Privacy

MULO is run by Alex Bacskos from New South Wales, Australia. Anything on this page, or anything you’d like done with your information, reaches a person at hello@getmulo.com.

• Your account: the email address you signed up with, and a password you never give us in readable form — it’s hashed by Supabase, who handle logins, and we never see it.
• Your profile: username, display name, picture and bio, if you add them.
• What you put in: scores, reviews, lists, your GOAT, Versus picks and takes, who you follow, who you’ve blocked, and anything you report.
• A little technical housekeeping: your network address for a short while, so nobody can hammer the site with thousands of requests, and ordinary server logs.
• A cookie that keeps you logged in, and a few small notes stored in your own browser — recent searches, which tips you’ve seen. Those never leave your device and aren’t used to follow you anywhere.

No advertising. No selling or renting your information to anybody. No third-party trackers following you around other websites. If MULO ever measures how the site is used, it’s counting visits in aggregate, not building a profile of you.

Your profile, your scores, your reviews, your lists and who you follow are public on MULO — that’s the point of it. Your email address is never shown to anybody. If you’d rather somebody couldn’t see you at all, blocking them hides each of you from the other.

MULO is a small site built on a few services, and your information passes through them:

• Supabase stores the database, handles logins and keeps uploaded pictures.
• Vercel runs the site itself.
• Resend sends the few emails MULO sends: confirming your address, and resetting a password.

Those companies store data on servers that may be outside Australia. Album information comes from MusicBrainz and song previews from Apple — they’re asked about records, never about you.

Two buttons, both on your account page, both doing exactly what they say:

• Download my data hands you a file with everything you’ve put in — every score, review, list and follow.
• Delete my account removes your profile and everything attached to it. It isn’t hidden or deactivated; it’s gone, and it can’t be undone.

Both live at your account settings. Copies can linger in backups for a short while before they roll over, and emails already sent can’t be unsent. Anything else — a correction, a question, a complaint — email hello@getmulo.com and you’ll get a person.

For as long as you have an account. Delete it and the lot goes with it. Technical logs are kept briefly and then discarded.

You need to be at least 13 to have an account. If you believe somebody younger has one, email hello@getmulo.com and it will be removed.

MULO is built carefully — logins are enforced on the server, everything you send is checked, and the database is locked down so one account can’t read another’s private details. No site can promise perfection. If information is ever exposed in a way that could harm you, you’ll be told, and so will the regulator where the law requires it.

If this page changes in a way that matters, the date at the top changes and you’ll be told in the app. MULO follows Australian privacy law, and if you’re in the UK or Europe, the rights you have there — to see, correct, export or erase what’s held about you — are rights this page already gives everybody.