Privacy policy

What we hold about you, where it sits, and who else gets to see it. If a thing is not listed here, we do not collect it.

What we store

Your account

Your music

The releases, tracks, artwork and audio you upload, the credits and splits you enter, and the identifiers (UPC, ISRC) allocated to them.

Your money

The statements reported for your music, every movement in your balance, and your withdrawals. Of the account you withdraw to, we keep only the last four characters — enough for you to recognise it and for us to confirm a transfer, and not enough to be worth stealing. We never store a full bank account number, IBAN or card number, and we never ask for one through the website.

What the system does on its own

Our servers keep ordinary request logs, and we record who at MOOZLO acted on your money — who approved a withdrawal, who credited a statement — so that any movement can be traced to a person.

Cookies

Two, both strictly necessary, both set by us and by nobody else. One holds your signed-in session and lasts 24 hours. The other exists for ten minutes while you sign in with Google or Apple, to prove the answer that comes back belongs to the sign-in you started. Your theme choice is kept in your own browser's storage and never reaches us.

We run no advertising, no analytics from anyone else, and no tracking pixels. There is no cookie banner on this site because there is nothing to consent to.

We do count visits to our own pages, ourselves, to know how many people come and from where. Each visit records the page, the site the visitor arrived from (its name only), the kind of device and the browser's language, with a one-way mark made from the address and browser for that day only, so a visitor cannot be followed from one day to the next and the address itself is not kept. It uses no cookie and is not shared with anyone. If your browser sends Do Not Track or Global Privacy Control, the visit is not counted.

Where it is kept

The database is hosted in Frankfurt, Germany. Uploaded audio and artwork are stored with Cloudflare R2. The website runs on a hosting provider that processes requests to it. Each of those companies processes data on our instructions and for no purpose of its own.

Who else sees it

What you can ask for

One limit on deletion: records of money that actually moved are kept, because an account has to remain explainable after the fact. Everything else goes.

Security

Passwords are hashed, never stored. Sessions are signed and expire. Writes are checked against the site they came from. Files you upload are reachable only through a link we sign for you, not by guessing a URL. If we ever discover a breach that affects you, we will tell you what happened and what it means for you.

Children

MOOZLO is not for children. You must be old enough to enter a contract where you live.

Asking us anything

Write to support@moozlo.com. A request about your own data is answered by a person, not a form.

Last updated 16 October 2026 · support@moozlo.com