Privacy Policy
Last updated: 29 October 2026
1. What we collect
Account data you provide (name, company, email) and a securely hashed password. Operational data needed to run the Service: your player devices, their status/network info, the channels you assign and commands you issue. Security and accountability data: your IP address, browser user-agent, and a log of sign-ins, sign-outs and actions you take in the portal.
2. How we use it
To operate the Service: authenticate you, show and control your devices, send transactional emails (verification, password reset, email-change confirmation). We do not sell your personal data or use it for advertising.
3. Email
Transactional emails are sent via our email provider (Resend). We send only account-related messages — not marketing — unless you separately opt in.
4. Storage and processing
Data is stored on Cloudflare infrastructure (database, file storage and edge workers), processed in the EU region where available. Backup music files you upload are stored in object storage tied to your account.
5. Retention
We keep your data while your account is active. When you delete your account, your personal data and owned records are removed promptly; player devices you owned are released back to an unassigned state. Security and audit log entries are retained for up to 12 months for security and accountability (legitimate interest); on deletion these are anonymised — your identity is replaced with a placeholder, and your IP address and user-agent are erased.
6. Your rights (GDPR)
You can access and export your data, and delete your account, at any time from Account settings. The export is a machine-readable JSON file. For any other data-protection request, contact us through the portal.
7. Cookies
The portal uses a single essential, http-only session cookie to keep you logged in. The demo player on our landing page (landing.a3music.com) sets two essential, http-only cookies: a 14-day session cookie that opens the demo for the person who verified their email, and a 1-year cookie that remembers that a demo was already started in this browser. No third-party tracking or advertising cookies are used.
8. Demo player on the landing page
If you register for the demo player on landing.a3music.com, we process the name, company or venue name, email address and, if you give it, mobile number you enter, together with your IP address, browser user-agent, the page and language you registered on, the time of your consent, how often the player opened a channel, when you first listened and when you last used the player. We use this to send you the verification and sign-in links (via Resend), to open the 14-day demo for you, and to contact you about Music Engine — the demo is a sales tool, our team sees demo registrations in our internal customer system and may follow up on yours. We also check whether your email address already belongs to a Music Engine portal account and whether your company name or your company's email domain appears in other demo registrations, and note the result for our team so that it can route your request. The legal basis for this is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to info@music-engine.hu; send requests to access, correct or delete your demo registration to the same address. To prevent repeated free trials we also keep your email address and phone number in a normalised form (lower case, without +tags or the dots in Gmail addresses, the phone number as digits only), a hashed form of your IP address, and a cookie that marks this browser for one year; we keep these for as long as the registration exists, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). If you withdraw your consent, we stop contacting you, but these values stay until the registration is deleted so that a repeat registration is recognised. Registering and verifying are also recorded in our security log with your email address, IP address and browser user-agent, and an extension or a block of your demo by our team is recorded there too; these entries are kept for up to 12 months (see section 5). A registration that is not verified within 7 days is deleted automatically, and its security-log entries are anonymised, unless our team has blocked it to stop repeat registrations. We keep verified demo registrations while we follow up on them and until you ask us to delete them. The player keeps your volume, the last channel you played and a marker that this browser has a verified demo in your browser's local storage and, until you verify, the address you registered with in this tab's session storage; none of this leaves your device. Our bot protection uses Cloudflare Turnstile, which processes technical data about your browser to tell people from automated scripts.
9. Contact
For privacy questions or to exercise your rights, contact us through the portal at a3music.com. If you registered for the demo player on landing.a3music.com and have no portal account, write to info@music-engine.hu.