What Muses Exchange collects, why, and how you can have it deleted. Written in plain English, built to comply with the GDPR.
This website and the paper-trading platform at muses.exchange (together, the "Service") are operated by Muses Exchange (referred to as "Muses", "we", "us" or "the operator" in this document). Muses is based in the Netherlands and serves users globally.
For all data-protection matters, Muses is the data controller as defined in Article 4(7) of the EU General Data Protection Regulation (GDPR). You can reach us at privacy@muses.exchange.
Muses is engineered to collect as little personal data as practicable. The categories below are the complete list of what we hold about you.
What we do not collect: your legal name, phone number, physical address, ID documents, payment details, precise location, advertising identifiers, or any data from third-party tracking cookies.
| Data | Purpose | GDPR legal basis |
|---|---|---|
| Account email + password hash | Authenticate you into the Service | Art. 6(1)(b) — contract |
| Profile data | Personalise the Service and power the public leaderboard (where you have opted in) | Art. 6(1)(b) — contract |
| Paper-trading portfolio | Persist your session across devices | Art. 6(1)(b) — contract |
| Waitlist email | Notify you when access opens | Art. 6(1)(a) — consent |
| Anonymous analytics | Understand aggregate traffic and improve the Service | Art. 6(1)(f) — legitimate interest |
| Error reports | Diagnose and fix bugs | Art. 6(1)(f) — legitimate interest |
| Server logs | Abuse prevention and debugging | Art. 6(1)(f) — legitimate interest |
Because Plausible collects no personal data and we set no tracking cookies, the Service does not display a cookie-consent banner. For more detail, see our cookies policy.
We engage the following service providers to operate the Service. Each is bound by a data-processing agreement that restricts the use of your data to the purposes we direct.
We do not sell your data. We do not share it with advertisers. We do not pass your email address to any third party for marketing purposes. We respond to law-enforcement requests only to the extent required by applicable law and will notify you where legally permitted to do so.
Under the GDPR, you have the right to:
To exercise any right not available as a self-service control, email privacy@muses.exchange. We respond within 30 days of receiving a verified request, as required by Article 12(3) of the GDPR.
We protect your data with industry-standard controls: TLS 1.2+ encryption in transit, encryption at rest for the account database, password hashing at the authentication layer, row-level access controls on the database so your records are isolated from other users', and a coordinated vulnerability-disclosure process. No system is perfectly secure, but we treat account data as highly sensitive and will notify affected users without undue delay if a personal-data breach ever occurs, in accordance with Articles 33 and 34 of the GDPR.
Several of our processors are based in the United States (Supabase, Netlify, Sentry, Google). Where personal data is transferred outside the European Economic Area, we rely on the EU Standard Contractual Clauses (2021/914) as the transfer mechanism, supplemented by appropriate technical safeguards. Plausible processes data entirely inside the EU. You can request copies of the relevant clauses by emailing us.
The Service is intended for users aged 16 or older. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with their data, contact us and we will delete it.
When this policy changes in a way that materially affects how we process personal data, we will update the "Last updated" date at the top of the page and, where we hold your email address, notify you before the change takes effect.
General privacy queries, data-subject requests, and complaints: privacy@muses.exchange. Given the current scale of the Service, we have not appointed a Data Protection Officer — this is permitted under Article 37 of the GDPR because our processing does not meet the thresholds that require one. Queries are handled directly by the controller.
Further detail on the trackers (or lack thereof) used on the Service is available in our cookies policy. Risk information relating to the paper-trading simulation is set out in the risk notice.
Sign up free, get $10,000 in virtual credits, and start paper-trading 105 artists priced by real streaming data.