Privacy Policy

Account information. Your name, email address, and billing details when you create an account and subscribe.

Fan contact data. Names, email addresses, and consent records that our customers collect or import — for example when a fan signs up on a release page. Customers are the data controller for this data; Malt processes it on their behalf.

Usage data. Pages visited, device and browser information, and server logs that help us operate and improve the service.

We set one first-party visitor cookie, named malt_ref, on public artist and release pages. It lives for at most 180 days and is used solely to attribute fan signups to the campaign that brought them there. It does not track you across other sites, and we don't share it with ad networks.

When an artist has connected Meta ads, their public Malt pages also load the Meta Pixel, which sets Meta's _fbp and _fbc cookies for conversion measurement. In regions where consent is required — the EEA, UK, and Switzerland — the Pixel loads only after the visitor accepts via the cookie banner; consent choices are stored with our consent-management provider. Outside those regions, applicable local defaults apply. Declining tracking does not affect a fan's ability to sign up or receive content.

When our customers send email through Malt, we record engagement events — opens, clicks, bounces, and unsubscribes — via our email provider. This data is used to measure campaign performance and protect sending reputation.

We rely on a small set of service providers to run Malt:

• Vercel — application hosting
• Resend — email delivery
• Inngest — background job processing (delivery of email and conversion events; payloads can include fan email, IP address, and user agent)
• Cloudflare R2 — file storage (cover art, audio, assets)
• Stripe — payment processing
• OpenAI — optional AI features
• Meta Platforms — conversion measurement for artists who connect Meta ads; receives hashed email, hashed internal contact ID, IP address, user agent, and ad click IDs
• c15t / consent.io — consent management; stores consent records and resolves the visitor's jurisdiction

We keep account data while your account is active and delete it within a reasonable period after you delete your account. Fan contact data is kept according to our customers' instructions and deleted when they delete it or close their workspace.

Every marketing email sent through Malt includes an unsubscribe link that works immediately. If you're a fan and want your data accessed or deleted, email privacy@malt.bio — where the artist or label is the data controller, we'll forward your request to them.

Questions about this policy or your data? Email privacy@malt.bio.