Who we are
Nu-Metal Preservation is a non-commercial archive that documents nu-metal releases, physical media and preservation details. This policy explains what information the site collects, why, who it is shared with, and the choices you have.
Questions about this policy or your information can be sent through the contact page.
Information we collect
You can browse the public archive without an account. When you create an account or contribute, we collect:
- Account details: your name, display name, username and email address. Your password is stored only as a secure one-way hash; we cannot read it.
- Profile details you choose to add: avatar, bio, website, collecting focus areas, and linked Discord, Discogs or MusicBrainz accounts, along with your visibility and credit settings.
- Contributions: the text you submit and the files you upload, such as images, scans, NFO files, rip logs and cue sheets. Location, camera and other hidden metadata is removed from images when they are processed.
- Technical information: the IP address and browser details used when you sign up, the most recent IP address and time you used the site while logged in, and your active login sessions (IP address and browser) so you stay signed in.
Signup and security checks
When you create an account, we look up your IP address with ip-api.com, a third-party service, to estimate its network type and approximate location (internet provider, city, region and country). This helps us detect automated and duplicate signups. The lookup is sent over an unencrypted connection, and the result is stored with your account.
A summary of each new signup (name, email address, username, IP address, network, approximate location, and any other accounts created from the same IP address) is posted to a private staff-only Discord channel so new accounts can be reviewed. Attempts to open the admin area without permission are reported the same way.
We use Cloudflare Turnstile on signup, login, password reset and contribution forms to block automated abuse. IP addresses that repeatedly abuse the site may be blocked.
Linked accounts
Linking other accounts is optional and can be undone at any time from your account settings.
- Discord: we receive your Discord user ID, username and avatar. If you choose to verify partner communities, Discord also tells us which servers you belong to; we keep only your membership in our listed partner communities. The Discord access token is revoked immediately after use and is not stored.
- Discogs: we receive your Discogs user ID and username. We do not keep a Discogs access token.
- MusicBrainz: we store the username you enter and a verification code, which staff check against your public MusicBrainz profile.
How we use information
We use your information to run your account, review and publish contributions, credit your work the way you choose, calculate Preservation Challenge points, keep the site secure, and send the emails you need or ask for: email confirmation, password resets, and submission status updates according to your notification settings.
We do not sell your information, show advertising, or use analytics or advertising trackers.
What is public
- Your public contributor profile is off by default. You decide whether it is shown and which parts of it are visible.
- Archive records published from your contributions are public. How you are credited on them follows your credit preference, which can be your display name, your username, anonymous, or no credit.
- The Preservation Challenge leaderboard shows points and accepted contribution counts. Your name and profile link appear there only if your public profile is enabled; otherwise you are listed as "Private contributor".
Services that handle information for us
- Cloudflare, which delivers all traffic to the site, protects it from attacks, and provides Turnstile.
- ip-api.com, which provides the signup IP lookup described above.
- Discord, which hosts our private staff notification channels and handles Discord sign-in if you link an account.
- Discogs and MusicBrainz, only if you link those accounts.
- Our hosting provider and the email service used to deliver site emails.
We may also disclose information if required by law or to protect the site and its users from abuse.
Cookies
The site uses only the cookies it needs to work: a session cookie that keeps you logged in, a security token that protects forms from cross-site request forgery, and a "remember me" cookie if you choose that option at login. Cloudflare may set its own security cookies to tell people and bots apart. We do not use advertising or analytics cookies.
How long we keep information
- Account and profile information is kept while your account exists.
- Login sessions expire after a period of inactivity, and you can log out at any time. Resetting your password ends all of your existing sessions.
- Server logs are kept for about 14 days. Records of failed background tasks are removed after 30 days.
- Published archive records are kept as part of the archive.
Your choices and account deletion
You can update your profile, visibility, credit and email preferences, and disconnect linked accounts, from your account settings at any time.
You can request deletion of your account from your account settings; staff review each request. When an account is deleted, your login and profile are removed. Your submissions and any archive records published from them remain part of the archive and are reassigned to a system account. Your Preservation Challenge points are removed from leaderboards, but the point history is kept for audit purposes together with the display name and username you had at the time.
You can also ask us what information we hold about you, or ask us to correct it, through the contact page.
Children
The site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, please contact us so we can remove it.
Changes to this policy
If the site starts collecting or sharing information differently, this page will be updated and the date at the top will change.