1. Introduction
Mostly Vibes ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard information when you use our websites, applications, and services.
This policy applies to all Mostly Vibes projects, including but not limited to MBM Player, Hitstory, MSX CLAP Synths, and any associated websites or tools.
2. Data We Collect
We aim to collect as little data as possible. Depending on the service, we may collect:
- Usage data — anonymous analytics such as page views, session duration, and general usage patterns to improve our services.
- Device information — browser type, operating system, and screen resolution for compatibility purposes.
- Game data — nicknames, scores, and game state for multiplayer functionality (e.g., Hitstory).
- Log data — server logs including IP addresses, timestamps, and request details for security and debugging.
We do not collect passwords, payment information, or sensitive personal data. Our desktop applications (MBM Player, MSX CLAP Synths) operate fully offline and do not transmit any data.
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process personal data based on the following legal grounds:
- Legitimate interest — to operate and improve our services, ensure security, and prevent abuse.
- Consent — where applicable, such as when you voluntarily provide a nickname or opt in to analytics.
- Contract performance — to provide the services you request, such as multiplayer game functionality.
4. How We Use Your Data
We use collected data solely to:
- Provide and maintain our services and applications.
- Enable multiplayer and real-time features where applicable.
- Understand usage patterns to improve user experience.
- Ensure security and prevent misuse of our services.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Third-Party Services
Some of our services may use third-party providers for hosting, analytics, or content delivery:
- Hosting providers — to serve our websites and applications.
- Content APIs — such as the iTunes API for music metadata and audio previews.
- Analytics — anonymous, aggregated usage statistics.
These providers process data according to their own privacy policies. We select providers that comply with applicable data protection regulations.
6. Cookies and Local Storage
Our websites may use cookies or browser local storage to remember preferences, maintain sessions, and enable game functionality. These are strictly functional and are not used for tracking or advertising.
You can configure your browser to reject cookies, though this may affect functionality.
7. Data Retention
We retain personal data only as long as necessary to provide our services. Game session data is temporary and deleted when a session ends. Server logs are retained for a limited period for security purposes and then deleted.
8. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your data ("right to be forgotten").
- Restriction — request that we limit how we process your data.
- Data portability — request your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us using the information below.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS) and secure server configurations. However, no method of transmission or storage is 100% secure.
10. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
11. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact
For questions about this privacy policy or to exercise your data rights, please reach out via our project pages or open an issue on the relevant project repository.