Privacy

1. Who holds your data

Rivet Music is operated by Rivet Music, who is the data controller for everything described here. You can reach us at icehousetechnology@gmail.com about anything on this page.

2. What we collect, and why

Everyone with an account

• Your email address and a password, which is stored only as a one-way hash. We never see your password.
• The name you choose to show publicly.
• Your date of birth. We need it because some music is marked explicit and because releasing music means being old enough to sign a revenue agreement. We store the date, and show nobody your age.
• Your country, and your city and region where your country uses them. This sets your language, and for artists it is shown on your page so people can find musicians near them.
• What you listen to, what you buy and what you add to playlists — because the site cannot work without it, and because it is how artists get paid.

Artists only

• Your legal name. This is kept because money is being paid to a real person and that has to be traceable. It is never shown on the site, never included in search, and never sent to anyone except where tax or payment rules require it.
• The music you upload, your cover art, and whatever you write on your page.
• A record that you confirmed you hold the rights to each upload: the date, the account, and a one-way hash of the network address it came from. The address itself is not stored — only a fingerprint that cannot be turned back into it.

3. Payment details

Card numbers and bank details never reach this site. Payments and payouts run through Stripe, who collect those details directly and hold them under their own privacy policy. We receive only the amount, the outcome and a reference. We cannot see your card, and neither can anyone else here.

For artists being paid, Stripe also collects identity and bank details to satisfy financial regulation. That exchange is between you and Stripe.

4. Cookies

Only the ones that make the site work: one that keeps you signed in, and one that remembers your basket. There is no advertising cookie, no analytics cookie and no third-party tracker on this site, which is why you are not being shown a consent banner.

Your browser also stores small preferences locally, such as which tab you last had open. Those never leave your device.

5. Who else sees any of it

Nobody buys it, because none of it is for sale. It is shared only with the services needed to run the site:

• Stripe, for taking payments and paying artists.
• Our email provider, to send you the messages you would expect — a receipt, a reply to a ticket, a note from an artist you follow.
• Cloudflare Turnstile, which checks that a signup is a person and not a script. It looks at the request, not at you, and sets no tracking cookie.
• Our hosting provider, who stores the site and its database.

We would also hand something over if a court ordered it, and we would tell you unless we were legally barred from doing so.

6. What is public

An artist page shows the name you chose, your city and region, your links, your music and your follower count. A listener account shows nothing publicly at all — not your name, not what you listen to, not what you bought.

7. How long we keep it

Your account data stays while the account exists. Records of money — sales, payouts and the ledger behind them — are kept for as long as tax and accounting rules require, which is usually several years, even after an account closes. Everything else goes when you do.

8. Your rights

Wherever you live, you can ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete your account and the data with it. Depending on your country you may also be able to object to particular uses, or ask for your data in a portable form.

Submit a ticket from your studio, or write to icehousetechnology@gmail.com. We will answer within 30 days, and sooner if we can. If you are in the EU or the UK you also have the right to complain to your national data protection authority.

9. Where your data is held

The site runs on servers in the European Union. Stripe and our email provider may process data elsewhere, including the United States, under the safeguards their own agreements provide.

10. Children

This site is not for children. You need to be old enough to hold an account where you live, and older still to release music and be paid for it. If we find an account belonging to a child, we close it and delete what we hold.

11. Changes

If we change anything that matters, we will say so on this page and send a message to your inbox here. We will not quietly start doing something new with your data and leave you to notice.