Introduction
This Privacy Policy describes how GreenGold Spaces collects, uses, and protects your information when you use any of our services — including the GreenGold Spaces music streaming site, the GreenGold Spaces blog, and the Auric Player mobile app.
By using any GreenGold Spaces platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our services.
Operated by GreenGold Spaces — Malawi. This policy covers all three platforms collectively. Where terms differ between platforms, this is stated explicitly.
Definitions
- Company — refers to GreenGold Spaces.
- Streaming Site — the GreenGold Spaces music streaming website.
- Blog — the GreenGold Spaces blog, where music is automatically published and promoted.
- Auric Player — the GreenGold Spaces mobile application available on Android and other platforms.
- Service — collectively refers to the Streaming Site, the Blog, and the Auric Player app.
- Country — refers to Malawi.
- Device — any device that can access the Service such as a computer, cellphone, or digital tablet.
- Personal Data — any information that relates to an identified or identifiable individual.
- Usage Data — data collected automatically from use of the Service.
- Artist — a registered user approved by the Admin to upload, manage, and monetise music on the platform.
- Streamer / Listener — a user who accesses, plays, or downloads music without requiring registration.
- Admin — a platform operator with full oversight of users, content, earnings, and system settings.
- Device Fingerprint — a set of device-specific technical attributes used to uniquely identify a device for download tracking and security purposes.
- You — the individual accessing or using the Service in any capacity.
Platform Roles
GreenGold Spaces is structured around three distinct user roles, each with different permissions and data interactions.
Admin
Full platform oversight — monitors all activity, payments, subscriptions, and user management including approving or rejecting Artist applications.
Artist
Registered and Admin-approved users who upload and manage music, track streams and downloads, and manage their earnings dashboard.
Listener
End-users who play, download, and share music. No registration required. Device fingerprinting applies on download for fraud prevention.
Data We Collect
Personal Data — Artists
- Username, email address, and phone number — for account management, identity verification, and payment
- Password — stored in encrypted form only. We never store plain-text passwords
- Registration IP address — stored for security and fraud prevention
- Phone and ID verification status — to confirm identity for earnings eligibility
- Music uploads, artwork, titles, genres, and associated metadata
- Earnings and payment-related information
- Activity logs: upload history, stream counts, and download counts
- Session tokens and API keys — to keep your account secure and authenticated
Technical Data — All Users
- IP address and general geographic location
- Device type, browser type, and version
- Pages visited, time and date of visit, and time spent on pages
- Diagnostic and performance data
- Cache data stored locally on your device for music player functionality
Device Fingerprint — Listeners (Downloads Only)
- Tracking and verifying download activity per track
- Preventing unauthorised redistribution and fraud
- Supporting Artist payment calculations based on verified download counts
Important: Device fingerprinting does not personally identify Listeners. By downloading any track, you acknowledge and consent to this device fingerprint registration as governed by our Terms of Use.
How We Use Your Data
- To provide, operate, and maintain the streaming site, blog, and Auric Player app
- To authenticate and manage Artist accounts
- To facilitate Artist application review and approval by Admins
- To track streams and downloads for accurate Artist earnings reporting
- To process and calculate Artist payments based on verified download data
- To monitor and enforce our Terms of Use, particularly regarding download security
- To improve platform performance, user experience, and caching functionality
- To automatically publish uploaded music to the blog and Auric Player app, where the Artist has consented
- To contact Artists regarding account updates, security alerts, and earnings notifications
- To prevent fraud and protect the integrity of Artist earnings
Music Publishing & Blog Distribution
When an Artist uploads music and agrees to our Privacy Policy and Terms of Use, the uploaded track will:
- Be automatically posted to the GreenGold Spaces Blog for public discovery and promotion
- Be made available for streaming on the GreenGold Spaces streaming site
- Be distributed and streamable on the Auric Player mobile app
Artists retain full ownership of their music at all times. Artists may manage or withdraw their tracks from their account dashboard at any time.
Earnings & Payments
- Download and stream counts are tracked to ensure accuracy and prevent fraud
- Artists must meet eligibility requirements before requesting earnings — see the Artist dashboard
- Payments are processed manually by the Admin and subject to minimum thresholds and subscription status
- Admins have full visibility of all earnings and payment activity across the platform
- Artists must verify their phone number and ID to become eligible for payouts
Listener Privacy
When You Stream
- IP address — to prevent fraud and count legitimate streams
- Device fingerprint — unique identifier based on your browser/device (not personally identifiable)
- User agent — browser and device type
- Stream timestamp — when you played the song
When You Download
- IP address — fraud prevention and rate limiting
- Device fingerprint — prevents duplicate downloads counting multiple times
- Download timestamp — when you downloaded the song
- Song ID — which song you downloaded
Cookies We Use
- Device fingerprinting cookies — store browser properties for fraud detection
- Consent cookie — records that you accepted this Privacy Policy
- Session cookies — standard cookies to maintain platform functionality
- We track downloads within a 30-day window to prevent manipulation of Artist earnings
- IP addresses downloading the same song repeatedly are rate-limited
- Device fingerprints help us recognise repeat downloaders
- Suspicious IPs are automatically flagged and may be temporarily restricted
- Normal use is always allowed — these limits only affect abuse
- ❌ No registration or account required to listen
- ❌ No email addresses from Listeners
- ❌ No passwords or personal names
- ❌ No payment information
- ❌ No precise geolocation
- ❌ No browsing history outside our platform
- ❌ We do not sell your data to advertisers
Our commitment: No ads that track you. No data selling. Just a platform that respects both Artists and Listeners.
Data Sharing
- Service Providers — to support platform operations, analytics, and performance monitoring
- Legal Compliance — where required by law, regulation, or legal process
- Copyright & DMCA — in connection with copyright disputes or takedown requests
- Business Transfers — in the event of a merger or acquisition, subject to equivalent privacy protections
- With Your Consent — for any other purpose with your explicit consent
We do not sell Personal Data to third parties for advertising or marketing purposes.
Services We Use
- ExchangeRate-API — currency conversion for Artist payments (no personal data shared)
- ipapi.co — geographic IP lookup for fraud detection only (no personal data shared)
Data Retention & Deletion
Artists
- All account data retained while your account is active
- Songs and performance metrics retained as long as your account exists
- Deleted accounts permanently removed within 30 days, including all songs and metrics
Listeners
- Device fingerprints retained for 30 days from last activity
- Download records retained for 30 days for duplicate prevention
- Stream records retained for Artist earnings calculation
- IP ban records retained until the ban is lifted or reviewed
Security
- HTTPS encryption — all data transmitted securely
- HTTPOnly and Secure cookies — preventing unauthorised access to session tokens
- Encrypted password storage using industry-standard hashing
- SQL injection prevention via parameterised database queries
- Rate limiting to prevent brute force attacks
- Session regeneration on every login to prevent session fixation
- Admin approval of all new Artist accounts before activation
No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but commit to industry-standard best practices.
Children's Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13.
If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us immediately so we can take appropriate action and delete the information.
Third-Party SDKs
The Auric Player mobile app integrates the following third-party SDKs. Users may opt out at any time from the app settings.
🍯 Honeygain SDK Optional
Allows users to optionally share unused internet bandwidth. Entirely voluntary. Only the device's IP address is collected by Honeygain.
🌐 Bright Data SDK Optional
Users may enable Web Indexing in return for premium features. Only the device's IP address is used. No personal information or app activity is accessed.
Your Rights
For Artists
- Access your data — request a complete copy of all data we hold about you
- Correct your data — update your profile information at any time from your dashboard
- Delete your account — permanently removes your account, songs, and metrics within 30 days
- Appeal decisions — contest eligibility rejections or copyright flags by contacting us
For Listeners
- Clear your fingerprint — clear browser cookies to reset your device fingerprint
- Request data deletion — we will remove your download and stream records within 30 days
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, platform features, or applicable law. We will notify you of any changes by updating the "Last updated" date at the top of this page.
For significant changes affecting Artist rights or Listener data collection, we will provide additional notice via email (for registered Artists) or a platform notification. Continued use of the platform after changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, reach us at:
Get in touch
GreenGold Spaces — Malawi
Josephy Lapken, Founder