Privacy Policy

This Privacy Policy describes how sonatas.xyz (also referred to as “we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you visit our website or interact with our services. We are committed to safeguarding your privacy and handling your data in a transparent and lawful manner. By using sonatas.xyz, you agree to the practices described in this document.

1. Information Collection

We collect information that you voluntarily provide to us, as well as data that is gathered automatically when you access our platform. The categories of information we collect include:

1.1 Personal Information You Provide

• Account details: When you register or subscribe, we may collect your full name, email address, username, and password.
• Communication data: If you contact us via email ([email protected]) or through a contact form, we retain your name, email address, and the content of your message.
• Payment information: For any paid services, payment details (such as billing address and transaction ID) are processed through secure third-party gateways. We do not store full credit card numbers.
• Profile & preferences: Information you add to your profile, including biography, avatar, or content preferences.

1.2 Automatically Collected Information

• Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
• Device information: Device type, unique device identifiers, and screen resolution.
• Usage patterns: Interactions with our site, features used, and session duration.
• Cookies & similar technologies: As further described in Section 4 (Cookies).

We do not intentionally collect sensitive categories of personal data (e.g., health, race, or political opinions). If such data is inadvertently provided, we will delete it promptly.

2. Use of Information

sonatas.xyz uses the collected information for the following legitimate business purposes:

• Service delivery: To operate, maintain, and personalize your experience on our website.
• Communication: To respond to your inquiries, send administrative updates, and provide customer support.
• Improvement & analytics: To analyze usage trends, monitor the performance of our platform, and develop new features.
• Security & fraud prevention: To detect and prevent unauthorized access, abuse, or illegal activities.
• Legal compliance: To fulfill our obligations under applicable laws and regulations.
• Marketing (with consent): Where you have explicitly opted in, we may send you promotional materials about our services. You can withdraw consent at any time.

We do not sell your personal information to third parties. Any sharing of data is limited to trusted service providers who act under our instructions and comply with strict data protection terms.

3. Data Protection

We implement a comprehensive set of technical, organizational, and administrative measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.3 (HTTPS). Sensitive data at rest is encrypted using AES-256.
• Access controls: Strict role-based access is enforced. Only authorized personnel with a legitimate need can access personal data.
• Regular audits: We perform periodic security reviews, vulnerability scans, and penetration tests.
• Data minimization