● Last updated April 19, 2026
Plain-English summary
Muses is a hobby prototype. The only personal data it touches is your email (if you join the waitlist or make an account) and anonymous page-view stats. It's hosted on Netlify. No cookies track you across other sites, no data gets sold, and you can have everything deleted by emailing
hello@muses.exchange.
What Muses is
Muses is an independent paper-trading prototype at muses.exchange, built and operated by a single individual in the Netherlands. It is not a company, not a regulated financial service, and not a product you pay for. It uses virtual credits only — no real money changes hands.
This policy covers the Muses website and the paper-trading prototype reachable from it. It is written to comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR.
What we collect
Very little, by design. Specifically:
- Your email address, if you choose to enter it into the waitlist form or to create a sign-in account. Waitlist emails are collected through Netlify Forms; account emails are handled by Netlify Identity (GoTrue).
- Your password, if you create an account. It is stored hashed by Netlify Identity — we never see the plaintext.
- Anonymous analytics: page views, referrer, country, browser, and device type, collected by Plausible Analytics. Plausible does not use cookies, does not generate a persistent visitor ID, and does not collect anything that identifies you individually. See their data policy for technical detail.
- Server logs kept briefly by our host, Netlify — IP address, request time, requested URL, user agent. These are used to protect the site from abuse and are not combined with the email or account data above.
What we don't collect: your name, phone number, ID documents, payment details, location, advertising identifiers, or any third-party tracking cookies. Your virtual portfolio (trades, balance, watchlist) is stored entirely in your browser's local storage and never sent to us.
Why we collect it (legal basis)
- Waitlist email — your consent (GDPR Art. 6(1)(a)). You give it by submitting the form. You can withdraw it at any time by emailing hello@muses.exchange.
- Sign-in account — performance of a contract (Art. 6(1)(b)): we need your email to let you log back into your account.
- Anonymous analytics — legitimate interest (Art. 6(1)(f)): knowing which pages get visited helps us improve the product. Because Plausible collects no personal data, no consent banner is required under the EU ePrivacy Directive.
- Server logs — legitimate interest (Art. 6(1)(f)): keeping the site online and defending it against abuse.
Who sees it
Only the processors actually needed to run the site:
- Netlify, Inc. (United States) — hosts the site, runs Netlify Forms (waitlist) and Netlify Identity (sign-in). Their processing of your data is governed by Netlify's privacy policy.
- Plausible Insights OÜ (Estonia, EU) — runs the analytics. Plausible's privacy policy.
We do not sell your data. We do not share it with advertisers. We do not pass your email to any third party for marketing purposes. If a law enforcement request ever arrives, we will comply only to the extent required by law and will notify you where legally permitted.
How long we keep it
- Waitlist email — until you ask us to delete it, or until the waitlist is retired (whichever is sooner).
- Account email + password hash — while your account is active, plus up to 30 days after deletion for backup pruning.
- Server logs — typically 30 days or less, per Netlify's defaults.
- Analytics — retained indefinitely in aggregate form, since it contains no personal data.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct it if it's wrong.
- Delete it ("right to be forgotten").
- Export it in a portable format.
- Object to, or restrict, processing based on legitimate interest.
- Withdraw your consent for the waitlist at any time.
- Lodge a complaint with your national data protection authority. In the Netherlands that's the Autoriteit Persoonsgegevens.
To exercise any of these, email hello@muses.exchange. We aim to respond within 30 days; in practice it's usually same-week.
International transfers
Netlify is based in the United States, so your waitlist or account email is transferred outside the EU when it reaches Netlify's servers. Netlify's terms incorporate the EU Standard Contractual Clauses as the transfer safeguard. Plausible is EU-based and processes analytics data inside the EU.
Children
Muses is not designed for anyone under 16. We do not knowingly collect data from children under that age. If you believe a child has entered their email, contact us and we will delete it.
Questions, complaints, or data requests: hello@muses.exchange. Because Muses is operated by one person, there is no separate Data Protection Officer — you're talking directly to the controller.