Privacy Policy

MOTR (Music On The Rox) is a music discovery service operated from the United States. This policy covers the MOTR app and the pages under musicontherox.com. Questions go to officialmusicontherox@gmail.com.

If you swipe anonymously

• A randomly generated username and account ID. No email, no name.
• Which tracks you swiped on, which direction, and when.

If you sign in with Google

• Your email address and the name on your Google account.
• Your swipe history and saved tracks.

Signing in is only so your saves survive a cleared browser and follow you to another device. We ask Google for nothing beyond your name and email, and we never post anywhere on your behalf.

If you submit music as an artist

• Your name, email, and the track you submitted.

Automatically

• Standard server logs (IP address, browser type, pages requested) kept briefly for security and debugging.

• To run the feed and make sure you never see the same track twice.
• To count swipes and decide which tracks break through.
• To keep your saves attached to you rather than to one browser.
• To email you about things that concern you: a track of yours picking up saves, or breaking through. If you signed in as a listener, that also includes the occasional reminder when you haven't swiped in a while, and news about tracks you saved. Those carry an unsubscribe link and stop the moment you use it. We never sell your address or email you on anyone else's behalf.
• To detect fraud and abuse, and to meet our tax and accounting obligations.

We do not sell or rent your personal information, and we don't share it with advertisers or data brokers. Artists see a track's swipe totals, never who swiped.

Only the services needed to run MOTR, and only what each one needs:

• Google: sign-in. We receive your name and email; Google is told nothing about what you listen to.
• Resend: transactional email.
• Neon and Netlify: database and hosting.
• Apple and Deezer: track previews and artwork. These are lookups we make about music, not a handover of anything about you.

The Spotify buttons on your saved tracks are ordinary links. Tapping one opens Spotify with that song; nothing about you is sent to them, and MOTR has no access to your Spotify account.

We may also disclose information if the law requires it, or to protect the rights and safety of MOTR and its users.

We use a small number of first-party cookies to keep you signed in and to hold your session while you sign in with Google. There are no advertising or cross-site tracking cookies on MOTR. Blocking cookies will break sign-in.

• Swipes and saved tracks: as long as your account exists.
• Artist submissions: kept while the track is in the feed and for a reasonable period after, so we have a record of decisions.
• Server logs: a short rolling window.

• Ask for a copy of what we hold about you, or ask us to correct it.
• Ask us to delete your account. We'll remove your profile and sign-in data. Anonymised swipe counts stay in a track's totals, and financial records we're required to keep will remain.
• Unsubscribe from any non-essential email using the link in it.

Email officialmusicontherox@gmail.com for any of the above and we'll respond within 30 days. We won't treat you differently for exercising these rights.

If you live in California, Colorado, Connecticut, Virginia, or another state with a comparable privacy law, you have the right to know what we collect, to request deletion, to correct inaccurate information, and to opt out of sale or targeted advertising. We don't sell personal information or run targeted advertising, so there's nothing to opt out of, but the other rights apply, and the email above is how to use them.

MOTR is operated in the United States and your information is stored and processed there. MOTR is free and open worldwide, and we take no payment from anyone. If you're in the UK or EU, you may have additional rights over your data under UK GDPR or GDPR. Email us and we'll honour them.

MOTR isn't for children under 13, and we don't knowingly collect anything from them. Submitting music requires you to be 18 or older, because it involves payments. If you believe a child has given us information, email us and we'll delete it.

Traffic is encrypted in transit, sign-in tokens are stored server-side, admin accounts require two-factor authentication, and card details never touch our servers. No system is perfectly secure, but if a breach ever affects your information we'll tell you promptly.

If we change this policy we'll update the date at the top of the page, and for anything significant we'll tell you in the app or by email before it takes effect.