Privacy Policy

Who is responsible

Metalicks is operated by ETERNITY PARTNERS HUB DE NEGÓCIOS LTDA - ME, inscrita no CNPJ sob o nº 48.244.544/0001-25, com sede em Avenida São João, 802, Sala 11 — Centro, São Paulo/SP, CEP 01036-902. The data protection officer is CARV & COMPANY, reachable at contato@metalicks.com.

This policy covers metalicks.com and explains what we do with personal data, under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018).

What we collect

Browsing the catalogue requires no account and no identification. You only hand over data when you choose to create an account or submit something.

• Account: email and password. The password is handled by our authentication provider (Supabase) and reaches us already encrypted — we never have access to it.
• Profile (all optional): username, photo, bio, city, country, social links, and whether you are a fan or a professional.
• Content you submit: Fan Media videos and links, portfolio images, correction suggestions and takedown requests.
• Interactions: likes, the bands and artists you follow, and votes in polls and contests.
• Technical data: IP address and request timestamps, used to limit abuse (mass submission and login attempts) and recorded in server logs.

What we do not do

• We do not sell, rent or hand your data to third parties.
• We use no Google Analytics, no social media pixel, no third-party audience measurement tool. No company tracks you on this site.
• We count how many times each page is opened, with our own counter. It records only the page, the language, the referring site (domain only) and the hour, adding to a total. It stores no cookie, no IP address and no identifier — so we cannot know how many different people visited, nor the path anyone took: only that a page was opened so many times.
• We do not run behavioural advertising and do not build consumer profiles.
• We do not use your data to train artificial intelligence models.

Cookies

The site uses four cookies, all of them necessary. None is used for advertising or audience measurement.

• Login session: keeps you signed in. Expires when you sign out.
• Language: remembers which language you prefer.
• Vote identifier: a random number that stops the same person voting repeatedly in one poll while signed out. It does not identify you and is not cross-referenced with anything.
• Admin session: only exists for site administrators.

Third party services

• Supabase — hosts the database, uploaded files and the account system. It is the only place your data is stored.
• YouTube, Vimeo and Spotify — when a page embeds a video or album, it loads directly from that service. If you press play, those services may set their own cookies, under their own policies. Until you interact, we send them nothing on your behalf.

Legal basis

• Performance of a contract: what is needed for your account and the site features to work.
• Consent: what you choose to fill in on your profile and the content you choose to submit. Can be withdrawn at any time.
• Legitimate interest: technical data used to contain abuse and keep the site running.
• Legal obligation: where the law requires records to be kept.

How long we keep it

• Account and profile data: as long as the account exists.
• Submitted and approved content: stays published as part of the archive even after an account is closed — but is unlinked from your name if you ask.
• Technical records (IP, logs): up to 6 months.
• Takedown requests: kept while the matter is open and for as long as the law may require.

Your rights

Under the LGPD you may at any time: confirm whether we process your data, access it, correct it, request deletion, request portability, learn who we share it with, and withdraw consent.

To exercise any of these, write to contato@metalicks.com. We reply within 15 days, free of charge, and we do not ask you to justify the request.

Closing your account deletes your profile data, your interactions and any submissions not yet published.

What other people can see

If you mark your profile as public, it appears in the community area with whatever you filled in: username, photo, bio, city, country and links. Your email is never shown.

Fan Media content, once approved by curation, appears publicly on the band or artist page.

A profile marked private is not listed.

Security

The site is served over encrypted connections only (HTTPS). Database access is governed by rules that prevent a visitor from reading or changing what is not theirs, and uploaded files are type-checked before being stored.

No system is immune. If an incident occurs that could put you at risk, we will notify you and the Brazilian data protection authority, as the law requires.

Minors

Accounts are intended for people aged 16 and over. Between 16 and 18, guardian assistance is required. We do not knowingly collect children’s data; if we learn that we have, we delete it.

Changes to this policy

If something changes materially, we will say so on the site before it takes effect. The date of the last update is always at the top of this page.

Contact

Questions, requests or complaints about personal data: contato@metalicks.com.