← Back to Home

Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains how Phaser ("Phaser", "we", "us", or the "Service") collects, uses, stores, shares, and protects personal data in accordance with the General Data Protection Regulation ("GDPR") and other applicable data-protection laws.

1. Data Controller

Phaser is operated by:
Alessandro Escomputo
Location: Italy
Email: Phaser Contact page

For questions concerning this Privacy Policy or the processing of personal data, you may contact us using the email address above.

2. Data We Collect

2.1 Account Data

When a user creates or accesses an account, we may process:

• Username
• Display name
• Email address
• Password hash
• Account type, such as fan or artist
• Account and profile status
• Account creation and authentication information
• Login, password-reset, and security records
• Records showing acceptance of the Terms of Service, Privacy Policy, and other applicable platform policies

Passwords are not intended to be stored in readable form. They are processed using appropriate password-hashing and security measures.

2.2 Profile and Content Data

Depending on how the Service is used, we may process:

• Username, display name, artist name, biography, and profile description
• Profile images, photographs, artwork, and other visual content
• Country, region, city, and other voluntarily provided location information
• Music genres, tags, interests, preferences, and artist status
• Audio, images, videos, Spotlight content, external links, and embedded media
• Picks, news, comments, recommendations, reports, and other user-generated content
• Follows, contacts, searches, profile interactions, and preferences
• Rights confirmations, upload declarations, permissions, licences, and ownership statements
• Records relating to copyright, trademark, image rights, privacy, impersonation, or other legal complaints

Users must only submit content and personal data that they are legally entitled to use and make available through the Service.

2.3 Administrator-Created Unofficial Artist Profiles

Phaser administrators may create limited artist profiles before the relevant artist has registered on or directly created a profile through the Service.

These profiles are intended to organise and present publicly available professional information about artists and to facilitate music discovery.

An administrator-created artist profile may contain:

• Artist name, stage name, or publicly used professional name
• General biography or professional description
• Publicly associated country, region, or city
• Music genres and descriptive tags
• Links to official websites, social-media profiles, music platforms, labels, distributors, management pages, or other public sources
• Media embedded or linked from publicly accessible third-party services
• Other limited professional information already made publicly available

The information used for these profiles may be obtained from:

• Official artist websites
• Public artist, label, distributor, or management pages
• Public social-media profiles
• Music-streaming and music-distribution services
• Public press materials and professional publications
• Publicly accessible music databases
• Information supplied by users or Phaser administrators

Phaser seeks to limit administrator-created profiles to relevant professional information. Phaser does not intend to publish private, sensitive, or unnecessary personal information through such profiles.

2.4 Requests Concerning Administrator-Created Artist Profiles

For an administrator-created artist profile that has not yet been claimed, an artist, authorised representative, rights holder, or other affected person may use the dedicated public profile-request form or contact Phaser.

• Request access to or claim management of the profile
• Request correction of inaccurate, incomplete, or outdated information
• Report impersonation, misleading presentation, duplication, or legal concerns
• Notify Phaser that the artist already has or has created an official Phaser account
• Request restriction, merging, or removal of the profile
• Request information about the categories or sources of personal data used

The form may collect the requester's name, email address, role or relationship to the artist, request type, explanation, official reference URL, verification details, a good-faith confirmation, technical records such as the requester's IP address, and administrative review information.

Requests are stored in Phaser's database and made available to authorised administrators in the Control Room. An email alert may also be sent to the administrative address configured for Phaser. If email delivery fails, the database copy remains available for review.

Submitting a request does not automatically establish identity, authority, ownership, or entitlement to control the profile. Phaser may request proportionate verification through an official email address, website, social account, management, label, distributor, publisher, booking representative, or an existing official Phaser account.

A request may be marked as pending, verification required, verified, accepted, rejected, or resolved. Phaser may correct or update the profile; remove specific information, links, embeds, images, or media; temporarily restrict or hide it; mark it more clearly as unofficial; merge it with an official account; grant appropriate profile-management access; permanently remove it; or decline the request where Phaser has a lawful and adequately documented reason.

Phaser may reject requests that are fraudulent, abusive, contradictory, materially incomplete, unsupported, or not reasonably verifiable. Phaser will normally remove or restrict an unofficial artist profile when a verified artist or authorised representative raises a valid objection and Phaser has no overriding lawful reason to continue the processing.

2.5 Usage Data

We may process information about how users interact with the Service, including:

• Profiles and pages viewed
• Searches
• Follows and contacts
• Picks, reactions, and other interactions
• Preferences and settings
• Reports and moderation activity
• Dates and times of access
• Activity associated with account creation, authentication, and profile management

2.6 Technical and Security Data

• IP address
• Browser type and version
• Device and operating-system information
• Session identifiers
• Login and authentication records
• Security, error, and diagnostic logs
• Information used to detect fraud, abuse, automated activity, or unauthorised access

2.7 Cookies, Consent, Analytics, and Advertising Data

We use cookies and similar technologies as described in our Cookie Policy.

Where analytics or advertising is enabled, Phaser and its providers may process:

• Cookie and consent choices
• Device or browser identifiers
• Browser and device information
• IP address
• Approximate location derived from technical information
• Pages visited and interactions with the Service
• Advertising impressions and interactions
• Security and fraud-prevention signals
• Information used to select, deliver, limit, secure, or measure advertisements
• Information used for advertising personalisation where legally permitted and consented to

Where legally required, non-essential cookies and related analytics or advertising processing will not be activated before the user has made the relevant choice through the consent-management system.

Users may withdraw or modify their consent choices through the available cookie or privacy settings.

3. Purposes of Processing

We process personal data for the following purposes:

• Account management: creating, authenticating, maintaining, and securing accounts
• Platform functionality: providing artist and fan profiles, Picks, Spotlight, discovery, media, news, recommendations, and user interactions
• Unofficial artist profiles: creating and maintaining limited artist profiles based on relevant professional information
• Profile transparency: distinguishing unofficial profiles from artist-managed profiles
• Requests and objections: receiving and handling profile-access, claim, correction, restriction, objection, merging, and removal requests
• Security and abuse prevention: preventing fraud, impersonation, spam, abusive requests, and unauthorised access
• Communications: sending account, authentication, security, moderation, and service-related communications
• Content moderation: enforcing the Terms of Service and applicable platform policies
• Rights protection: investigating copyright, trademark, image-rights, privacy, impersonation, and other legal complaints
• Service improvement: maintaining technical performance, diagnosing errors, and developing features
• Legal compliance: complying with legal obligations and establishing, exercising, or defending legal claims
• Advertising: selecting, displaying, limiting, securing, personalising where permitted, and measuring advertisements

4. Legal Bases for Processing

4.1 Performance of a Contract

Processing may be necessary to:

• Create and maintain an account
• Authenticate users
• Provide requested Service functions
• Manage user profiles, content, settings, and interactions
• Respond to account-related requests

4.2 Legitimate Interests

Phaser may rely on legitimate interests for:

• Operating, securing, and improving the Service
• Preventing fraud, impersonation, abuse, and unauthorised access
• Moderating content and investigating complaints
• Maintaining limited unofficial artist profiles based on relevant professional information
• Organising publicly available artist information for music-discovery purposes
• Avoiding duplicate, inaccurate, or misleading profiles
• Protecting Phaser's legal rights and the rights of users or third parties

Where Phaser relies on legitimate interests, it considers:

• The purpose and necessity of the processing
• The nature and amount of the information
• The source from which the information was obtained
• The reasonable expectations of the person concerned
• The possible impact on that person
• The available safeguards, including data minimisation, unofficial profile labels, correction procedures, objection rights, and removal procedures

4.3 Consent

Phaser may rely on consent for:

• Non-essential cookies
• Certain analytics technologies
• Personalised advertising where applicable
• Other optional processing activities for which consent is specifically requested

Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4.4 Legal Obligations

Phaser may process personal data where necessary to comply with applicable legislation, binding requests, court orders, regulatory duties, or other legal obligations.

4.5 Legal Claims

Processing may also be necessary for the establishment, exercise, or defence of legal claims.

5. Information Not Collected Directly from the Individual

Some personal data used in administrator-created artist profiles may not be collected directly from the artist.

The categories of information concerned may include:

• Artist or stage name
• Professional biography or description
• General professional location
• Genres and descriptive tags
• Official or professional links
• Publicly accessible media embeds
• Other limited professional information

The sources may include official websites, public social-media pages, labels, distributors, streaming services, music databases, press materials, and other publicly accessible professional sources.

Phaser processes this information for the purposes described in this Privacy Policy and seeks to ensure that its use is proportionate, accurate, transparent, and limited to what is reasonably necessary.

An affected person may contact Phaser to request available information about the source of the data, subject to applicable legal limitations and the rights of others.

6. Whether Providing Data Is Required

Certain information, including an email address, username, and authentication credentials, may be required to create or access an account.

Information requested when reporting or requesting removal of an unofficial profile may be necessary to verify the identity or authority of the requester.

Failure to provide sufficient verification information may prevent Phaser from approving or fully processing the request.

Other profile information is generally optional unless expressly indicated otherwise.

7. Data Sharing

We do not sell personal data.

Personal data may be shared with:

• Hosting and infrastructure providers: providers supporting databases, servers, cloud storage, security, and technical infrastructure
• Email and authentication providers: providers supporting account, verification, authentication, and security communications
• Media providers: providers supporting hosting, streaming, encoding, embedding, and content delivery
• Analytics and consent-management providers: where enabled and used in accordance with applicable consent requirements
• Advertising providers: including Google or other providers, where advertising is enabled and subject to applicable consent choices
• Fraud-prevention and security providers: where reasonably necessary to protect the Service and its users
• Contractors and professional advisers: where necessary to support the operation of the Service or protect legal rights
• Complainants, affected users, artists, or rights holders: where limited disclosure is reasonably necessary to investigate or resolve a complaint, objection, counter-notice, ownership dispute, appeal, or legal claim
• Public authorities, courts, or regulators: where disclosure is required by law

Only information reasonably necessary for the relevant purpose will be disclosed.

Third-party providers may process personal data under data-processing agreements or according to their own privacy policies, depending on their role.

8. International Data Transfers

Some service providers may process or store personal data outside Italy or the European Economic Area ("EEA").

Where required, international transfers will be based on appropriate legal safeguards, which may include:

• An adequacy decision adopted by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Another legally recognised transfer mechanism
• Additional technical or organisational protections where appropriate

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

• Account and profile data may be retained while the relevant account remains active
• User content may be retained while it remains published through the Service
• Administrator-created artist-profile information may be retained while the profile remains relevant, accurate, lawful, and necessary for the purposes described in this Policy
• Requests concerning unofficial profiles may be retained for the time necessary to investigate and resolve the request
• Limited records of verified requests may be retained for a reasonable period to prevent fraud, repeated disputes, or unauthorised recreation of removed content
• Security, authentication, and technical logs may be retained for a limited period based on security and operational requirements
• Complaint, moderation, copyright, privacy, and legal records may be retained for as long as necessary to handle the matter and establish, exercise, or defend legal claims
• Consent records may be retained for as long as necessary to demonstrate consent choices and legal compliance

Upon account deletion:

• The profile and associated content will be removed from active public systems, subject to reasonable technical processing time
• Some information may remain temporarily in backups
• Limited information may be retained where necessary for security, fraud prevention, legal compliance, dispute handling, or legal claims
• Content involving other users may be retained where deletion would improperly affect their rights, subject to anonymisation or other appropriate measures where possible

Information that is no longer required will be deleted or anonymised where reasonably possible.

10. User and Data-Subject Rights

Subject to the conditions and limitations provided by applicable law, individuals may have the right to:

• Obtain confirmation as to whether their personal data is being processed
• Access their personal data
• Receive information about the purposes and categories of processing
• Receive available information about the source of data not collected directly from them
• Correct inaccurate or incomplete information
• Request deletion of personal data
• Request restriction of processing
• Object to processing based on legitimate interests
• Request data portability
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a competent data-protection authority
• Seek a judicial remedy

Where an individual objects to processing based on legitimate interests, Phaser will stop processing the relevant personal data unless Phaser can demonstrate compelling legitimate grounds that override the individual's interests, rights, and freedoms, or unless processing is necessary for the establishment, exercise, or defence of legal claims.

The right to deletion is not absolute. A request may be subject to applicable exceptions, including where processing remains necessary for compliance with a legal obligation, freedom of expression and information, or the establishment, exercise, or defence of legal claims.

To exercise your rights, contact us at: Phaser Contact page

Phaser may request information reasonably necessary to verify the identity or authority of the requester and to protect personal data from unauthorised access, alteration, or removal.

Phaser will respond within the period required by applicable law.

Individuals may also lodge a complaint with the competent data-protection authority, including the Italian Data Protection Authority: Garante per la protezione dei dati personali.

11. Security

We implement appropriate technical and organisational measures intended to protect personal data, including:

• Password hashing
• Access controls and authentication mechanisms
• Session and account-security measures
• Monitoring for unauthorised access or abusive activity
• Security logging
• Appropriate restrictions on administrative access
• Measures intended to protect stored and transmitted information

No online service or storage system can be guaranteed to be completely secure. Users are responsible for keeping their login credentials confidential and informing Phaser of suspected unauthorised access.

12. Third-Party Services and Embedded Content

The Service may include links, audio players, videos, images, widgets, or other content provided by third parties.

Examples may include music platforms, video platforms, social-media services, artist websites, labels, distributors, and other external services.

When third-party content is displayed, loaded, or activated, the relevant third-party provider may receive information such as:

• IP address
• Browser and device information
• The page visited
• Date and time of access
• Cookie or device identifiers
• Interaction with the embedded content

Third-party providers process this information according to their own terms and privacy policies. Phaser does not control all processing carried out independently by third-party providers.

Where technically and legally appropriate, non-essential third-party content may be subject to consent choices before activation.

13. Advertising

Where advertising is enabled, advertising providers may process information for:

• Advertising delivery
• Frequency limitation
• Measurement and reporting
• Security and fraud prevention
• Contextual advertising
• Personalised advertising where legally permitted and consented to

Where Google advertising services are enabled, Google may process information concerning devices, browsers, consent choices, visits, and advertising interactions in accordance with its own privacy terms.

Non-essential advertising technologies will be activated only in accordance with applicable consent requirements.

14. Children

The Service is not intended for persons below the minimum age required to independently consent to the relevant processing under applicable law.

Where parental or guardian consent is legally required, the Service may only be used with such valid consent.

Phaser may restrict or remove an account where it reasonably believes that the applicable age requirements have not been satisfied.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to the Service
• Changes to the categories or purposes of processing
• New providers or technologies
• Legal or regulatory developments
• Security or operational requirements

The updated Privacy Policy will be published with a revised "Last updated" date.

Where required by law, users will receive additional notice or be asked to provide a new consent choice.

16. Contact

For privacy questions, requests concerning personal data, or requests relating to an unofficial artist profile, contact:

Email: Phaser Contact page

Please provide enough information to identify the relevant account, profile, or request. Do not send unnecessary identity documents or sensitive personal information unless specifically requested through an appropriate verification process.