Privacy policy.
Wunderland Music website and the WUNDERLAND MUSIC app for Android and iOS. Effective October 12, 2026.
Who we are
Wunderland Music (music.wunderland.gg) and the WUNDERLAND MUSIC mobile app for Android and iOS are operated by Wunderland Corporation (“we”, “us”). This policy explains what we collect, why, who we share it with, and the choices you have. It applies to the website and the app. The app displays the same service as the website, so the same data practices apply to both.
What we collect
- Account details: username, email address, display name and a password, which we store only as a bcrypt hash. Optional profile details you add: bio, location, avatar, banner, social links, theme and accent colours.
- WUNDERLAND Account sign-in: if you sign in to another Wunderland product with your Wunderland Music account, we act as the sign-in provider (OpenID Connect). That product receives your account ID and the profile details you approve on the consent screen.
- Security: if you turn on two-step verification, we store what is needed to check your codes. Email verification and password-reset links use one-time tokens.
- Sessions: when you sign in we store a hashed session token, its expiry (30 days), the device’s browser or app user agent, and the IP address used. This lets you see and revoke your sessions and helps us stop account abuse.
- Content you post: tracks, artwork, videos, Shorts, playlists, comments (including timestamped comments on waveforms), social posts, polls, bookmarks, forum threads and replies, live stream details and chat, store listings and files, label and demo submissions, and verification, seller and partner applications.
- Direct messages: messages you send, and the conversations they belong to, are stored on our servers so they can be delivered. They are not end-to-end encrypted. Moderators may review messages that are reported to us.
- Activity: plays (track, time and, when you are signed in, your account), likes, reposts, follows, blocks, mute words, notifications, pre-saves, and your direct-message privacy setting.
- Live streams and Watch & Earn: when you watch a stream with Watch & Earn, we record watch time, a random device identifier stored in your browser, and a one-way hash of your IP address. We use these to credit Sparks fairly and detect abuse.
- Purchases and earnings: orders, tickets, memberships, subscriptions, donations and tips, Sparks balances and transactions, and creator payout records. Card and crypto payments are handled by Stripe, and we never see or store your full card number. For physical merch, Stripe collects your shipping name and address and passes them to us so the seller can ship your order.
- Reports and moderation: reports you file or that are filed about your content, and moderation actions. Admin actions are recorded in an audit log.
- Technical data: IP addresses are used briefly, in memory, for rate limiting (for example, limiting login attempts), and appear in standard server logs at our hosting provider.
Cookies and on-device storage
We use one essential, httpOnly session cookie to keep you signed in. We do not use advertising cookies, and we do not run third-party analytics or tracking scripts. Wunderland Music has no ads.
Your browser or the app also stores a few preferences locally: player volume, shuffle and repeat, and your current queue; light or dark theme; whether you have seen the welcome intro; and the Watch & Earn device identifier. Clearing site data removes them.
Embedded players from YouTube, Spotify, Apple Music, SoundCloud, Vimeo and Twitch load directly from those services. They may set their own cookies under their own privacy policies.
How we use it
- To run the service: accounts, uploads, streaming, playlists, live streams, social features, messages, the store, and Sparks.
- To process payments, deliver what you bought, pay creators and labels their share, and handle refunds and disputes.
- To keep the service safe: preventing fraud, spam and abuse, enforcing our rules, and responding to reports.
- To show creators aggregate statistics about plays, listeners and fans of their content.
- To send service email, such as verification, password resets, receipts and important account notices, when email is enabled. We do not send marketing email.
The mobile app
- The app shows music.wunderland.gg inside a native shell, so the website sections of this policy apply in full.
- It adds background playback with lock-screen and notification media controls, haptics, the system share sheet, links that open in the app, and an offline screen. None of these collect extra personal data.
- Push notifications: the app includes support for push notifications through Firebase Cloud Messaging and Apple Push Notification service. They are not active yet. If we turn them on, the app will ask for your permission first, and only then send your device’s push token to us so we can deliver notifications. You can turn them off in your device settings at any time.
- The app does not access your contacts, location, camera, microphone or photos, except when you choose a file to upload. There are no ads or ad identifiers.
- Purchases of digital items are not available inside the app. Physical merch orders work as described above.
How long we keep it
- Account data and content: until you delete them or delete your account.
- Sessions: until you sign out or they expire after 30 days. Expired sessions are removed automatically.
- Purchase, payout and tax records: as long as the law requires, which can be after your account is deleted.
- Server logs at our hosting provider: kept for a limited period under the provider’s retention settings.
Your choices and rights
- Edit your profile, and delete your tracks, posts, comments and playlists, at any time.
- Control who can message you, block people and mute words under Settings, then Privacy & messages.
- Delete your account under Settings, which requires your password. This permanently deletes your account, tracks, comments, playlists and uploaded files, and signs you out everywhere. Some records, such as completed payments, are kept where the law requires.
- Ask us for a copy of your data, or for corrections or deletion, by contacting us at the address below. Depending on where you live, for example in the EU, the UK or California, you may have additional rights, including the right to complain to your data protection authority.
Children
Wunderland Music is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.
Security
We use HTTPS everywhere. Passwords are hashed, session tokens are stored only as hashes, and optional two-step verification is available. We have defences against cross-site requests, and uploaded files are checked. No system is perfectly secure, so please use a strong, unique password.
International transfers
We and our providers may process data in the United States and other countries. Where required, transfers are protected by our providers’ standard contractual safeguards.
Changes
If we change this policy, we will update the effective date above and note the change in the changelog. For significant changes, we will tell you on the site or in the app.
Contact
Wunderland Corporation. Privacy questions and requests: [PLACEHOLDER: privacy contact email].