Privacy Policy
This Privacy Policy explains how Mucky LLC ("Mucky", "we", "us") collects, uses, and protects information about you when you use muckybeats.com. We aim to collect as little as possible and to be transparent about what we do collect.
Who Is the Controller
Mucky LLC is the data controller for personal information collected via muckybeats.com. Contact for privacy matters: info@muckybeats.com.
Information We Collect
Account data: name (optional), email address, password (hashed), subscription tier. Purchase data: items bought, date, amount; payment details are handled directly by Stripe — we never see or store full card numbers. Newsletter data: email address and subscription status. Technical data: IP address, browser type, device type, pages viewed, referral source — collected via cookies and server logs. Communications: any message you send us at info@muckybeats.com or via the contact form.
How We Use It
We use this information to: provide and operate the site; process payments and deliver digital products; manage your account and subscription; send transactional emails (purchase receipts, password resets, subscription notices); send the newsletter if you opted in; understand site usage and improve the product; comply with legal obligations and prevent fraud.
Legal Bases (GDPR / EEA & UK)
If you are in the EEA, UK, or another jurisdiction with similar law, we rely on: contract (to deliver subscriptions, downloads, and account features); consent (for the newsletter and non-essential cookies); legitimate interests (site security, fraud prevention, basic analytics); legal obligation (tax records, responding to lawful requests). You can withdraw consent at any time; this does not affect the lawfulness of prior processing.
Cookies & Similar Technologies
We use a small number of essential cookies (login session, cart, consent state) and, with your consent, analytics cookies to understand traffic patterns. You can manage your preferences via the cookie banner or your browser settings. See the Cookie Policy for full detail.
Service Providers We Share With
We share the minimum data needed with trusted processors: Stripe (payments, subscriptions); Supabase (account database and authentication); Vercel (hosting and edge logs); the email delivery service used for transactional and newsletter mail. Each is bound by its own privacy and security obligations. We do NOT sell your personal information.
International Transfers
Some processors (Stripe, Vercel, Supabase) may store or process data in the United States or other jurisdictions. Where required, transfers are protected by Standard Contractual Clauses or equivalent safeguards.
Retention
Account data is kept for as long as your account is active and for a reasonable period afterward to handle disputes and meet legal/tax obligations (typically up to 7 years for transaction records). Newsletter data is kept until you unsubscribe. Server logs are rotated within 90 days unless needed for security investigation.
Your Rights (GDPR)
If you are in the EEA or UK you have the right to: access your data; correct inaccurate data; delete your data ("right to be forgotten"); restrict or object to certain processing; receive your data in a portable format; lodge a complaint with your local supervisory authority. Email info@muckybeats.com to exercise any of these rights — we will respond within 30 days.
Your Rights (CCPA / California)
If you are a California resident you have the right to: know what personal information is collected about you; access a copy of it; request deletion; opt out of any "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising); be free from retaliation for exercising your rights. Email info@muckybeats.com to make a request.
Children
The site is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has given us data, contact info@muckybeats.com and we will delete it.
Security
We use industry-standard safeguards: HTTPS everywhere, hashed passwords, scoped access tokens, principle-of-least-privilege for processors. No system is perfectly secure; if a breach occurs that affects you, we will notify you and the relevant authorities as required by law.
Changes to This Policy
We may update this policy. Material changes will be posted on this page with a new "last updated" date and, where appropriate, announced by email.
Contact
Privacy questions or requests: info@muckybeats.com. Mucky LLC, California, USA.
Last updated: April 24, 2026