Privacy Policy
Effective 20 October 2026
The short version. MusicX8 has no ads and no accounts with us. The app sends us anonymous usage statistics only if you agree when you first open it, and you can switch that off any time in Settings. We never store your IP address, we turn it into an approximate city the moment it arrives and then discard it. We do not sell or share your data. This website uses no cookies and no trackers.
- Who we are
- What we collect and why
- What we never collect
- Services the app talks to directly
- This website
- Hosting and transfers
- How long we keep data
- Your rights (EU / EEA / UK)
- US privacy rights
- Your privacy choices
- Children
- Security
- Changes and contact
1. Who we are
The controller responsible for your personal data is MTVBG, Bulgaria (“we”, “us”). This policy covers the MusicX8 Android app and the website musicx8.mtvbg.com. Contact us about anything privacy-related at info@mtvbg.com.
2. What we collect and why
a) Update checks — every copy of the app
To offer you new versions, the app regularly asks our server for the latest release. That request contains only technical details needed to pick the right download: the app version, Android version, your phone's processor type (for example arm64-v8a) and the versions of the app's built-in player scripts. It carries no identifier unless you have turned on anonymous statistics (below).
Legal basis: our legitimate interest in keeping the app working and secure (GDPR Art. 6(1)(f)). This data is not stored in our statistics database.
b) Anonymous usage statistics — only with your consent
When you first open MusicX8 it asks whether you want to share anonymous usage statistics. Nothing is sent until you answer Yes, and you can change your mind any time in Settings → Send anonymous stats. If you agree, the app sends:
| Data | Example | Purpose |
|---|---|---|
| A random install ID, created on your phone | 3f2c…-…9a1e | Counting active users without knowing who they are. It is not linked to your phone's hardware, your Google account or your name. |
| App, Android and player-script versions; processor type | 1.0.1, Android 15, arm64-v8a | Knowing which versions are in use, and which phones need fixes. |
| Phone brand and model | Samsung SM-S928B | Testing and fixing problems on the phones people actually use. |
| Approximate location | Sofia, Bulgaria | Understanding where the app is used. Derived from your IP address when the request arrives; we keep only country, region, city and coordinates rounded to about 10 km. The IP address itself is never stored. |
| Usage events | “app opened”, “song played” and their time | Measuring how much the app is used. We do not record what you play, search for or watch. |
Legal basis: your consent (GDPR Art. 6(1)(a) and, for reading the install ID from your device, the EU ePrivacy rules as implemented in Bulgarian law). Withdrawing consent does not affect processing that happened before.
c) SponsorBlock
If you use SponsorBlock, the app asks our server which parts of the video you play are sponsor segments. Our server forwards a shortened, anonymised fingerprint of the video ID (the first characters of its SHA-256 hash) to SponsorBlock and returns the answer. We do not store these requests or link them to your install ID. Legal basis: providing the feature you use (Art. 6(1)(b)/(f)).
d) When you email us
If you write to us, we use your email address and message only to answer you, and delete them when the matter is closed, unless the law requires us to keep them.
3. What we never collect
- Your name, email, phone number or any account details (you don't need an account with us).
- Your IP address in our database, your precise location, or GPS data.
- What you listen to, search for or download, your playlists or your library.
- Advertising IDs, contacts, photos or other files. MusicX8 shows no ads.
- Your Google/YouTube sign-in. If you sign in inside the app, that happens directly between your phone and Google; the resulting sign-in cookies stay on your phone and are never sent to us.
4. Services the app talks to directly
To play music, the app connects from your phone directly to YouTube (Google LLC), which receives your IP address and the requests needed to stream or download content, as with any YouTube client. Google's own Privacy Policy applies to that. MusicX8 is not affiliated with YouTube or Google.
5. This website
musicx8.mtvbg.com sets no cookies and uses no analytics, advertising, social-media plugins, web fonts or other content from third-party servers, so no cookie consent is needed. We count how many times each version is downloaded, as an anonymous daily total with no personal data. The admin area used by our staff sets one strictly necessary login cookie, for staff only.
6. Hosting and international transfers
Our website and statistics database are hosted by HostGator (Newfold Digital, Inc.), which acts as our processor and may store data in the United States. Like every web host, its servers keep short-lived technical access logs (including IP addresses) for security and operation, under its own retention rules. Where personal data is transferred outside the EEA, it is protected by the safeguards our provider offers under GDPR Chapter V, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
The IP-to-location lookup runs entirely on our own server, using the DB-IP “IP to City Lite” database (licensed CC BY 4.0). No IP address is sent to DB-IP or anyone else for this.
7. How long we keep data
- Usage statistics: deleted automatically 14 months after they were recorded; an install not seen for 14 months is deleted entirely. Long-term charts may keep totals that identify no one.
- Download counts: anonymous totals, kept indefinitely.
- Admin login protection: a salted, one-way hash of the IP address of admin login attempts, kept for 24 hours.
8. Your rights (EU / EEA / UK)
Under the GDPR you have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. We have no automated decision-making that affects you.
Because we don't know who you are, we need your install ID to find your data: it is shown in the app under Settings → About. Email it to info@mtvbg.com with your request and we will reply within one month. Simply turning off Send anonymous stats stops all further collection.
You can also complain to a data protection authority. Ours is the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg. You may also contact the authority in the EU country where you live or work.
9. US privacy rights
This section applies to residents of US states with consumer privacy laws, including California (CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others.
- Categories we collect (only with your consent, as described in section 2b): identifiers (a random install ID), device information (phone brand, model, Android and app versions), approximate geolocation (city level, not precise geolocation), and internet activity limited to “app opened” and “song played” events. Sources: your app. Purposes: analytics, compatibility and improving the app.
- We do not sell personal information and do not share it for cross-context behavioral advertising, targeted advertising or profiling. We have not done so in the past 12 months.
- We do not collect sensitive personal information, and we have no actual knowledge of collecting data from consumers under 16.
- Your rights: to know what we collect, to access, correct and delete it, and to opt out — without any discrimination. Use the in-app switch, or email your install ID and request to info@mtvbg.com. An authorized agent may act for you with your written permission. If we decline a request, you may appeal by replying to our answer; if the appeal is denied you may contact your state attorney general.
10. Your privacy choices
Stop sharing statistics: in the app, open Settings and turn off Send anonymous stats. Nothing more is collected from that moment.
Delete what we have: email your install ID (Settings → About) to info@mtvbg.com and ask for deletion.
Do Not Sell or Share: we never sell or share personal information, so there is nothing to opt out of. Browser opt-out signals such as Global Privacy Control are honored automatically for the same reason.
11. Children
MusicX8 is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has shared statistics with us, contact us with the install ID and we will delete it.
12. Security
All connections to our server use HTTPS. Statistics are stored in a database reachable only by our server, the admin area is password-protected and rate-limited, and we keep the data to the minimum described above.
13. Changes and contact
If we change this policy we will update the date at the top, and announce significant changes in the app's update notes. Questions or requests: info@mtvbg.com.