MIC CHECK TRUST & PRIVACY
This page is maintained by the Mic Check team to answer common security and privacy questions about the app. It describes our current practices, not an independent certification.
Account access & authentication
Accounts are protected by email + password, Google sign-in, or a passkey. Sessions are stored in your browser and can be revoked at any time by signing out. Sign-in flows are handled by our managed backend provider; we never see your Google password.
Administrative actions (approving submissions, moderating content) are restricted to a small set of designated admin accounts and are enforced server-side, not in the browser.
What data we collect
We store the information you give us to use the app: your email, display name, the bands/venues/shows you submit, and which items you favorite or follow. We also store basic visit counts to understand traffic.
Band and venue profiles, including photos and schedules, are public by design — that's the point of the app. Personal contact details (phone numbers on venue profiles) are only shown to signed-in users.
How your data is protected
Data is stored in a managed Postgres database with row-level security policies that scope reads and writes per user. Traffic to the site is served over HTTPS. Passwords are hashed by our managed auth provider — we never store them in plain text.
Subprocessors
We use a small number of trusted vendors to run Mic Check:
- Lovable Cloud — application hosting and managed database/auth.
- Google Maps — map rendering on the Map page.
- Email delivery provider — for sign-in, password reset, and notification emails.
Cookies & analytics
We use a session cookie to keep you signed in, and a lightweight visit counter for traffic stats. We do not run third-party advertising trackers.
Retention & deletion
You can ask us to delete your account and any personal data tied to it at any time. Public submissions you've contributed (bands, venues, shows) may remain on the site if they're part of the community listing, but we'll remove your name and personal identifiers on request.
Removal requests
If you're a band, artist, venue, or event organizer and you'd rather not be listed, email us via the Contact page. We remove listings promptly.
Reporting a security issue
If you believe you've found a security vulnerability, please reach out through the Contact page with details so we can investigate and respond.
This page describes current practices and may be updated as the app evolves. It is not a legal contract or an independent audit statement.
