This describes what the platform actually stores, field by field. Where a section says we do not do something, it is because the code does not do it, not because we have decided not to for now.

1. Who holds the data

Demirhane Sound, İzmir, Türkiye. Questions, corrections and deletion requests: demirhanesound@gmail.com.

2. If you only read the site

Nothing is stored about you. No account, no cookie, no analytics, no advertising or social trackers, no third-party embeds. An anonymous visit sets no cookie at all — see Cookies.

3. If you request artist access

We keep what the form asks for: your email address, the artist name, the city, the link you gave as evidence, and your message. It is kept so we can review the request and get back to you, and so a rejected request is not silently re-submitted. We also record which version of the Terms of Use you accepted.

4. If you have an account

• Your email address and an account identifier, held by our authentication provider along with when the account was created, when the address was confirmed and when it last signed in.
• Which version of the terms you accepted, and when.
• What you publish — artist profile, releases, events, updates — including earlier revisions, because a submission is reviewed before it appears and the review needs the history.
• Images you upload, and the fact that your account uploaded them.
• Ownership claims, including the explanation you wrote to prove the connection.
• Moderation decisions about your material: what was decided, by whom and when. This is kept as a record of the decision, and we do not delete it when other things are deleted.

5. Addresses and rate limiting

To stop someone using the sign-in form to mail strangers, requests are counted per address. We do not store your IP address. It is combined with a secret key and hashed, and only the first part of that hash is kept, inside a counter that resets within the hour. The hash cannot be turned back into an address without the key, and if that key is ever missing the site counts without the address rather than storing something reversible.

6. Where it is processed

The database, file storage and sign-in run on Supabase, in Frankfurt, Germany. The site itself is served by Netlify. Sign-in emails are delivered by an email provider, which sees the address the email is sent to. If — and only if — you turn on notifications, the service your own browser uses to receive them (Google, Mozilla, Apple or Microsoft) passes each one to your device; it can see that a message was sent and when, but not what it says, and not who you are. What that stores. Nobody else receives your data: we do not share it, sell it, or hand it to advertisers or analytics services.

7. How long

Account and published material: for as long as the account exists. Access requests: until reviewed, and for a period afterwards so the decision can be revisited. Invitations: they expire after seven days. Rate-limit counters: within the hour. Moderation records: kept.

8. What you can ask for

A copy of what we hold, a correction, or deletion of your account and your material. Write to demirhanesound@gmail.com from the address the account uses. Under Turkish data protection law (KVKK) and, if you are in the EU, the GDPR, you also have the right to complain to the supervisory authority.

Two honest limits. Editorial articles we wrote about an artist are our own work and stay up unless there is a reason to take them down. Moderation records are kept as a record of a decision that was made.

9. Children

Accounts are for people aged 16 or over. If you believe a younger person has an account here, tell us and we will remove it.

10. Security

Sign-in is by one-time link, so there is no password to steal. Uploaded files are private and served through the site rather than from public storage. Access to records is enforced by the database itself rather than by the interface. If a breach ever affects you, we will tell you directly rather than posting a notice.

See also Terms of Use and Cookies.