Privacy Policy

1. Who We Are

HipHop.World ("we," "us," or "our") is a network of platforms operated by One vs Many LLC. Our network includes hiphop.world, hiphop.id, hiphop.audio, hiphop.land, hiphop.cash, hiphop.cards, hiphop.community, hiphop.directory, hiphop.chat, hiphop.network, and additional affiliated domains (collectively, the "Network"). This Privacy Policy describes how we collect, use, store, and share your personal information when you use any site or service within the Network.

For questions or concerns about this policy, contact us at contact@hiphop.world.

2. Information We Collect

2.1 Information You Provide

• Account Data: When you register for a HipHop.ID account, we collect your email address, username, display name, and a securely hashed password. We never store passwords in plaintext.
• Profile Information: You may optionally provide a bio, avatar image, location, social media links, and other profile details.
• Payment Information: When you purchase credits, land territories, or subscriptions, payment is processed through PayPal. We receive your PayPal email, transaction ID, and payment amount. We do not receive or store your full credit card number or PayPal password.
• Communications: Messages you send through our messaging system, contact forms, or community channels are stored to provide the service.
• Content Submissions: Music, lyrics, annotations, card content, and other creative works you submit to the platform.

2.2 Information Collected Automatically

• IP Address: We log your IP address for security, rate limiting, and fraud prevention. IP addresses used in analytics are hashed to protect your privacy.
• Cookies and Local Storage: We use essential cookies for session management and authentication. Optional analytics and marketing cookies are only set with your explicit consent. We store your theme preference and language selection in localStorage.
• Device Information: We collect your browser type, operating system, screen resolution, and referring URL to optimize your experience and diagnose technical issues.
• Usage Data: Page views, feature interactions, and performance metrics help us improve the platform. We use server-side analytics rather than third-party tracking scripts wherever possible.

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your Google account email, name, and profile picture. We do not access your Google contacts, drive, or other data.
• Discord: If you connect your Discord account, we receive your Discord username, discriminator, and avatar to enable community features and channel access.
• Music Platforms: If you connect Audius, YouTube, or SoundCloud accounts, we import public track metadata (titles, URLs, artwork) to display on your profile. We do not access private playlists or account settings.
• Web3 Wallets: If you connect MetaMask, Phantom, or Xverse wallets, we store only your public wallet address. We never request or have access to your private keys.

2.4 Directory Data

Our hip-hop directory contains approximately 2,686 artist profiles that were auto-seeded from publicly available sources such as music databases, public social media profiles, and open music APIs. This data includes artist names, genres, locations, and public profile URLs. If you are an artist in our directory and wish to claim, edit, or remove your profile, contact us at contact@hiphop.world or use the "Claim Profile" feature on your directory listing.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services across the Network
• Process transactions, including credit purchases, land claims, and subscriptions
• Authenticate your identity and secure your account (including two-factor authentication)
• Send transactional emails such as password resets, purchase confirmations, and account notifications
• Enable cross-site single sign-on (SSO) so you can use one account across all Network sites
• Power community features including messaging, forums, and Discord-bridged channels
• Display personalized content recommendations and territory suggestions
• Enforce our Terms of Service and prevent abuse, fraud, and spam
• Generate aggregated, anonymized analytics to understand platform usage trends
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share data only in these limited circumstances:

• Service Providers: We share data with providers who help us operate the platform, including PayPal (payment processing), Google Cloud (OAuth authentication), PHPMailer (email delivery), and Sentry (error tracking). These providers process data only on our behalf and under our instructions.
• Public Profiles: Your username, display name, avatar, bio, and any content you publish (music, cards, territory pages) are publicly visible by design. You control what appears on your profile.
• Community Features: Messages in public channels, forum posts, and community content are visible to other members according to channel access rules.
• Network Advertising: Our ad engine displays promotions across Network sites. We use aggregated category and geographic targeting. We do not share individual user data with advertisers.
• Legal Requirements: We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, safety, or property.
• Business Transfers: If One vs Many LLC is acquired, merged, or sells assets, user data may be transferred as part of that transaction. We will notify users of any such change.

5. Cookies and Tracking Technologies

We use cookies and similar technologies as follows:

Category	Purpose	Can You Opt Out?
Necessary	Session management, authentication, CSRF protection	No (required for service)
Analytics	Usage statistics, performance monitoring, error tracking	Yes, via cookie banner
Marketing	Network ad personalization, promotional features	Yes, via cookie banner

You can change your cookie preferences at any time using the cookie settings link in the site footer. We also respect Do Not Track browser signals.

6. Data Security

We take the security of your data seriously and implement the following measures:

• Passwords are hashed using bcrypt with a cost factor of 12. We never store or log plaintext passwords.
• All connections use HTTPS with TLS encryption via Cloudflare.
• Sessions are regenerated on login to prevent session fixation attacks.
• CSRF tokens protect all form submissions and state-changing API requests.
• API endpoints implement rate limiting to prevent brute-force attacks.
• Admin actions are logged and require elevated authentication.
• Verification tokens use cryptographically secure random generation and expire after 24 hours.
• Security headers (Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Content-Security-Policy, Permissions-Policy) are set on all responses.

While we strive to protect your information, no method of electronic transmission or storage is completely secure. If you discover a security vulnerability, please report it to contact@hiphop.world.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained until you delete your account. Upon deletion, personal data is removed within 30 days. Some data may be retained in anonymized form for analytics.
• Transaction Records: Retained for 7 years for tax and legal compliance.
• Server Logs: IP addresses in access logs are retained for 90 days, then purged.
• Error Tracking: Error logs with diagnostic data are retained for 30 days.
• Cookie Consent Records: Retained for 13 months as required by GDPR.
• Messages: Retained while your account is active. Deleted upon account deletion.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request that we limit how we process your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent for optional data processing at any time.

Our legal bases for processing are: consent (cookies, marketing), contract performance (account services, transactions), legitimate interest (security, fraud prevention, platform improvement), and legal obligation (tax records, law enforcement requests).

To exercise any of these rights, email contact@hiphop.world with the subject line "GDPR Request." We will respond within 30 days.

9. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: Request the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected.
• Right to Opt Out of Sale: We do not sell personal information. There is no need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To make a request, email contact@hiphop.world with the subject line "CCPA Request." We will verify your identity before fulfilling the request and respond within 45 days.

10. International Data Transfers

Our servers are located in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States. We implement appropriate safeguards for international transfers, including data processing agreements with our service providers.

11. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at contact@hiphop.world.

12. Third-Party Links

Our platform may contain links to third-party websites, services, and content. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any external service you visit through our platform.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting a notice on our website and, where possible, sending an email to the address associated with your account. Your continued use of our services after a change constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

One vs Many LLC
Email: contact@hiphop.world
Website: https://hiphop.world