Keep it minimal.

Contact form

When the contact backend is active, submitted name, email, inquiry type and message are stored so the inquiry can be reviewed and answered. Cloudflare Turnstile processes security signals to reduce spam. Contact responses are not written into public URLs. Verified staff can review inquiries in a private inbox. The existing email provider sends TellMeN0TE receipt alerts and a daily count of unreviewed inquiries and community reports. Those operational notices do not include visitor names, email addresses or message contents, and do not subscribe visitors to marketing.

Fan email list

When fan signup is active, the site stores the submitted email address, subscription status, consent version and consent timing, a minimal signup source label, and a bounded same-site pathname that referred the visitor to the signup form when available; direct visits use /join. Query strings and URL fragments are not retained as signup attribution. The system also keeps the minimum lifecycle and delivery-receipt data needed to prove activation, honor unsubscribe, and handle renewed consent. If a subscribed fan chooses an email relationship mode, the site stores that choice and when it was updated so future messages can respect the requested level of contact. Preference changes do not resubscribe an unsubscribed address. Delivery providers may report events such as permanent delivery failure, complaint or provider suppression. When that happens, TellMeN0TE stores a minimal suppression reason, provider/event identifiers and timestamps needed to stop unsafe or unwanted future sending and to preserve an operational receipt; the full provider webhook payload is not intentionally retained in the fan database. A delivery suppression is operational safety state, not a rewrite of the fan's historical consent. Signup remains disabled unless the owned-list backend, spam protection, unsubscribe signing state, and a live delivery adapter all verify their current contract. Pausing new signup or outbound delivery does not intentionally disable an existing valid unsubscribe path.

Spotify player

Spotify embeds are click-to-load. The page does not contact Spotify merely because you opened the TellMeN0TE site. If you choose to load a Spotify player, your browser connects to Spotify and Spotify may process information under its own terms and privacy practices.

House identity and account recovery

New House accounts ask for a display name, unique public handle, account email and password. We use that email to verify the account, send one-time sign-in or password-reset codes when requested, and communicate necessary account-security information. Account emails are separate from the optional TellMeN0TE music-updates list: creating, verifying or recovering a House account does not subscribe you to promotional messages or send a newsletter welcome. Existing confirmed music subscribers are recognized without sending another welcome message.

House credentials use a salted password hash; one-time email challenge codes are stored as hashes and expire after 30 minutes. The site stores limited account-security request counters, verification timestamps, account and session records. An HttpOnly secure cookie can keep this browser signed in for up to 30 days; password recovery revokes earlier sessions. One-use backup recovery codes are displayed when issued and are stored as hashes, not in plaintext. Older code-only House identities can keep using their saved recovery code and can add verified account email and password from a signed-in session. A code-only account without its saved recovery code or live session might not be recoverable automatically. Cloudflare Turnstile helps protect account creation, login and recovery. Signing out revokes this browser's session.

For account questions or a request to access or remove your information, use the contact page. Public House handles are not proof of official founder or staff access, which requires separate operator verification.

House social posts and member profiles

Public member profiles show display name, handle, optional bio, join date and public post, follower and following counts. Public House posts, replies, likes and shared links are visible to visitors. Following a member creates a relationship record. You can remove your own posts or replies from public view; restricted removal records are retained for safety and review. The recovery code, hashed session credentials and other private account details are not exposed in public profiles. If you choose to play a shared YouTube video, your browser connects to YouTube only after clicking it. Reports are stored privately for moderation; you may also contact TellMeN0TE about account or data removal. Share only information you are comfortable making public. House participation is restricted to adults in the current beta.

Member music and audio uploads

If you share a music link, its title, recording stage, public link and feedback request are posted in your public House discussion. If native audio uploads are enabled, an uploaded audio file is stored in a private Cloudflare R2 bucket; the House also stores a linked public post and minimal recording metadata. While the member account and post remain public and active, visitors may play that recording through a House media URL. Reported or removed content can be hidden from public playback, and deleting a music post requests removal of its stored object. Processing or deletion may be delayed by service failures or lawful safety requirements; do not upload material you need to keep private. Only publish audio you have the rights to share. Native audio uploads are enabled only when their storage and delivery capability is available.

House participation

Room descriptions, activities, opportunities and offers are public. Text conversations are visible to signed-in members of the room. Applications are visible to their applicant and the organizer who posted the opportunity. Participation, messages, applications and reports are stored to make those features work; reports are not public. Do not put private personal information into public posts or conversations. You can withdraw a plan or a pending application, leave a room, or contact TellMeN0TE about account or content removal.

Your idea desk and last floor

Your creative note and last selected floor are saved in this browser's local storage. They are not sent to the House backend or used as analytics. Use Clear note to remove the note. Clearing this site's browser data removes the note and remembered floor. Notes do not sync between devices, and someone who uses the same browser profile may be able to see them.

Analytics

Cloudflare hosts this site and adds its Web Analytics script to some page responses to measure site visits and performance. Your creative note stays in this browser and is not sent to that service. Spotify connects only when you choose to load its player. This notice will be updated before additional measurement is introduced.

Security

Credentials, private recovery information and other account-security secrets are not intended for this public website or its normal public content.

Commerce

No owned store is active yet. Before direct sales are enabled, this notice and the applicable purchase, refund, shipping and payment-provider disclosures will be updated for the actual commerce flow rather than guessed in advance.