Privacy Policy

MID-8 ("we," "our," or "us"), operated by Kensic LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the MID-8 website (mid-8.com and djs-finder.vercel.app).

1. Information We Collect

Information you provide:

• Account data (optional): If you create an account to claim your own DJ profile, we store your account's user ID and email address to identify your account.
• Profile claim data: When you claim a DJ profile, we store your account's user ID and email, which DJ profile was claimed, and verification evidence (e.g., a short code you post on your own SoundCloud to prove you control the profile).
• Contact information: If you contact us for support, correction, or removal requests, we collect your email address and the contents of your message.

• Community data you create (optional): If you sign in, we store the things you deliberately save or submit on the site — your favorite/saved DJs and venues, play events you trigger in the track player (used to compute your listening visualizations), your taste/profile preferences, and any reviews, event suggestions, corrections, or booking requests you submit (a booking request stores your name, email, and message and is shared with the DJ being booked and by email to that DJ's profile owner).

Information collected automatically:

• Server logs: Like any website, our host processes standard technical data — your IP address, browser type, and the pages you request — to deliver the site, keep it secure, and diagnose problems.
• Security screening: We use a security service (Arcjet) that evaluates request metadata (including IP address) against abuse and bot patterns to protect the site. This processing is performed under our legitimate interest in securing the service; it is not used for behavioral profiling or advertising.
• What we do NOT collect: We do not run first-party analytics, heatmaps, fingerprinting, or advertising-measurement trackers on this site, and we do not build advertising profiles of you.
• Affiliate links: Some product links on MID-8 are affiliate links (including Amazon Associates) — disclosed so you know we may earn a commission when you buy through them. The store you reach sets its own cookies under its own policy; MID-8 itself sets nothing to measure purchases.
• Subscriptions (optional): Paid All-Access plans are processed by Stripe. We store only the subscription status and billing-period dates needed to gate the features; card numbers and payment credentials are handled entirely by Stripe under their own policy and never reach MID-8's servers.
• Newsletter (optional): If you join the mailing list, we store your email address solely to send the newsletter; every email carries unsubscribe instructions.

What we do NOT do:

• We do not read or store your card or payment credentials — Stripe handles them (above).
• We do not sell, trade, or rent your personal information to anyone. Our revenue comes from affiliate commissions (disclosed above) and optional subscriptions — never from selling or advertising against your personal data.

2. How We Use Your Information

• To provide and maintain the MID-8 website and its features
• To personalize the site for signed-in users: your saved DJs/venues, listening visualizations, and taste preferences
• To process profile-claiming requests and verify ownership of DJ profiles
• To display a "verified" badge on claimed profiles
• To route booking requests between you and the DJ you want to book
• To operate subscriptions (feature gating) and, if you joined, the newsletter
• To respond to your support, correction, and removal requests
• To improve website performance and fix bugs

3. Public Data We Publish

MID-8 is an independent, editorial index and directory of electronic-music DJs, artists, venues, cities, and events. We aggregate publicly available information from public sources, including:

• Resident Advisor
• SoundCloud
• Wikidata
• MusicBrainz
• Discogs
• OpenStreetMap
• Artist and venue websites
• Stock photography (Pexels)

Artist and venue photos and music players are embedded from third parties; all rights remain with their respective owners. We do not claim ownership of any third-party content displayed on MID-8.

4. Data Storage

Your account data (user ID, email, claimed profile, and verification evidence) is stored securely in our cloud infrastructure, which is provided by Supabase (database and authentication). We use industry-standard security measures including HTTPS for all network communications.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data only with:

• Supabase: For authentication and database storage of account and profile-claim data. Your data is stored in Supabase's Canada (Toronto) region; access is restricted by row-level security to you, to the parties you transact with (e.g. a DJ you book), and to our staff.
• Vercel: For website hosting, edge delivery, and infrastructure request logging.
• Arcjet: For automated security screening of requests (see "Security screening" above).
• Resend: For delivering our transactional and opt-in emails (confirmations, invites, list mailings). They process sent messages and delivery-status events on our behalf; unsubscribe works instantly via the link in every email.
• Google (sign-in): If you sign in with Google, Google passes your name, email address, and profile photo to us under Google's Privacy Policy; we use them solely to operate your account.
• Third-party embeds: SoundCloud, Spotify, Twitch, and other embedded players may collect their own data according to their respective privacy policies. Loading an embed sends your IP address to that provider. We do not control these third-party data practices.

### Connected Services

MID-8 integrates with the following third-party services to display music, live streams, and public artist information. When their content is embedded on a page, or when you follow a link to them, they may receive your IP address and set their own cookies under their own privacy policies:

• SoundCloud: Embedded track/artist players via the SoundCloud Widget, and public artist metadata retrieved through the SoundCloud API. Use of SoundCloud content is subject to SoundCloud's Terms of Use; all rights remain with the uploader and SoundCloud.
• Spotify: Embedded players and public artist metadata via the Spotify API.
• Twitch: Embedded live-stream players for DJs currently broadcasting.
• Last.fm and MusicBrainz: Public artist information (genres, listener counts, identifiers) via their APIs.

We use these services only to surface publicly available information and official embeds. We do not post on your behalf or share your MID-8 account data with them.

6. Affiliate Disclosure

MID-8 participates in the Amazon Associates program. Some outbound gear and product links on our site are affiliate links. If you click on an affiliate link and make a qualifying purchase, MID-8 may earn a commission at no extra cost to you. As an Amazon Associate, we earn from qualifying purchases. This disclosure is provided for transparency and to comply with applicable advertising regulations.

7. Correction and Removal

If you are a DJ, artist, venue, or rights-holder and you believe that information displayed on MID-8 is inaccurate, or if you wish to have your public profile or a photo removed from our directory, you may contact us at support@mid-8.com to request:

• Correction of inaccurate information
• Removal of your public profile or a photo from our directory

We will review and respond to all such requests promptly. Please include your name, the specific profile or content in question, and your relationship to the content (e.g., the artist themselves, or a rights-holder).

8. Law Enforcement & Legal Requests

We may disclose your information if required to do so by law or in response to valid legal process, including court orders, subpoenas, or search warrants. When legally permitted, we will notify you of such requests.

9. Data Retention

We retain your account data for as long as your account is active. You can delete your account and all data built from it yourself, instantly and permanently, from Account → Danger zone (DJ profiles you claimed return to the unclaimed state; your own reviews are removed with the account; moderation submissions you made — event suggestions, corrections — remain on the site, no longer attributed to you). If you cannot reach your account settings, email us and we will carry out the same deletion within 30 days. A safety copy of deleted data can persist the same way: we take an encrypted nightly database backup, and a deleted row is gone from every backup when the snapshot cycle rolls over — within 30 days at the latest. Backups are encrypted, are never restored except to restore the site after a failure, and nobody browses them for personal data. Infrastructure request logs are retained by our host according to their data retention policies.

10. Your Rights

• Access: You can view the data associated with your account at any time by signing in.
• Deletion: Delete your account yourself at any time from Account → Danger zone (takes effect immediately, including all rows built from your activity). If you can't access that page, contact support@mid-8.com and we will do it within 30 days.
• Correction: You may request corrections to inaccurate information about you displayed on MID-8.
• Removal: You may request removal of your public profile or a photo from our directory.
• Portability: Account → Your data → "Download my data (JSON)" — the export is generated on the spot and emailed to the address on your account as an attachment, as machine-readable JSON (the data you submitted: profile, links, saves, reviews, submissions, and the record of the request itself). One free copy every 30 days, as the law allows us to require; if you cannot reach that page, email support@mid-8.com and we will send the same file by hand.
• Restriction & objection: You may ask us to pause processing of, or object to our processing of, specific data (we will stop using it for marketing-like purposes immediately on objection — we do not run targeted advertising).
• Withdraw consent: Consent-based processing (e.g. sharing your taste profile in aggregate artist analytics) is switchable at any time on your account page.
• Complain: If you are unhappy with how we handle your data you can contact us first, and then your data-protection supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

If a personal-data breach ever affects your information and the law says we must tell you, we will notify affected users and the supervisory authority without undue delay and, where required, without unjustified notification delay.

We do not make decisions about you by automated means that have legal or similarly significant effect: moderation of submissions is reviewed by a human.

11. Cookies

The MID-8 website uses:

• Essential cookies: Set for signed-in users to maintain their login session. Strictly necessary for the account functionality you asked for, which under ePrivacy rules means they do not require cookie consent.
• A local preference (localStorage), not a cookie: your autoplay choice, stored on your device to remember that setting.
• Third-party cookies: Embedded players (SoundCloud, Spotify, Twitch) and the stores you reach through our affiliate links may set their own cookies according to their respective privacy policies. We do not control these; if they need consent, it is asked for on their own sites.

We set no advertising, analytics, or cross-site tracking cookies of our own — which is why MID-8 does not need a cookie banner. If that ever changes, a consent gate ships with the tracking.

We do not sell your personal information.

12. Children's Privacy

MID-8 is not directed at children. To create an account you must be at least 13 in the United Kingdom, or 16 elsewhere (the age at which the GDPR lets you consent on your own — under that, a parent or guardian must consent). We do not knowingly collect personal information from children below that age; if we learn we have, we delete it promptly. Public directory pages (DJ and venue information) may be viewed by anyone.

13. Security

We use industry-standard security measures including HTTPS for all network communications and secure cloud infrastructure (Vercel for hosting, Supabase for authentication and database). We take reasonable measures to protect your personal information from unauthorized access, alteration, or destruction.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the MID-8 website. The "Last updated" date at the top indicates when this policy was last revised.

15. Contact Us

If you have questions about this Privacy Policy, your data, or wish to request a correction or removal, contact us at:

support@mid-8.com