Is Music24 safe to use?

How Music24 protects your sign-in, your connected accounts and your data, stated as plain facts.

Music24 holds your pages, your artists and the sign-ins to some of your music accounts. Here is what we do to protect them.

Signing in

• No password to steal. You sign in with a 6-digit code we email you, or with Google or Apple.
• Short-lived codes. A code works for 15 minutes and stops after 5 wrong tries. We also limit how many codes an address or a network can ask for.
• Sign out ends everything. Signing out on one device ends every session of your account on every device. See Sign out of every device.

Connected accounts

• Spotify for Artists and YouTube: you sign in on Spotify or Google pages. We never see that password. We keep the access they give us encrypted.
• Deezer for Creators: it has no such sign-in, so we keep your Deezer for Creators email and password encrypted. Disconnect deletes them.
• Promote channels: the posting tokens are encrypted too, and Disconnect deletes them. See How we protect your connected accounts.

API tokens

We show an API token once, when you create it, and store only a one-way hash of it. Nobody at Music24 can read your token back. See Keep your API tokens safe.

Who can see your data

• The people you invite to your workspace see its artists, pages, campaigns and numbers. Only the owner chooses the plan and invites people.
• A SmartLink or pre-save page is public once you publish it. Drafts are not public.
• We do not sell your personal data. The privacy policy says so too.

Who runs Music24

Music24 is run by Hernas OÜ in Tallinn, Estonia, under the EU GDPR. We host Music24 in Amsterdam, the Netherlands, as our privacy policy explains. Some service providers, such as payments, process data outside the EEA under EU safeguards. See What data Music24 stores.

Questions

Related articles