Privacy notice

Last updated October 13, 2026.

megafan.wiki is a personal, non-commercial catalogue of concert discs, run by one person. In this notice "I" means me, the person who runs it. It covers two kinds of visit: reading the wiki, which needs no account, and having an account. I don't sell or rent your information, and the site has no analytics, no advertising and no tracking of any kind.

Questions or requests: claims@megafan.wiki.

Reading the Wiki

The wiki is a set of static pages. Reading it sets no cookies and records nothing about you on my side.

• Hosting. The site is hosted by Cloudflare, which handles every request and keeps its own logs as described in Cloudflare's privacy policy.
• Photographs of artists and venues often come from Wikimedia Commons and load from Wikimedia's servers, which then see your IP address (Wikimedia's privacy policy).
• Music players. Some artist pages include a Spotify or Bandcamp player, which loads from that service when the page opens. A YouTube player shows a preview picture from YouTube's image server when the page opens and loads the video itself only when you press play. Those services receive your IP address and may set their own cookies under their own policies.
• "Owned by" counts. A release page asks the site how many members own that disc. The request carries no cookie, the answer is the same for everyone, and nothing about it is recorded on my side.
• The forum. Anyone can read it without an account. Reading it sets no cookies and records nothing about you. Searching it counts toward a limit on how many searches one connection can make in a minute, kept as a scrambled version of your IP address and deleted after 30 days, as described under "IP addresses".
• If you are logged in, each page reads a small "logged in" cookie and asks the site who you are, so it can show your username in the corner and, on a release page, whether that disc is in your collection.

Having an Account

What I Keep, and Why

• Username. Public: it appears on your profile page.
• Email address. Private, never shown on the site. Used to verify your account, reset your password, send the security emails listed below, and tell me who has joined (see "IP addresses").
• Password. Never stored. I keep only a one-way hash of it (Argon2id), from which the password cannot be read back. When you choose a password, the site checks it against Have I Been Pwned's list of leaked passwords. Only the first five characters of a hash of your password leave the site, so the password itself is never sent.
• Profile. The date you joined and an optional bio of up to 300 characters, both public. You can write a bio only after verifying your email.
• Collection. The releases you mark with "I own this", each with an optional note of up to 200 characters. Public unless you choose otherwise: your profile lists them, with their notes, and each release page counts them in "Owned by". Making your collection private in your settings takes it off your profile at once; the counts can take up to 5 minutes to catch up. You can add to a collection only after verifying your email.
• Want list. The releases you mark with "Want this". Public unless you choose otherwise: your profile lists them, and each release page counts them in "Wanted by". Making it private on your Edit profile page takes it off your profile at once; the counts can take up to 5 minutes to catch up. Adding a release to your collection takes it off your want list. You can add to a want list only after verifying your email.
• Profile picture, if you choose one: the cover of a release in your collection. It's public, on your profile and beside your forum posts. Nothing is uploaded; it is a cover already on the wiki. Removing that release from your collection removes the picture.
• Suggested corrections. Which page, what kind of mistake, what you said it should say, and any source you gave. Only moderators see your words. The notice I get names only the page and the kind of mistake. You're told when it is accepted or declined.
• Submissions. When you submit scans of a disc: what you tell me about it (catalogue number, artist, title, format, disc count and any notes for me), the scans, whether you asked to be credited, and each step of its review, which your submissions page shows you. The scans pass through Cloudflare's storage to my own computer, where I review them, and Cloudflare's copy of each batch is deleted as soon as I have it. Scans I accept become part of the wiki, credited to your username if you asked, or to "a contributor" if you didn't.
• Forum posts. The threads and replies you write, with your username, the time, and an "edited" mark if you change one. They are public: anyone can read the forum without an account, your profile shows your recent posts, and search engines can list the forum's pages. When you edit a post, the earlier version is kept for 90 days so moderators can see what changed.
• Likes and follows. Which posts you liked (a post shows only how many likes it has, never who gave them) and which threads you follow.
• Notifications. What each one is about: a reply, a mention, a quote, a moderator's action on your post, news about a submission, or the outcome of a correction you suggested. Read ones are deleted after 90 days.
• Two-factor authentication, if you turn it on: its secret and your recovery codes.
• Signed-in sessions. For each one: when it started, when it expires, and your browser's identification string. That string is shown on your settings page so you can recognise your devices and sign them out.
• Devices. A random identifier for each browser you sign in from, stored only in a scrambled form, so I can email you when your account is used on a new one.
• Reports you make about other accounts or posts, and the reason you give.
• The date and time you agreed to these terms.

IP Addresses

The site never stores your IP address as such. It keeps a scrambled, keyed version of it, used only to limit how many requests, login attempts and emails one address can trigger in a short time. Those records are deleted after 30 days.

When you sign up, the site sends me one message with your username, your email address and Cloudflare's estimate of where your connection comes from: a town or city, region and country, never anything closer. Your IP address itself is not in it. I use it only for demographics, a rough picture of who joins and from where, and to help spot accounts that may be malicious. The site's copy is cut down to a bare count after 7 days, or straight away if you delete your account. I receive the message on Discord, where it stays unless you ask me to delete it.

Cookies

All are first-party, used only to make the site work. None is used for analytics or advertising.

• The session cookie keeps you logged in. It can't be read by scripts and lasts up to 30 days, renewed while you use the site.
• mf_li is a simple "logged in" hint, so pages know whether to ask for your username. It contains no identity of any kind and lasts up to 30 days.
• mf_dev is a random identifier for your browser, used for the new-device emails. It lasts a year.
• A short-lived cookie holds a sign-in in progress while you enter a two-factor code.

The sign-up, login and password-reset forms use Cloudflare Turnstile to tell people from bots. Turnstile looks at technical information about your browser and connection to do that.

Emails

I send only what an account needs:

• account verification and password resets;
• security notices when your password or email address changes (an email change is also sent to the old address), when two-factor authentication is turned off, and when your account is used on a new device;
• a notice if someone tries to sign up with an email address that already has an account.

Each security email carries a "this wasn't me" link. If an email bounces, or the recipient reports it as spam, a scrambled form of the address goes on a do-not-send list. Mail is sent through Cloudflare's email service. There is no newsletter and no marketing. If you switch them on in your settings, I also send notification emails: at most one an hour about each thread and ten a day in all, each with a one-click unsubscribe link. They are off until you turn them on.

Where It Is Kept, and Who Helps Run It

The account database and the site's files are stored with Cloudflare, mostly in the United States. I live in the United States. The services that handle your information for the site are:

• Cloudflare: hosting, the database, file storage, sending email and bot checks;
• Have I Been Pwned: the leaked-password check described above.
• Discord: where I receive the message about each new sign-up.

The forum's search index, a copy of the text of visible posts, is kept with Cloudflare too. It is rebuilt from the posts themselves and is not backed up.

How Long

• Your account is kept until you delete it.
• An account whose email is never verified is deleted automatically after 7 days.
• Sessions end after 30 days without use, or as soon as you sign out or revoke them.
• Scrambled IP records are deleted after 30 days.
• Submissions: one you never send for review is deleted after a day. My copies of the scans are deleted 30 days after I accept or decline a submission (accepted scans stay in the catalogue). The record of each submission, what you told me and what I decided, is kept; if you delete your account, your name is removed from it.
• Backups: Cloudflare keeps a rolling 30 days of database history. I also keep a nightly copy of the database on my own computer, holding up to 14 daily and 8 weekly copies, so about two months. Any copy that leaves that computer is encrypted. If a backup ever has to be restored, every login is signed out, and every account deleted since that backup is deleted again.

Deleting Your Account

Delete your account from your settings page (it asks for your password, and your two-factor code if you use one). This removes:

• your email address and password hash;
• your sessions, devices, bio and collection;
• your want list, profile picture and suggested corrections;
• your likes, follows, notifications and email settings;
• your submissions still waiting for review, with their scans;
• anything waiting to be sent to you.

What stays:

• A record of the deletion: your account's internal number and the date, so the deletion is re-applied if a backup is ever restored.
• Your username, reserved for a year so nobody can impersonate you, then released.
• Scans I accepted, which stay in the catalogue with your name replaced by "a contributor". The wiki's pages lose your name the next time it is updated. The catalogue also has a private version history, kept on my own computers and never published, and it keeps earlier versions of those pages, with the credit as it was then.
• Your forum posts, shown as written by "former member" with your username gone. If your account was ever banned, they stay hidden. Delete any post yourself before deleting your account if you want it gone.
• Reports you made, with your name removed. Reports other people made about your account stay with the moderation record.
• The scrambled address on the do-not-send list, if your address was on it.
• A ban, if your account was banned: a scrambled form of the email address is kept for as long as the ban stands, so the same address can't simply sign up again.

Your Choices and Rights

• See your data. "Download my data" on the settings page gives you a file with your profile, email address, sessions, devices, collection, want list, suggested corrections, submissions, the reports you have made, and your forum posts with their earlier versions, likes, follows and email settings. Your password hash and two-factor secrets are left out: they are credentials, not information about you.
• Correct it. Change your email address and bio in your settings, and your collection and its notes on your collection page. A username can be changed by me on request.
• Delete it. As described above.
• Ask me anything about your information, or object to how it is used: claims@megafan.wiki.

If you live in the European Union or the United Kingdom, I process account information because it is needed to provide the account you asked for, and to keep it secure, which is a legitimate interest. Notification emails are sent only with your consent. You can complain to your data protection authority, but I'd rather you wrote to me first so I can put it right.

Children

Accounts are for people 13 and older. If I learn that someone younger has signed up, I delete the account.

Changes

If this notice changes, the date at the top changes with it. Anything that changes how your information is used will be announced on the site before it takes effect.