PRIVACY · GDPR
Privacy – ScottGalan Official and MY SGMI
Privacy information for MY SGMI, contact forms, external media, AI assistant and local preferences.
Controller
Scott Galan, Ziegelhofstraße 36, AT-1220 Vienna, Austria. Privacy contact: scottgalan.info@gmail.com.
Fan portal and profile data
Email address and display name may be processed to identify an account. Voluntary profile data, avatar and favourites are retained until deletion or while the account is in use.
Forms and external media
Enquiries are stored in the protected website database for review. YouTube, Spotify and Bandcamp content loads only after consent to external media.
AI assistant
Questions may be sent server-side to the configured AI provider. Users should not submit sensitive information; ratings are processed separately and with data minimisation.
Rights
Data subjects have rights including access, correction, erasure, restriction, portability and objection, and may complain to the Austrian Data Protection Authority.
Fan & artist portals · usage & privacy
Free accounts use the existing sign-in. Fan lists, interests, listening history, drafts, original files, rights information and internal feedback stay private. Listening history is off by default and optional; disabling it deletes recorded listening events. Followed artists remain private.
Artist information is stored separately from the fan profile. Artist name, approved biography, works, credits and explicitly shared contacts become public only after review. The account email is not published automatically. Content is supplied by the artist; registration implies neither verification nor an SGMI contract.
Upload only your own works or works specifically cleared for this use. Confirm rights to audio, cover, profile image and any lyrics, including website playback and promotion. Credit other rights holders as required. Unclear rights are resolved before publication. You retain your rights; approval covers only the submitted website use and agreed promotion. Streaming is not technical copy protection.
Supported formats are MP3 and JPEG/PNG. Limits are 12 MiB per MP3, 3 MiB per image, five MP3s, 15 images and 60 MiB per artist. Private originals and cleaned playback variants count together. The new upload area is capped at 256 MiB and 100 artist profiles. Reservations and pending cleanup count towards quotas. New uploads stop at a limit. There is no unlimited hosting promise, automatic upgrade, distribution or income promise.
File signatures, MP3 frames, dimensions, size, ownership and quotas are checked. This is not antivirus, fingerprinting or automatic copyright verification. Submissions receive manual review. Significant changes revoke approval and require a new review. Time windows control visibility only for approved content. Private previews remain protected.
The controller is the operator named in the legal notice. Authorised reviewers can access submissions and rights information for review. Records and files use the existing hosting infrastructure; existing email services deliver account messages. Rights information and saved versions stay protected. Export and account deletion include your portal data. Withdrawal stops public delivery immediately; files remain private until file or account deletion. Incomplete uploads are cleaned after 24 hours on the next authorised upload. No additional paid service is introduced.
Submissions can be rejected, returned for changes or specifically blocked for rights or security issues. Decisions have a stored reason. To challenge a decision or request another review, use contact or the report page and identify the affected content or submission. Other users’ account data is not disclosed. Reports are confidential; no immediate decision is guaranteed. Open comments, direct messages and forums are not enabled.
These notes describe implemented workflows. A complete legal assessment of the user-content service remains required.Independent MY SGMI accounts and account emails
The independent account uses an email address, display name and password. Passwords are stored as salted scrypt hashes, never as plain text. Account records, verification state, sessions and request limits are stored in the website database. Essential Secure, HttpOnly and SameSite cookies identify the session. Sessions expire after seven days and can be revoked.
Verification and password-reset emails are sent through Resend (Plus Five Five, Inc.). The provider receives the recipient address, sender, subject, message and expiring confirmation or reset link, and processes delivery events. The configured sending region is eu-west-1; open and click tracking are disabled. An EU sending region does not mean that every provider operation or subcontractor is confined to the EU. Resend privacy information.
Confirmation links expire after one hour and reset links after 30 minutes. Reset tokens are single-use, and a successful reset revokes existing sessions. Account emails are necessary transactional messages; registration does not subscribe you to marketing. Optional profile content and saved items remain under your control through the profile, export and deletion functions.
Existing profiles remain assigned to their original owners. Connecting an old profile requires both a verified independent account and the authenticated original identity with matching addresses. Entering an email address alone does not transfer an old profile. The legacy sign-in remains available for this ownership check while the transition is in progress.
Display choices and optional weather atmosphere
Font, palette, brightness, motion and transparency are stored locally; signed-in accounts can also store the approved display preferences. Fonts use local files or fonts installed on your device, without a font-service request. Seasonal decoration can be paused or disabled. The optional weather atmosphere uses a city centre you select (Vienna, Berlin or London), never automatic device location. A server proxy retrieves and temporarily caches forecast data from MET Norway. The provider receives the server request and selected city coordinates, not your account identifier or browser IP from this proxy. The selected city stays in this browser until changed or local storage is cleared. Weather summaries are estimates from forecasts, not real-time station measurements; unavailable or old data results in a neutral atmosphere. MET Norway · CC BY 4.0.
Account-processing information updated: 10 October 2026. The existing privacy sections and provider disclosures continue to apply.
Contact, reports and appearance preferences
Enquiries are stored directly in the protected website database: category, affected URL, subject, description, optional contact details and review status. Only the authorised operator can read them in the protected review area. The existing Resend connection sends a notification containing a reference and protected link to scottgalan.info@gmail.com; it contains no description or sender details. Storage supports requested enquiries and the legitimate interest in addressing abuse and errors. Resolved enquiries are deleted on the next review-area access after 90 days. Open enquiries are reviewed there and deleted when their purpose ends. Spam protection retains a server-secret-hashed IP reference for no longer than the rate-limit period plus one day. There are no attachments or public report lists.
Palette, brightness mode, reduced motion and transparency are stored locally. Signed-in users can also save the additional appearance settings in their own account, export them and delete them with the account. The recommendation band uses normal external links without its own tracking and labels unpaid links.
Technical update of 7 October 2026
After consent to external media, the music player also loads the YouTube Player API from youtube.com. It controls playback, pause, volume and progress of the embedded YouTube player. Without this consent, neither the player nor its external controller is loaded.
In addition to the colour scheme, preferences for reduced motion and reduced transparency are stored locally in the browser being used. These appearance preferences are not sent to an additional service.
Interactive main feature