Privacy Policy

Last updated: October 14, 2025

Your privacy matters. This policy explains what data we collect, how we use it, and your rights. We keep it simple and transparent.

1. What Data We Collect

Account Information

  • Email address - Used for authentication (magic link login)
  • Username - Your unique handle (e.g., @username)
  • Bio - Optional profile description (max 500 characters)
  • Avatar - Optional profile image

Activity Data

  • Favorited artists - Artists you've added to your profile
  • Profile privacy setting - Whether your profile is public or private

Technical Data

  • Cookies - Used for authentication and session management
  • Analytics (planned) - We plan to use PostHog for basic usage analytics (page views, feature usage). This is not yet active but will be added in the future.

2. How We Use Your Data

  • Display your profile and favorites to other users (if your profile is public)
  • Send you login links via email
  • Improve the service and understand how it's used (via analytics, when implemented)
  • Communicate important updates about the service

3. Who We Share Data With

We use third-party services to operate My K-pop List. Your data may be processed by:

  • Resend - Email delivery service (for magic link authentication)
  • Cloudflare R2 - Image storage (for avatars and artist images)
  • PostHog (planned) - Privacy-focused analytics platform

We do not sell your data to third parties. Ever.

4. Cookies

We use cookies to keep you logged in and manage your session. These are essential for the service to work. We don't use tracking cookies for advertising.

5. Your Privacy Controls

  • Profile privacy - You can set your profile to private, making it visible only to you
  • Edit your data - Update your bio, username, or avatar anytime from your profile settings
  • Delete your avatar - Remove your profile image with one click

6. Data Retention

We keep your data as long as your account is active. If you want to delete your account and all associated data, email us at privacy@mykpoplist.com and we'll process your request.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of incorrect data
  • Request deletion of your data
  • Object to or restrict certain types of processing
  • Export your data in a portable format

To exercise these rights, contact us at privacy@mykpoplist.com.

8. Data Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS) and secure password hashing. However, no system is 100% secure. Use My K-pop List at your own risk.

9. Children's Privacy

My K-pop List is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If we discover we have, we'll delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we'll notify you via email or a site-wide announcement.

11. Contact

Questions about privacy or data requests? Email us at privacy@mykpoplist.com.