| Who | What | Why |
|---|---|---|
| Artists | Email, display name, password (stored hashed, never in plain text), profile details you choose to add (photo, tagline, social links, payout settings) | Operate your account and public profile |
| Fans (only if you opt in) | Name, email and/or phone — only the fields for the channel(s) you explicitly checked | Let the Artist you opted in with stay in touch with you |
| Everyone | Basic technical data (IP address, request timestamps) via standard server logs and rate limiting | Keep the Service secure and prevent abuse |
We never see or store your card number or full payment details — Stripe handles checkout directly, and we only receive a payment confirmation and amount. We don't run third-party ad trackers.
Email and SMS consent are two distinct checkboxes, each recorded with its own timestamp — checking one never opts you into the other. Your contact info is only stored if you actively opt in; browsing or requesting a song does not add you to any list by itself.
SMS specifically: as required by the U.S. TCPA, SMS consent must be its own affirmative choice, separate from email. At the time of this policy, TheSet's platform does not yet send marketing SMS or email campaigns on an Artist's behalf — consent is being captured ahead of that feature shipping. Once it does, messages will only go to those who opted into that specific channel, every message will include opt-out instructions, and you can withdraw consent at any time by contacting the Artist directly or us at the address below.
We don't sell personal data, ever.
Artists get one functional, httpOnly session cookie used to keep you logged in. It isn't readable by page scripts and isn't used for tracking or advertising. Fans browsing an Artist's public page don't need to be logged in and don't get this cookie.
Artist account data is kept for as long as the account is active, plus a reasonable period after closure for accounting/fraud records. Fan opt-in data is kept until you ask to be removed or the Artist deletes it. To access, correct, or delete your data, email us at the address below — we'll verify the request and act on it within a reasonable time.
The Service is not directed at children under 13, and we don't knowingly collect data from them.
We'll update the date at the top of this page when this policy changes; material changes will be called out here.
Privacy questions or data requests: [email protected]