Last updated: September 29, 2026
Who we are
Deadikace (https://deadikace.com) is a rock music website and fan community. It is operated by Anthony Akl, based in France, who is the data controller responsible for the personal data described in this policy.
Contact for any privacy question or request: contact@deadikace.com
This policy explains what personal data we collect, how we use it, why, who we share it with, how long we keep it, and how you can ask us to delete it. It applies to everyone who visits deadikace.com, whether or not they have an account.
Summary
| What | When we collect it | Why |
|---|---|---|
| Email address, display name, password (hashed) | When you create an account by email | To create and run your account |
| Facebook user ID, name, email address | When you sign in with Facebook | To create your account and recognise you when you return |
| Your liked Facebook Pages (read once, not stored) | Only when you press “Import from Facebook” | To suggest artists and bands you may want to follow |
| Google or Spotify account ID, name, email | When you sign in with Google or Spotify | To create your account and recognise you when you return |
| Follows, favourites, ratings, reviews, discussion posts, messages, notification settings | When you use member features | To provide your personalised feed and member features |
| Comment name, email, website, IP address, browser user agent | When you leave a comment | To publish your comment and detect spam |
| Email address, newsletter opens and clicks | When you subscribe to the newsletter | To send the newsletter you asked for |
| IP address, browser and device information, pages visited | When you visit the site | Security, analytics and advertising (see Cookies) |
Member accounts
You can create a Deadikace account with an email address and password, or by signing in with Facebook, Google or Spotify. We store your email address, display name, a securely hashed password (email accounts only), the date you joined, and the identifier of any sign-in provider you used. We use this to run your account, keep you signed in, and send you account-related emails such as password resets.
Facebook Login and Facebook data
This section explains exactly what data we receive from Facebook (Meta) and what we do with it.
When you sign in with Facebook
If you choose “Continue with Facebook”, Facebook asks your permission to share the following with Deadikace:
- Your public profile: your Facebook user ID (specific to Deadikace), your name and your profile picture.
- Your email address.
We store your Facebook user ID, your name (as the first name, last name and display name of your Deadikace account) and your email address. If Facebook does not share an email address, we create your account without a real one. We do not store your Facebook profile picture: your Deadikace avatar is either a picture you upload yourself or your Gravatar. We use this data only to create your account, to recognise you when you sign in again, to display your name on your profile and contributions, and to send you account emails (and the newsletter, only if you opt in). We do not post anything to Facebook and we never see or store your Facebook password.
When you choose “Import from Facebook”
On your “My Music” page you can choose to import the artists and bands you follow on Facebook. This is optional and happens only when you press the “Import from Facebook” button. At that moment, Facebook asks for your separate permission to share the list of Facebook Pages you have liked (the user_likes permission). If you decline, nothing is imported and your account works as normal.
If you agree:
- We read the list of Pages you have liked, once, for that import.
- We compare the names of those Pages with the artists and bands already in the Deadikace database.
- We show you the matching artists and bands as suggestions. You choose which ones to follow.
- Only the artists and bands you tick are saved, as follows in your Deadikace account. What we save is a link to our own artist or band profile, not to any Facebook Page.
The list of liked Pages itself is processed in memory for the duration of the import and is never written to our database. Pages that do not match an artist or band are discarded immediately. We do not use your likes for advertising, profiling, analytics or any purpose other than suggesting follows to you.
Access tokens
To read your liked Pages, Facebook gives us a short-lived access token. We hold it in our server-side database only for the duration of the import and delete it as soon as the import finishes. We do not request long-lived tokens, and tokens are never written to log files or shown on the site.
What we never do with Facebook data
- We never sell, rent or license data received from Facebook.
- We never share it with advertisers or data brokers.
- We never use it to build advertising or marketing profiles.
- We share it only with our hosting provider (Hostinger), which stores it on our behalf under a written data processing agreement.
Removing Deadikace from your Facebook account
You can stop sharing data with Deadikace at any time in Facebook: Settings & privacy → Settings → Apps and websites, then remove Deadikace. This stops any further data sharing. To also delete the data we already hold, follow the steps in “How to delete your data” below.
Google and Spotify sign-in
If you sign in with Google or Spotify, we receive your account identifier with that provider, your name and your email address. We use them only to create your account and recognise you when you return, in the same way as described for Facebook.
Your activity on Deadikace
When you use member features we store what you do so the features work: the artists, bands and albums you follow or favourite, your ratings and reviews, your posts in fan discussions, messages you send through the site, and your notification preferences. We use this to build your personalised feed, recommend related artists, show you news and tour dates for the acts you follow, and send the notifications you have switched on. Reviews and discussion posts you publish are visible to other visitors along with your display name.
Comments
When you leave a comment we collect the data shown in the comment form, plus your IP address and browser user agent string to help detect spam. Comments are checked by Akismet, a spam-filtering service run by Automattic.
An anonymised string created from your email address (a hash) may be sent to the Gravatar service (also run by Automattic) to check whether you use it. Gravatar’s privacy policy: https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public next to it.
Newsletter and emails
If you subscribe to the Deadikace newsletter, we use your email address to send it. We may record whether you open an email or click a link in it, so we can improve the newsletter. You can unsubscribe at any time with the “Unsubscribe” link in every email. We also send account emails you need, such as password resets; these include the IP address the request came from, for your security.
Cookies, analytics and advertising
Essential cookies. When you sign in we set cookies to keep you logged in and remember your display choices. Login cookies last two days (two weeks if you tick “Remember me”) and are removed when you log out. If you leave a comment you can choose to save your name, email and website in a cookie for one year.
Analytics. With your consent, we use Google Analytics to understand how visitors use the site (pages viewed, approximate location, device and browser type). This data is reported to us in aggregate.
Advertising. With your consent where required, we show ads through Google AdSense. Google may use cookies to show ads based on your visits to this and other websites. You can manage ad personalisation at https://adssettings.google.com. See how Google uses data: https://policies.google.com/technologies/partner-sites.
You can accept, refuse or change your choices for non-essential cookies at any time using the cookie banner on the site. Data received from Facebook is never sent to Google Analytics or Google AdSense.
Embedded content from other websites
Articles may include embedded content (videos, images, posts) from other websites such as YouTube. Embedded content behaves exactly as if you had visited the other website, which may collect data about you, use cookies and track your interaction with it.
Security
To protect the site we use Wordfence, which records the IP addresses and requests of visitors to detect and block attacks. All traffic to deadikace.com is encrypted with HTTPS. The database is not reachable from the public internet, and access to the hosting account is restricted to the site owner and protected by two-factor authentication.
Who we share data with
We never sell your personal data. We share it only with service providers that help us run the site, and only as needed for the service they provide:
- Hostinger International Ltd. hosts the website and its database (servers in France and Lithuania, EU). Hostinger processes data only on our instructions, under a GDPR Article 28 data processing agreement.
- Google provides analytics and advertising (see Cookies), and Google sign-in if you use it.
- Automattic provides Akismet spam filtering, Gravatar and Jetpack site services.
- Our email delivery provider sends account emails and the newsletter.
We may also disclose data if required by law. We do not share data received from Facebook with anyone other than our hosting provider.
How long we keep your data
- Account data (including data received from Facebook, Google or Spotify): for as long as your account exists. It is deleted when you delete your account or ask us to delete it.
- Liked Pages from Facebook: not stored. Processed only during an import, then discarded.
- Facebook access tokens: only for the duration of an import, then deleted.
- Comments: kept until you ask us to remove them, so follow-up comments can be approved automatically.
- Newsletter data: until you unsubscribe.
- Security logs: a limited period, typically no more than 90 days.
How to delete your data
You can ask us to delete your personal data at any time. This right is available to everyone who uses Deadikace, wherever you live.
To delete your account and all associated data:
- Send an email to contact@deadikace.com from the address linked to your account, with the subject “Delete my data”.
- If you signed in with Facebook, Google or Spotify, just say so; you do not need to provide anything else.
- We will confirm the request and delete your account within 30 days, usually much sooner, and confirm by email when it is done.
What gets deleted: your account, your email address and name, your Facebook, Google or Spotify identifiers, your follows, favourites, ratings, notification settings and messages, and any newsletter subscription. Reviews and discussion posts are deleted, or anonymised if you prefer to leave them visible without your name. We also instruct our service providers to delete any copies they hold.
If you signed in with Facebook, you can additionally remove Deadikace from your Facebook account (Settings & privacy → Settings → Apps and websites) so that no further data is shared.
We only keep data after a deletion request where the law requires us to (for example, records we must keep for legal or tax reasons), and only for as long as that obligation lasts.
Your rights
Under the EU General Data Protection Regulation (GDPR) and similar laws, you have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to how we use it, and withdraw consent at any time. To exercise any of these rights, email contact@deadikace.com. If you are not satisfied with our answer, you can complain to your data protection authority; in France this is the CNIL (https://www.cnil.fr).
Legal bases. We process account and activity data to provide the service you signed up for (performance of a contract). We process Facebook liked Pages, the newsletter, analytics and personalised advertising cookies on the basis of your consent. We process security logs and spam checks on the basis of our legitimate interest in keeping the site safe.
Children
Deadikace is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes to how we handle personal data, we will tell members by email or with a notice on the site before the changes take effect.
Contact
Questions, requests or complaints about privacy: contact@deadikace.com
