Privacy Policy

The goal of this application is to allow batch-submission of ISRCs to MusicBrainz while storing the minimum amount possible of personally identifiable data. No data is sent to any third parties other than MusicBrainz, and persistent data is stored in your browser only as a result of choosing to log in. Note that your login to MusicBrainz and requests to load release information or submit ISRCs are subject to the MetaBrainz Privacy Policy.

Web browser local storage

The following personal data is used by MagicISRC but is stored only in your web browser local storage. This data is never sent to the server hosting MagicISRC or to any third parties other than MusicBrainz:

• MusicBrainz login information. This includes your username, an access token for making API requests to submit ISRCs on your behalf, and any personal information on your MusicBrainz user profile that you have made visible to the public.
• Code verifier. As part of the login process, a secret verification code is used to prevent your login credentials from being intercepted.

Data sent to MusicBrainz

When you load a release, log in, or submit ISRCs, some data is sent to MusicBrainz. Please read the MetaBrainz Privacy Policy for details about what they do with this data. The following data may be sent to MusicBrainz:

• IP address & Browser “User-Agent” String.
• The fact that you are using the MagicISRC tool. MusicBrainz requires that third-party applications using the API identify themselves for rate limiting and abuse handling reasons. The name of the ISRC submission tool is also shown on the ISRC addition edits that are created (see an example).
• MusicBrainz access token. (when submitting ISRCs)
• Code verifier. (when logging in)
• Release MBID. (when loading a release)
• Recording MBIDs and ISRCs. (when submitting ISRCs)

Web access logs

Like many other web services, I keep logs of all web requests made to this service. These logs are used for diagnostic and traffic management purposes, and no information from them is sent to any third party or made available publicly. The logs are deleted after 14 days, although anonymized aggregate traffic data may be preserved indefinitely. The following personal data is logged:

• IP address & Browser “User-Agent” String.

• URL of the loaded page.

  The URL may include the MBID of the selected MusicBrainz Release, and the data that you have filled into the ISRC fields.

  During the login process, a one-time authorization code is logged as part of the URL. This code cannot be used by itself to gain access to your account – The code verifier (stored only in your browser) is also required.