Privacy Policy

MyGarageFans is a live-music platform connecting fans, artists, and venues. We are not yet launched. This website is a single-page pre-launch site whose only function is to let you join our newsletter and early-access mailing list. There is no product, no accounts, no payments, and no user-generated content at this time.

This Privacy Policy explains how MyGarageFans ("MyGarageFans," "we," "us," or "our") collects, uses, shares, and protects your personal information when you visit our website at https://mygaragefans.com (the "Site") and when you join our mailing list.

Our commitment: we collect only what we need to operate the Site and our mailing list, we never sell your data, and we give you control over your information.

Because this is a pre-launch site limited to a mailing list, the information we collect is narrow. Here is what we collect and why:

Information we do NOT collect: we do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, or health information through this website. We do not host accounts, payment details, or user-generated content.

We use your information only for specific, legitimate purposes. Under the GDPR, we must have a "lawful basis" for processing your data. Here is how we use it:

How You Give Consent

• Mailing list: by checking the opt-in checkbox and submitting the signup form.
• Analytics cookies: by selecting "Accept" on our cookie consent banner.
• reCAPTCHA: automatically activated to protect the signup form (covered under our legitimate interest in preventing spam and abuse).

How to Withdraw Consent

You can withdraw consent at any time through these methods:

• Email marketing: click the "Unsubscribe" link in any email we send.
• Analytics cookies: use the cookie settings link in our footer or clear your browser cookies.
• All data: email us at privacy@mygaragefans.com to request deletion.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

We use trusted third-party services to operate this Site and our mailing list. Here is who they are and what they do:

Cookies are small text files stored on your device that help the Site function and help us understand how it is used. Here are the cookies we use:

Strictly Necessary Cookies

These cookies are essential for the website to function. You cannot opt out of these.

Analytics Cookies (Require Consent)

These cookies help us understand how visitors use the Site and run only after you accept them.

Regardless of where you live, we believe everyone deserves control over their personal data. Subject to applicable law, your rights include:

• Right to access: request a copy of the personal data we hold about you.
• Right to correction: request correction of inaccurate or incomplete data.
• Right to deletion: request deletion of your personal data.
• Right to data portability: receive your data in a machine-readable format.
• Right to restrict processing: limit how we use your data.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent at any time.
• Right to complain: lodge a complaint with a supervisory authority.

To exercise any of these rights: email us at privacy@mygaragefans.com. We will respond to all legitimate requests within 30 days (or within the timeframe required by applicable law).

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Your California Rights

• Right to know: what personal information we collect and how it is used.
• Right to delete: request deletion of your personal information.
• Right to correct: request correction of inaccurate information.
• Right to opt out: opt out of sale/sharing (not applicable — we do not sell or share).
• Right to non-discrimination: we will not treat you differently for exercising your rights.

Categories of Personal Information Collected

To submit a request: email privacy@mygaragefans.com with "California Privacy Request" in the subject line.

MyGarageFans is based in the United States. If you access the Site from outside the US, please be aware that your information may be transferred to, stored, and processed in the United States.

Safeguards for EU/EEA/UK Users

We protect international data transfers through:

• EU-US Data Privacy Framework: our email provider (Mailchimp) is certified under the EU-US DPF.
• Standard Contractual Clauses (SCCs): we rely on EU-approved SCCs with service providers where applicable.
• Supplementary measures: including encryption in transit and at rest.

By using the Site, you acknowledge that your data may be transferred internationally with these protections in place.

We implement safeguards to protect your personal data:

Technical Measures

• TLS encryption for all data in transit (HTTPS).
• Encryption of data at rest with our service providers.
• Access controls and authentication for our systems.
• Bot protection via Google reCAPTCHA v3.

Organizational Measures

• Privacy-by-design principles in how we build the Site.
• Vendor review before engaging service providers.
• Data minimization — we only collect what we need.

Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify affected users without undue delay (within 72 hours where required by GDPR).
• Report to relevant supervisory authorities where required.
• Provide information about the breach and steps you can take to protect yourself.

We retain your data only for as long as necessary to fulfill the purposes described in this policy:

After the retention period, data is securely deleted or anonymized.

Our mailing list is intended for adults. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@mygaragefans.com.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible.

For users between 13 and 16 years old (or the applicable age of consent in your jurisdiction), parental consent may be required for certain processing activities.

We respect your browser's privacy signals:

• Do Not Track (DNT): we honor DNT browser signals. When DNT is enabled, we will not load analytics cookies without explicit consent.
• Global Privacy Control (GPC): we recognize and honor GPC signals as a valid opt-out mechanism, treating them as a request to opt out of data sharing and targeted advertising (though we do not engage in those practices).

Strictly necessary cookies (such as your cookie consent preference) will still function regardless of these signals, as they are essential to website operation.

reCAPTCHA Risk Assessment

We use Google reCAPTCHA v3 to protect our signup form from spam and abuse. This involves automated analysis of your browser behavior to generate a risk score.

• What it analyzes: browser characteristics and interaction patterns.
• What we receive: a risk score indicating the likelihood of being a bot.
• Effect: low scores may prevent form submission; you can retry or contact us directly.
• Appeal: if you are incorrectly blocked, email privacy@mygaragefans.com.

Other Automated Decisions

Aside from reCAPTCHA, we do not use automated decision-making that produces legal or similarly significant effects about you. If this changes, we will update this policy, explain the logic involved, and offer a way to request human review.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

Minor Changes

For minor updates (typos, clarifications), we will update the effective date at the top of this policy.

Material Changes

For significant changes that affect your rights or how we use your data, we will:

• Provide at least 30 days' notice before the changes take effect.
• Notify you via email if you are subscribed to our mailing list.
• Display a prominent notice on our website.
• Request new consent where required by law.

We are here to help with any privacy questions or concerns:

Supervisory Authorities

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:

• EU: your local Data Protection Authority (find yours via the EDPB members list).
• UK: Information Commissioner's Office (ico.org.uk).
• California: Office of the Attorney General (oag.ca.gov/privacy).