact us and we will address your request as soon as possible.
Notes
Quoted from their GDPR statement at https://metabrainz.org/gdpr. More info on how to delete your data.
This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).
Note that whether the policy allows sharing aggregated user data does not affect this question.
If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).
If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).
Score
Notes
Data isn't shared with third parties
Score
Citation
Please note: Reasonable exceptions may apply to the above policy, for example to comply with applicable laws.
Score
Notes
This policy doesn't detail how data is secured
Score
Notes
There is no changelog or date
Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.
Score
Notes
This policy doesn't require the service to disclose data breaches
Score
Notes
Users aren't notified of policy changes
This includes the use of data brokers and independent verification authorities (such as background check providers).
Score
Citation
Our projects' web pages may load some third-party content. Some, but possibly not all sites are listed below:
Cover art and other images: These are provided by the various cover art sites that have given MusicBrainz permission to do so and our own Cover Art Archive. This means that the relevant site will know (if they want to) your IP address, User-Agent string, etc., and which MusicBrainz web page you were visiting (the one which included the cover art image).
AcoustID: Our fingerprints tab loads fingerprint information from acoustid.org.
reCAPTCHA: Our account creation page loads third party content in order to prevent spammers from creating accounts.
The above information assumes that you are using "normal" web browser settings, whereby images are always loaded and HTTP referrer information is always sent.
It is impractical to constantly modify this privacy policy when MusicBrainz changes which third party content it utilizes. We will aim to use common sense, respect to our community and community review when adding more content from third party sites. We will also periodically review our policy to ensure that it remains current.
Score
Citation
As a logged-in user you can subscribe to one or more artists, labels, collections or other editors. The act of subscribing causes any edits made to (or by in the case of another editor) those entities to be emailed to you. By default, other users can see your list of subscriptions, however, you can opt out of this by editing the appropriate preference.
This does not provide "perfect" privacy though, in some cases it will be possible to infer information about the contents of your subscription list even though you have disallowed others from viewing that list directly. This imperfection arises because various parts of the system behave differently depending on whether or not an entity has any subscribers; also, the number of users subscribed to each artist is available via the artist pages. In the most extreme (possibly contrived) example, imagine that all users have their subscriptions set to "public", except for exactly one user whose list is "private". In that case, any discrepancy for a given artist between the shown list of subscribers and the total number of subscribers must be down to that one user. Thus, you can infer what artists are on that user's list.
Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.
Score
Notes
Data isn't used for non-essential purposes
Score
Citation
When creating an account with a MetaBrainz project you need to pick a unique username and choose a password, the username you pick is the only name associated with your account and will be what other MetaBrainz users know you as. You may optionally also tell us other information about yourself that will be displayed to other MetaBrainz users and the public.
Additionally, in order to edit the databases you will need to provide a confirmed email address. This email address will be held in confidence, the only method of revealing your email address to another user is if you choose to send a message to another user and enable the option to "reveal my email address". Changing the email address stored with your account will require you to verify the new address.
If you make any changes to a MetaBrainz project database, such as adding any data, the details of those changes will be visible to other logged-in users and the change will be associated with your username.
Last Updated
May 26, 2021
Sources
Contributors