Privacy & your choices

Updated September 27, 2026. MEMBA controls the information you give us through this website. Contact memba.music@gmail.com about access, correction, deletion, or privacy questions.

Email and text updates

On First Listen, you can provide an email address, a mobile number, or both. The updates checkbox gives MEMBA permission to contact you through the details you provide; leaving a field blank does not grant permission for that channel. Other signup forms offer separate email and text choices. We process only the channel details you agree to submit, together with optional name and city. We keep a record of the notice, your choice, when and where you submitted, and delivery status in MEMBA’s private records. Website signups are saved with MEMBA; synchronization to a messaging provider is separate. Laylo handles requests made on its own signup pages and their message delivery. A request being accepted does not necessarily mean you are a new or confirmed subscriber.

Use the unsubscribe link in an email or reply STOP to a text to stop that channel. Contact us if you need help. We reconcile provider suppression before treating an export as usable for messaging. We do not sell or automatically enrich your contact details.

Optional measurement

Optional analytics and advertising measurement are off until you allow them. You can change your choice using “Cookies” on any page. We honor Global Privacy Control by turning both off. Rejecting tracking does not prevent signup.

With analytics permission, MEMBA records a random session identifier, page and section visits, form stages (never keystrokes), product interest, and merch or ticket link clicks in its private records. Sessions expire after 30 minutes of inactivity. Only recognized campaign labels are retained; arbitrary query text is discarded. We may associate your submitted contact with that session when you permit analytics. Anonymous visits do not reveal a person’s identity.

Vercel Speed Insights may sample performance. With both analytics and advertising permission, MEMBA’s Meta pixel and server adapter report permitted engagement using matching event identifiers. Meta receives a hashed session identifier and browser information. Hashing does not make personal information anonymous. We never treat a store click as a purchase or a submitted form as a confirmed acquisition.

Other providers

Music playback uses YouTube. The song-download page uses Laylo’s form and delivery rules. These services receive connection information when their content loads and apply their own privacy policies. Merch checkout takes place at Merchtable, which handles payment and fulfillment. We receive order information only if an authorized reporting connection or verified export is provided.

Storage and access

Website hosting is on Vercel. Contact, consent and permitted journey records are stored in a private Google spreadsheet controlled by MEMBA, with portable Excel or CSV copies for backup and analysis. Before those services are configured, the form reports unavailable rather than claiming to save your details. Private information is available only to authorized MEMBA operators. It is not stored in public code or this website’s public assets.

Raw journey events older than 90 days and redacted audit records older than 30 days are removed when the spreadsheet service is next used. Contact information remains while the relationship is active, with a minimal suppression record where needed to honor an opt-out. Access and deletion requests also cover our exported copies. Google may retain revision history under its own policies; contact us to coordinate deletion across those copies. Your cookie preferences are stored on your device for up to 180 days. Security rate limits use a keyed hash rather than retaining your raw IP for marketing.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete information, object to processing, or withdraw consent. Write to the address above. We may ask for enough information to verify the request without exposing someone else’s data.