Smash Custom Music Accounts Privacy Policy

Data we collect:

- E-mails you send to our contact e-mail address.
- The username, e-mail address and password hash of your account.
- Your IP address and browser user agent.
- Logs of your successful and failed login attempts.
- The files you upload and their associated information you entered on the upload page.
- Any other information you submit on the user/account part of the website while logged in.
- The date and time of all account operations.


How we store your data:

- All data is stored locally on our servers, without the use of any third party services.
- Account information, such as your username, e-mail address, etc.,
will be stored as long as your account exists.
- Data submitted to the public database, such as accepted uploads or added game-pages,
will be stored on the website permanently.
- Logs of submitted operations, including but not limited to information about
both accepted and denied uploads or change requests, will be stored on the website permanently.
- Records of communication with the administrators will be stored permanently.
However, you may request the deletion of it together with the deletion of your account.
- Temporary information, such as IP addresses, will be stored for a maximum period of 1 month (31 days).
- Deleted files, such as denied uploads, will be stored for a maximum period of 1 month (31 days).
- Deleted data may be additionally stored in offline backup copies
for a maximum period of 1 year (365 days).


Data we share with third parties:

- Your username will be publicly visible on our website.
- The date of your registration will be publicly visible on your profile page.
- Any enabled profile customizations will be publicly visible on your profile page.
You will be able to change them in your account settings.
- Your uploaded files and their associated information
will be publicly visible on our website if they are accepted.
- Information about pending uploads might be seen by other logged-in users.
- E-mail conversations could be unintentionally seen by third parties when not sent
over an encrypted connection, which is not uncommon with current E-mail standards.


Any other data specified in the "Data we collect" table but not in the "Data we share with third parties" table
can only be seen by site administrators.

You have the right to delete your account, request a copy of all your data,
and request all of your data to be deleted from our servers (except publicly available uploads).

All users will be notified of any changes to this privacy policy with an alert when they log into their account.

Last updated: 2023-05-27