Privacy Policy — TrustyLeak
Effective date: April 6, 2026
Compliance: CCPA, GDPR principles
1. Our commitment to privacy
TrustyLeak was built with the protection of independent artists and music creators as a core principle. We understand that exposing distributor misconduct requires courage, and we have designed our Platform to minimize the exposure of any information that could identify or endanger our users or their music catalogs.
This Privacy Policy describes how we collect, use, store, and protect information in connection with your use of trustyleak.com.
2. Information we collect
Anonymous submissions: You may submit reports and reviews without creating an account. Anonymous submissions do not require any personally identifiable information. We strongly encourage anonymous reporting to protect users from potential retaliation.
Account information: If you choose to create a voluntary account, we collect your email address and a securely hashed password. All credentials are stored using industry-standard cryptography via Supabase Auth. We do not store plaintext passwords under any circumstances.
Usage data: We automatically collect non-identifiable technical data such as browser type, session timestamps, and interaction logs solely for the purposes of platform security, performance monitoring, and protection against distributed denial-of-service (DDoS) attacks. This data cannot be used to identify individual users.
3. Public information and aggregated content
TrustyLeak's AI systems process publicly available information that users have voluntarily published in public digital spaces, including but not limited to public forums, review platforms, and social media. If your publicly posted username or comment appears in an aggregated summary on our Platform, it is because that information was already made available to the general public by you or the platform on which it was originally posted.
If you believe public information attributed to you has been reproduced in error or without proper context, you may submit a content review request as outlined in Section 6 of this Policy.
4. How we use your information
We use collected information exclusively to:
- Operate and improve Platform functionality
- Generate aggregate, anonymized trust scores
- Maintain Platform security and integrity
- Communicate with registered users regarding service updates
- Comply with applicable legal obligations
We do not sell, rent, or share personally identifiable information with third parties for marketing or commercial purposes.
5. Data security and retention
We employ industry-standard security measures to protect all data stored on our Platform, including encryption in transit and at rest. Account credentials are managed through Supabase Auth's enterprise-grade security infrastructure.
We retain user account data for as long as the account remains active, or as required by applicable law. Anonymous submission data is retained indefinitely as part of the Platform's public transparency record, unless a valid removal request is submitted.
6. Your rights and content removal
Depending on your jurisdiction, you may have the right to access, correct, or request deletion of personal information we hold about you. To exercise any of these rights, or to request review of content you believe was included in error, please contact us at: privacy@trustyleak.com
We will respond to all valid requests within 30 days.
7. Cookies and tracking
We use only essential functional cookies necessary for Platform operation, such as session authentication tokens. We do not use advertising trackers, third-party analytics services that collect identifiable data, or fingerprinting technologies.
8. Children's privacy
TrustyLeak is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to our Platform, please contact us immediately at privacy@trustyleak.com.