מדיניות פרטיות

ManoMix is an Israeli platform for listening to DJ Ran Mano sets, available at manomix.com and as iOS / Android apps. Owned and operated by Ran Mano (sole proprietor). This policy explains how we collect, store and use personal data, in compliance with the Israeli Privacy Protection Law 5741-1981 (including Amendment 13, effective August 14, 2025), GDPR (for EU residents), and CCPA (for California residents).

• Account details: name, email, profile picture (from Google/Apple), login method.
• Listening data: which sets you played, when, how long, which you skipped or completed; play/pause/skip events.
• Digital identifiers (Amendment 13): IP address (used only to derive country — never city or GPS), device IDs (Device ID, push token), app version, OS type.
• Interactions: favorites, likes, shares, playlists you create, login history.
• No sensitive data: we do not collect financial, medical, biometric, sexual, political or religious data.

• Service operation (essential): user identification, security, fraud prevention, access control.
• Analytics (optional): understanding which sets are popular, where users drop off, how to improve the app. All data stored only on our servers — no Google Analytics, Mixpanel, or any third party.
• Marketing (optional, from Phase 2): showing relevant ads on Instagram and Facebook (Meta Pixel + Conversions API). Active only with your consent.
• Personalization (optional): set recommendations based on your preferences.

• Contract performance (Art. 6(1)(b) GDPR / §11 Israeli Law) — to operate your account.
• Legitimate interest (Art. 6(1)(f)) — for security and fraud prevention.
• Consent (Art. 6(1)(a) / §1 Israeli Law) — for analytics, marketing, and personalization. Withdrawable any time in the privacy settings page and in the app.

The site uses 4 cookie categories. You can allow or block each category individually via the banner or in privacy preferences.

1. Essential — always on. Required for authentication (Clerk), CSRF protection, and storing your cookie choice itself. Without consent the site cannot work.
2. Analytics — optional. Our own cookies measuring listening behavior. No third parties.
3. Marketing — optional. Meta Pixel + Conversions API for Instagram / Facebook ads. Loaded only with consent.
4. Personalization — optional. Stores preferences for recommendations.

Retention: the cookie choice is valid for 12 months, after which the banner returns. If we add a new vendor sooner, the banner refreshes earlier.

We do not sell personal data. We use the following processors:

• Clerk (USA) — authentication. Subject to Clerk’s DPA.
• Cloudflare (global) — storage, CDN, security. Primary storage in EEUR (Europe) and USA.
• Apple App Store + Google Play — app stores.
• Expo (USA) — push notification delivery.
• Meta (subject to marketing consent, from Phase 2) — Meta Conversions API for retargeting. Data sent is minimal: hashed email, event type (View / Lead / Purchase).

We will not share data with law enforcement except under a valid court order or binding legal request.

Israel holds an EU adequacy decision, allowing transfers from Israel to Europe. Transfers to the USA (Cloudflare, Clerk, Expo) are governed by EU Standard Contractual Clauses (SCCs). All processors sign a standard DPA.

• User account: as long as the account is active. Deleted on request.
• Raw listening events: up to 24 months, then auto-deleted.
• Login history: up to 24 months, then auto-deleted.
• Privacy choice logs: retained indefinitely (required by Amendment 13 + GDPR Art. 30) — but after account deletion the personal identifiers are stripped, leaving an anonymous audit trail.

Under Israeli law, GDPR and CCPA you have the following rights:

• Access (§13 / Art. 15) — download all data we hold on you as JSON. Via in-app settings or by emailing user@manomix.com.
• Correction (§14 / Art. 16) — update incorrect details.
• Erasure (Art. 17 / CCPA §1798.105) — full deletion via account settings. Effective immediately.
• Portability (Art. 20) — receive your data in a structured format (JSON).
• Objection (Art. 21) — stop processing for marketing purposes; achieved by withdrawing marketing consent.
• Withdraw consent (Art. 7(3) / Amendment 13 §8C) — as easy as granting it. Via the cookie banner, in-app privacy settings, or web privacy settings.
• Lodge a complaint — with the Israeli Privacy Protection Authority at gov.il, or your local EU regulator if you are an EU citizen.

We are classified as “Medium” security level under the Israeli Privacy (Information Security) Regulations 5777-2017. Controls: TLS 1.3 transit encryption, on-device token encryption (iOS Keychain / Android Keystore), Cloudflare WAF, database access controls, daily backups, audit logging. In a breach we will notify the Privacy Authority “without delay” (Amendment 13) and affected users.

The service is for users aged 13 and above. If we discover a user under 13 opened an account we delete it immediately. Parents who notice their child opened an account without their consent are welcome to contact user@manomix.com and we will handle it within one business day.

If we materially update this policy (e.g. add a new vendor), the cookie version number is bumped and the banner returns to ask for fresh consent. Minor changes are published on this page with the updated date.

For any privacy question or request: user@manomix.com.
Owner: Ran Mano (DJ Ran Mano), Israel. Governing law: Israeli law. Jurisdiction: the courts of Tel Aviv.