Privacy Policy

Effective Date: October 4, 2026

1. Quick Overview

If you read nothing else, read this: We collect what we need to run the marketplace (account info, usage data, payment data via Stripe). We share data with services that help us operate (Stripe, Resend, Meta, etc.) but we never sell your personal data. You can delete your account and all your data at any time.

2. Who We Are

We're Magic Nothing Inc, a small company based in Los Angeles that built a marketplace for indie music.

Magic Nothing Inc ("Magic Nothing," "we," "us," or "our") operates an online marketplace connecting independent artists with playlist curators at magicnothing.xyz (the "Platform").

For the purposes of data protection law:

Our contact details:

Magic Nothing Inc
5101 Santa Monica Blvd, Ste 8 PMB 49
Los Angeles, CA 90029
info@magicnothing.com

3. Information We Collect

We only collect what we need to run the marketplace. Here's exactly what that means.

3.1 Information You Provide

3.2 Information Collected Automatically

3.3 Information from Third-Party Sources

3.4 What We Do NOT Collect

4. How We Use Your Information

We use your data to run the marketplace, pay curators, and keep you updated. Here's the breakdown by legal basis.

4.1 Contract Performance

We process your data to fulfill our obligations under our Terms of Service:

4.2 Legitimate Interest

We process certain data based on our legitimate business interests, balanced against your privacy rights:

4.3 Consent

We process certain data only with your consent, which you can withdraw at any time:

4.4 Legal Obligation

We process data when required by law:

4.5 Automated Decisions About Curators

Some decisions about curators are made automatically from review activity:

We do this to run the marketplace set out in the Terms of Service and Creator Agreement. Other decisions about curators, like a pause for a serious breach or while we look into a problem, are made by a person. You can ask for a person to review any of these decisions, give your side, and contest it by emailing info@magicnothing.com. A person reads every request, and we reply within the time limits in Section 10.4.

4.6 Record of Accepting the Creator Agreement

When you agree to the Creator Agreement, we keep a record that you did: your account, the version you agreed to, and the date and time. We keep it as proof that you accepted the agreement, which we need to run it with you (contract) and to show what was agreed if there's ever a question about it (legitimate interest). We keep the record for as long as the agreement applies to you, and then for four years after it ends, which is how long a claim about a written contract can be brought under California law.

5. How We Share Your Information

We share data with services that help us run the platform — including Stripe for payments, Meta for ad measurement, and AI tools for optional features. We never sell your data.

5.1 Service Providers

We share data with the following service providers, each of which processes data under their own privacy policies and our contractual agreements:

5.2 What We Do NOT Do

We do not sell your personal information as defined under the CCPA. We do not rent, lease, or trade your data for monetary consideration.

5.3 Publicly Visible Information

The following information is visible to other users on the Platform:

Submission content (track details, artist messages, feedback) is shared only with the reviewing curator and is not publicly visible.

5.4 Discord Community

Our Discord community is a separate third-party platform operated by Discord Inc. Any information you share there is governed by Discord's Privacy Policy, not this one.

6. Cookies & Tracking

We use cookies to keep you logged in and measure ad performance. Here's what's on your device and how to control it.

6.1 Essential Cookies (Always Active)

These cookies are necessary for the Platform to function:

6.2 Analytics & Advertising

6.3 Live Chat

6.4 How to Control Cookies

If you're in the EU, UK, or Switzerland, we ask for your consent before we set any non-essential (analytics or advertising) cookies. You can accept or reject them when you first visit, and you can change your choice anytime by clearing this site's cookies in your browser, which brings the choice back. If you're in the US, these cookies are on by default, but we honor the Global Privacy Control (GPC) signal as an opt-out of ad sharing, and you can use the controls below.

7. Data Retention

We keep your data while your account is active. Delete your account and we delete your data — with a few exceptions for legal compliance.

8. Marketing Communications

We may send marketing emails. You can opt out anytime — we'll stop immediately.

8.1 Transactional Emails (Always Sent)

These are service communications you'll always receive while your account is active:

8.2 Marketing Emails

We may send promotional communications including welcome series, platform digests, milestone celebrations, and newsletters. Our legal basis for sending these is legitimate interest under GDPR Recital 47 (direct marketing for our own similar services).

8.3 Opting Out

You can opt out of marketing emails at any time by:

Opt-outs are honored immediately. Opting out of marketing will not affect transactional emails.

8.4 Our Email List

Separately from accounts, we keep an email list of people who gave us their address in person at one of our events or on a sign-up form. If you are on it, we hold your email address, the name you wrote down, and which list it came from. We use it to tell you about upcoming events and what we are building. We do not sell it, rent it, or share it with anyone outside the processors named in Section 5.

If you later create a Magic Nothing account with the same email address, we connect the two so we can see whether the list is worth running. That connection stays internal to us.

Every email we send to the list has an unsubscribe link in it, and we support your mail app's own unsubscribe button. Unsubscribing takes you off the list straight away. You can also email info@magicnothing.com and ask us to delete your entry outright, which we will do. Marking one of these emails as spam also takes you off the list automatically.

9. International Data Transfers

We're based in the US. If you're outside the US, your data crosses borders when you use the Platform.

All data processing occurs in the United States. If you are located outside the US, your personal data will be transferred to and processed in the US.

For users in the EU/EEA, we rely on:

For users in the UK, similar protections apply under UK GDPR and the UK extension to the Data Privacy Framework.

10. Your Privacy Rights

You have rights over your data. Here's what you can do, depending on where you live.

10.1 All Users

Regardless of your location, you can:

10.2 EU/EEA and UK Users (GDPR and UK GDPR)

In addition to the above, EU/EEA users have the right to:

10.3 California Users (CCPA)

See Section 12 for your specific rights under California law.

10.4 How to Exercise Your Rights

To exercise any of these rights, email us at info@magicnothing.com with:

Response time: We aim to respond within 30 days. For complex requests, we may need up to 90 days and will notify you of any extension.

Identity verification: We may need to verify your identity before processing certain requests to protect your privacy.

Note: Account deletion is permanent and cannot be reversed. All your data — including playlists, submissions, feedback, and uploaded files — will be permanently removed.

11. Data Security

We take security seriously, but no system is perfect. Here's what we do to protect your data.

We implement reasonable technical and organizational measures to protect your personal data, including:

While we implement these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

12. California Privacy Rights (CCPA/CPRA)

California residents have specific rights under state law. Here's what applies to you.

12.1 Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information (as defined by the CCPA):

12.2 Sources of Information

12.3 Business Purposes

We use personal information for the following business purposes:

12.4 Categories of Third Parties

We share personal information with the following categories of third parties:

12.5 Sale and Sharing of Personal Information

We do not sell your personal information for monetary consideration.

12.6 Your California Rights

As a California resident, you have the right to:

To exercise these rights, email info@magicnothing.com. You may also designate an authorized agent to submit requests on your behalf, provided the agent can verify authorization.

We honor the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information for advertising. You can also manage advertising and analytics cookies through the controls described in Section 6.

13. Children's Privacy

Magic Nothing is for adults (18+). We don't knowingly collect data from minors.

Magic Nothing is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected information from someone under 18, we will delete that information promptly. If you believe a minor has provided us with personal data, please contact us at info@magicnothing.com.

14. AI Features

We use AI for certain features. You're always in control of whether to use optional AI features.

Magic Nothing uses AI tools to power certain features. Current and planned AI features may include:

These features are:

Playlist quality tiers are algorithmic and based on objective playlist performance metrics. Automated decisions about curators, including curator scores and expiry pauses, are described in Section 4.5.

15. Changes to This Policy

Important changes get 30 days' email notice. Minor changes just update the date at the top.

Material changes — including changes to what data we collect, how we share it, or your rights — will be communicated via email to your registered address at least 30 days before they take effect.

Non-material changes (clarifications, formatting, minor updates) will be reflected with an updated "Effective Date" at the top of this page.

Previous versions of this policy are available upon request by emailing info@magicnothing.com.

16. Contact

Questions about your privacy? Here's how to reach us.

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Magic Nothing Inc
5101 Santa Monica Blvd, Ste 8 PMB 49
Los Angeles, CA 90029
info@magicnothing.com

EU/EEA users also have the right to lodge a complaint with their local Data Protection Authority if they believe their data has been processed unlawfully.