Privacy Policy.
- No accounts, no forms, no cookies set by us, no analytics, no trackers, no ads, nothing sold. Ever.
- Night/day mode and your language are stored in your browser only; clear them on the Privacy Choices page.
- Loading a page sends the usual technical data (IP address, browser) to our hosting provider, kept in short-lived logs to run the Site safely.
- If you e-mail us, we keep the conversation for as long as it is useful, then delete it.
- Links to streaming and social platforms are plain links: those platforms only learn about you once you click.
- You can access, correct or delete your data and complain to a regulator; the details, including for California, Japan, Korea and China, are in sections 8 and 9.
The legal text below is in English. The English text is the binding version.
01In short
We built this Site to be as quiet as possible. It has no accounts, no comment boxes, no contact forms, no analytics, no advertising trackers and no cookies set by us. Two preferences — night or day mode and your language — are kept in your browser's local storage and never sent to us. Every font, image and script the Site uses is served from the Site itself, so your browser does not call any third-party server to display a page. What remains is what every website involves: the technical data your browser sends to the hosting provider's server to fetch the pages, and whatever you choose to send us by e-mail. This policy explains both in detail, what rights you have, and how to use them.
02Who is responsible
The controller of the personal data described in this policy is NWXT Entertainment (formerly FWLX Media & Entertainment), [legal entity name], [company / VAT number], [registered address], owned by Yuna Asakura and Andrei Alexandru Toma.
Privacy contact: [privacy e-mail]. We have not appointed a data protection officer, because the law does not require one for a site of this kind; the privacy contact handles every request.
This policy covers the Site at [site domain]. It does not cover the streaming and social platforms we link to, which have their own policies (see section 6), nor any other site.
03What we process, why, and on what basis
3.1 Technical data when you load a page
When your browser requests a page, image, font or script, it automatically sends technical information to the server that hosts the Site: your IP address, the date and time, the address of the file requested, the page you came from (referrer), the status of the request, and the type and version of your browser and operating system (user agent). The hosting provider records this in server logs.
| Purpose | Legal basis (GDPR / UK GDPR) | Retention |
|---|---|---|
| Delivering the pages you ask for, keeping the Site secure and available, detecting abuse and attacks, diagnosing faults | Our legitimate interests in running a secure website (Art. 6(1)(f)); delivering a page you requested | Server logs are kept by the hosting provider for a short period, normally no longer than 30 days, unless an incident requires us to keep a specific log longer |
3.2 Preferences stored in your browser
The Site remembers two choices so that it opens the way you left it: the display mode (nwxt-theme: night or day) and, once the Site offers several languages, your language (nwxt-lang). They are stored by your browser's local storage on your device only. They are not cookies, they are never transmitted to us or to anyone else, and they contain no identifier. Storing them is strictly necessary to provide the feature you asked for, which is why no consent banner is needed (Article 5(3) of the ePrivacy Directive and its national implementations). You can delete them at any time on the Privacy Choices page or through your browser's settings; the Site then goes back to its defaults.
3.3 When you write to us
If you e-mail us — to ask a question, to pitch a demo, for press, bookings or anything else — we receive what you send: your e-mail address, your name if you give it, the content of your message and any attachments, plus the technical headers of the e-mail.
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering you and keeping track of the conversation | Our legitimate interests in communicating with the people who contact us (Art. 6(1)(f)); where you ask us to do something for you, steps taken at your request before entering into a contract (Art. 6(1)(b)) | Until the conversation is closed and for up to two years afterwards, so we can pick it up again if you come back; longer where a legal obligation or an ongoing relationship (for example with an artist, partner or supplier) requires it |
| Evaluating demos and proposals | Legitimate interests (Art. 6(1)(f)) and, where relevant, pre-contractual steps (Art. 6(1)(b)) | As above; material we decide not to pursue is deleted within the same period |
| Establishing, exercising or defending legal claims; complying with legal obligations such as accounting rules | Legitimate interests (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) | For the applicable limitation or statutory period |
3.4 What we do not do
- We do not use analytics, audience-measurement or advertising tools on the Site, and we do not profile visitors.
- We do not set cookies, pixels, fingerprinting scripts or similar technologies, and we do not allow third parties to do so on the Site.
- We do not embed third-party players, widgets or fonts: covers are images hosted by us, and links to platforms are plain links.
- We do not sell personal data, "share" it for cross-context behavioural advertising, or use it for targeted advertising.
- We do not make automated decisions about you that produce legal or similarly significant effects.
3.5 If the Site grows
We may later add features that involve more data — for example a newsletter, a contact form, embedded players, a shop, contests or audience statistics. Before any such feature goes live we will update this policy, describe the new processing, and, where the law requires it, ask for your consent through a clear choice on the Site (and not through a pre-ticked box or a "by continuing you agree" notice). Until then, what you read here is the complete picture.
05International transfers
We are based in the European Union, and the people who visit the Site are everywhere, from Japan to Korea, China, Romania, Switzerland and the United States. Our hosting and e-mail providers may store data on servers outside the European Economic Area and the United Kingdom. When personal data leaves the EEA or the UK we rely on an adequacy decision of the European Commission or the UK government where one exists, and otherwise on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), together with any additional measures that are needed. You can ask the privacy contact for details of the safeguards used for a specific transfer.
06Streaming and social platforms
The artist pages link to official profiles and releases on YouTube, Spotify, TikTok, Instagram, Apple Music, SoundCloud, X and possibly other platforms. These are ordinary links: nothing is loaded from those platforms while you are on the Site, and they learn nothing about your visit until you click. Once you follow a link you are on the platform, and its own privacy policy and settings govern what it collects (including what it may associate with your account there). The platforms may give us aggregated, non-identifying statistics about our profiles and releases (for example play counts by country); we do not receive personal data about individual listeners from them.
Links to the platforms' privacy policies and settings are collected on the Privacy Choices page.
07Security and retention
The Site is served over HTTPS, so pages travel encrypted between the server and your browser. Access to the hosting account, mailboxes and files that may contain personal data is limited to the people who need it, protected by strong authentication, and reviewed when roles change. We collect as little as possible, keep it no longer than the periods in section 3, and delete or anonymise it afterwards. No system is perfectly secure; if a breach ever affects your data in a way that creates a risk for you, we will tell you and the competent authority as the law requires.
08Your rights
Wherever you live, you can ask us what we hold about you and ask us to correct or delete it. Under the GDPR, the UK GDPR and similar laws you have, subject to the conditions in those laws, the right to:
- access your personal data and receive a copy, with information about how we use it;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten");
- restrict processing while a question about it is being resolved;
- receive data you gave us in a portable, machine-readable format, and have it transmitted to another controller where technically feasible;
- object at any time to processing based on our legitimate interests, on grounds relating to your situation, and to object to direct marketing at any time (we do not do any);
- withdraw consent at any time where processing is based on consent, without affecting what was done before;
- lodge a complaint with a supervisory authority: in Belgium the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be), in the United Kingdom the Information Commissioner's Office (ico.org.uk), or the authority of the country where you live or work. We would appreciate the chance to answer your concern first.
How to exercise them. Write to [privacy e-mail], or use the request template on the Privacy Choices page. Tell us which right you want to use and which e-mail address or interaction your request concerns. We may ask you to confirm your identity in a proportionate way — usually by replying from the address in question — before we act. We answer within one month; for complex or numerous requests we may take up to two further months and will tell you why. Exercising your rights is free, unless a request is manifestly unfounded or excessive, in which case the law allows us to charge a reasonable fee or to refuse it. You will never be treated differently for exercising a privacy right.
09Additional information for specific regions
9.1 European Economic Area, United Kingdom and Switzerland
Sections 3 to 8 are written to the GDPR and apply in full to the UK GDPR and the Swiss Federal Act on Data Protection. For Swiss residents, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
9.2 United States — California and other states
This section supplements the policy for residents of California (CCPA/CPRA) and of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and others).
Categories of personal information collected in the preceding 12 months: identifiers (IP address; e-mail address and name if you write to us); internet or network activity (the server-log data in section 3.1); and any other information you choose to include in a message to us. Sources: you, your browser, and the hosting provider's logs. Purposes: those in section 3. Disclosures for a business purpose: to the service providers in section 4. We have not sold and do not sell personal information, we do not share it for cross-context behavioural advertising, we do not use or disclose sensitive personal information for purposes that would give you a right to limit, and we have no actual knowledge that we collect personal information of consumers under 16.
Your rights: to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing (there is none; we nevertheless honour the Global Privacy Control signal as an opt-out); to limit the use of sensitive personal information (not applicable); and not to be discriminated against for exercising these rights. You may use an authorised agent; we will ask the agent for proof of your written permission and may verify your identity directly. Make a request at [privacy e-mail] or through the Privacy Choices page ("Do Not Sell or Share My Personal Information"). If we deny a request, residents of states that provide an appeal right may appeal by replying to our decision; we will answer the appeal in writing within the time the applicable law allows. California's "Shine the Light" law: we do not disclose personal information to third parties for their direct-marketing purposes.
9.3 Japan
For visitors in Japan, this policy serves as our notice under the Act on the Protection of Personal Information (APPI). Purposes of use are those in section 3. We do not provide personal data to third parties without your consent, except to the processors in section 4 (entrustment), where the law allows, or in a business succession. Personal data may be handled on servers outside Japan, in countries where the processors in section 4 operate; we take the safeguards in section 5. You may request disclosure, correction, addition, deletion, suspension of use or suspension of third-party provision of your retained personal data, and may ask about our handling of it, at [privacy e-mail]. We may charge the actual cost of a disclosure where the law permits.
9.4 Republic of Korea
For visitors in Korea, under the Personal Information Protection Act: the items we collect, the purposes, and the retention periods are set out in section 3; we do not provide personal information to third parties, and we entrust its processing to the providers listed in section 4 (hosting, e-mail), some of which may be located abroad (the items transferred, the countries, the dates and methods, the recipients and their purposes and retention periods correspond to sections 3 to 5; you may refuse an overseas transfer by not sending us personal information, and you may ask the privacy contact for the current details). You may access, correct, delete or suspend the processing of your personal information, and withdraw consent, through the privacy contact, who acts as our personal-information manager. We do not collect personal information from children under 14 without the consent of a legal representative.
9.5 People's Republic of China
For visitors in mainland China, under the Personal Information Protection Law (PIPL): we are the personal-information handler; the purposes, methods and categories are those in section 3 and the retention periods are the shortest necessary for those purposes. Because we are located in the European Union, any personal information you send us is processed outside China; by sending it you provide the separate consent the PIPL requires for that transfer, and you may withdraw it at any time. You have the rights to access, copy, correct, supplement, delete and restrict your personal information, to withdraw consent, to ask us to explain our processing rules, and to transfer your data to another handler where the conditions set by the regulator are met. Requests go to [privacy e-mail].
9.6 Brazil
Under the LGPD, the legal bases above correspond to Article 7 (legitimate interests, contract, legal obligation, consent). You have the rights in Article 18, including confirmation, access, correction, anonymisation, deletion, portability and information about sharing, and you may complain to the ANPD.
10Children
The Site is not directed to children under 16 (or the lower age of digital consent that applies in your country, which is 13 in the United States), and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, tell the privacy contact and we will delete it.
11Changes to this policy
We update this policy when the Site or the law changes. The effective date and the version number at the top tell you which version you are reading; a significant change will be announced on the Site for a reasonable time before it takes effect, and, where the law requires it, we will ask for your consent again.
12Contact
Privacy contact: [privacy e-mail]. Postal address: [legal entity name], [registered address]. For everything else: [contact e-mail].