Music Description

Privacy

Last updated October 17, 2026

This Privacy Policy explains what information musicdescription.com (“the site”) collects, how we use it and the choices you have. The site is run by Bishoy Fargalla (“we”, “us”). Contact: notification@musicdescription.com.

Summary

  • We do not use analytics or advertising trackers.
  • We do not sell your information.
  • Music videos stay on YouTube. We link to them and do not embed YouTube players.
  • We collect only what we need to run accounts, comments, corrections, emails and security.

Information we collect

When you browse

Like most websites, our servers receive your IP address, browser user agent and the address of the page you ask for. We use a few cookies to count views and serve cached pages. See the Cookie Policy.

When you create an account

We collect your username and email address, and the password you choose. We also store your display name and your account settings, such as email preferences.

When you use your account

  • Your favorites.
  • Your comments, notes and votes on notes.
  • Corrections and suggestions you send, with their status and the reason for each result.
  • Your history of contributions, shown to you on your History page.
  • Details about personal tokens and connected agents (see below).

When you post a comment or note

You must be signed in to comment. WordPress stores your comment, your account name, the time, your IP address and your browser user agent. Comments are moderated before they appear.

When you request a video

The request form on Submit asks for a YouTube link or the artist and song, and your email address. Your name is optional and is used to credit you on the post.

A mobile number is optional and is stored only if you tick the SMS consent box. When you do, we also record the time and your IP address as a record of your consent. We do not send text messages at this time.

When you join the supporter list

The sign-up on Support stores your email address and the date you signed up.

Personal tokens and connected agents

A personal token lets your own agent act for your account. We store only a scrambled (hashed) copy of the token, plus its last 4 characters so you can recognize it. We also store when it was created, when it was last used, its permissions and its expiry date. Personal tokens expire after 90 days.

If you connect an agent through OAuth, we store the agent’s name, its approved return addresses and your approval. Access tokens last 15 minutes and refresh tokens last 7 days. We store refresh tokens only in hashed form.

You can revoke a personal token on Connect your agent and disconnect an agent on the Agent tab of your account.

The MCP server and API

Our MCP server and API answer public read requests without an account. Writes, such as posting a comment or sending a correction, need your personal token or an OAuth access token. We use your account, token and IP address to apply rate limits.

How corrections are checked

When you send a correction, we check it against still frames from the music video using the OpenAI API. We send OpenAI the text of your correction, the video title and the still images for that moment. We do not send your name, username or email address.

Each member can send corrections on up to 5 different videos per day, and there is a daily cap on checks. To enforce these limits, we count your checks per day.

Public information

If you contribute, your display name and the number of contributions you have sent and had accepted can appear on the Leaderboard and on your member profile page. Approved comments and notes are shown on the post they belong to.

Emails we send

Emails come from notification@musicdescription.com. They include:

  • account emails, such as welcome and password reset;
  • request confirmation emails;
  • updates when a new note is approved on a post you follow (on by default);
  • the weekly trending email and the weekly favorites digest (off unless you turn them on).

You can change these on Email preferences. Each optional email has an unsubscribe link.

We send email through Hostinger’s mail server (smtp.hostinger.com).

Security logging

We use the Wordfence security plugin to protect the site. For sign-ins, failed sign-ins, password resets and blocked requests, Wordfence records the IP address, browser user agent, time, page address and the username used. Wordfence’s full live-traffic logging is turned off.

The site takes part in the Wordfence security network, which shares information about blocked and suspicious activity, such as IP addresses, with Wordfence to help protect other sites.

The forms on this site also use your IP address in short-lived counters to limit requests, for example 3 video requests per day from one network. These counters expire within a day.

Service providers

We use these providers to run the site:

  • Hostinger: hosts the website and our MCP server, and provides the mail server we send from. It also provides the Hostinger Reach script that loads on our pages from cdn-reach.hostinger.com. No Reach forms are on the site, so the script does not collect form data.
  • OpenAI: checks corrections against video stills, as described above.
  • Wordfence: site security, as described above.
  • YouTube: we link to videos on YouTube. If you follow a link, YouTube’s own privacy policy applies.

How we use information

  • To run your account and the features you use.
  • To check, review and publish corrections and comments.
  • To send the emails you ask for or that your account needs.
  • To keep the site secure and stop abuse.
  • To count views, so we can show what is trending.

We do not sell your information and we do not use it for advertising.

Children

The site is not meant for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us information, email notification@musicdescription.com and we will delete it.

How long we keep information

Some items expire on their own, as noted above, such as tokens and rate-limit counters. This policy does not set fixed retention periods for other information. You can ask us to delete your information at any time.

Your choices and requests

  • Change your email preferences at any time.
  • Revoke tokens and disconnect agents from your account.
  • Block or delete cookies in your browser. Signing in needs cookies.
  • Ask for a copy of your information, a correction or deletion of your account by emailing notification@musicdescription.com. We may need to confirm the request comes from you.

Security

The site uses HTTPS. Passwords and tokens are stored in hashed form. No method is perfectly secure, so please do not send passwords, API keys or other secrets through any form.

Changes to this policy

If we change this policy, we will update the “Last updated” date at the top of this page.

Related policies

Contact

Questions about this page or your information? Email notification@musicdescription.com.