Coke Music

Privacy Policy

Effective September 21, 2026

SodaStudios ("we", "us") is an independent fan project that recreates the online world known as Coke Music, MyCoke and Coke Studios. This policy explains what personal information we collect when you use sodastudios.org and the SodaStudios game and Discord bot, why we collect it, and the choices you have. It applies together with our Terms of Service.

1. Information we collect

  • Account information. Your screen name, an internal account identifier, and your password, which we store only as a salted one-way hash (we cannot read it). If you sign in with Discord, we store your numeric Discord user ID. We ask Discord only for the "identify" permission: we do not receive your Discord email address or password, and the website keeps only your numeric Discord ID, not your username or avatar. If you use our Discord bot, it can see your Discord username and display name when you use its commands, and it uses them together with your ID to find your account.
  • Game data. Your avatar and its settings (including a body-type setting), mission statement, decibel balance and items, the studios you own and their settings, friends and invitations, music mixes, game scores, and records of purchases, gifts, trades, auctions and daily spins.
  • Chat and messages. Public room chat is recorded in a chat log so we can moderate. Private messages you send through the in-game messenger are stored. Help requests, bug reports and player reports you send are stored and may be forwarded to our moderators on Discord.
  • Technical information. Your IP address and basic request details (such as browser type and the pages requested). We use these to keep the service secure, enforce bans and limit abuse. If you request an access code through our Discord bot, the request time and IP address are recorded with your Discord ID.
  • Anything you choose to share. Your screen name, avatar, mission statement, studio and room names, and mix names are visible to other players. Chat is visible to everyone in the room. Do not put personal information in them.

We do not ask for your real name, email address, phone number, address or payment details to create an account.

2. How we use information

  • To create and run your account and the game (contract).
  • To keep the community safe: moderating chat, handling reports, enforcing our rules, banning abusive users and preventing ban evasion, cheating and abuse (legitimate interests).
  • To secure the service: rate limiting, fraud and attack prevention, troubleshooting (legitimate interests).
  • To let you sign in with Discord and to power the SodaStudios Discord bot, such as login links, balance checks and game notifications sent to you on Discord (your consent, which you can withdraw by unlinking or leaving the server).
  • To comply with legal obligations and respond to lawful requests.

We do not sell your personal information, we do not share it for advertising, and we do not run advertising or analytics trackers on the site.

3. Who we share information with

  • Discord, when you sign in with Discord or use our bot. Discord's own Privacy Policy applies to what it collects.
  • Cloudflare, which sits in front of the website to deliver it securely and protect it from attacks. Web traffic passes through its network.
  • Our moderators and administrators, who can view accounts, chat logs and reports to enforce the rules.
  • Authorities or other parties, only where the law requires it or where needed to protect people's safety or our rights.

4. Cookies and browser storage

We use one essential cookie, sodastudios_site, to keep you signed in. It is HttpOnly, is sent only to this site and lasts up to 7 days. Your browser may also keep small functional items, for example to remember where to send you after you sign in. We do not use advertising or analytics cookies. Cloudflare may set its own security cookies. Blocking the essential cookie will stop you from staying signed in.

5. How long we keep information

  • Account and game data: for as long as your account exists.
  • Chat logs, reports and moderation records: as long as needed for moderation, safety and preventing abuse.
  • Sign-in sessions: up to 7 days, or until you log out or change your password.
  • Server logs: kept for troubleshooting and security purposes.

When you ask us to delete your account we remove your profile, items and messages. We may keep a minimal record (for example, that an account or IP address was banned) where needed to prevent abuse or meet a legal obligation.

6. Your choices and rights

You can ask us to show you the information we hold about you, correct it, export it, or delete it, and you can unlink Discord or change your password on your account page. To make a request, contact us through the SodaStudios Discord server (message a moderator, or use the help and report channels), or the in-game help report. We may need to confirm you own the account first (for example, by asking you to sign in or to message us from the linked Discord account) and we aim to reply within 30 days.

If you are in the EU, UK or a similar region, you also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority. Our legal bases are described in section 2. If you are a California resident, we do not sell or share personal information for cross-context behavioral advertising, and you can ask what we hold and request deletion. We will not treat you differently for exercising your rights.

7. Children

SodaStudios is for people aged 13 and over. It is not directed to children under 13 and we do not knowingly collect personal information from them. You must confirm you are 13 or older to register. If you are a parent or guardian and believe a child under 13 has an account, contact us and we will delete it. If you are under 18, please have a parent or guardian read this policy and our Terms.

8. Security

We take reasonable steps to protect your information, including storing passwords only as salted hashes, encrypting traffic in transit, and restricting administrator access. No online service is perfectly secure. If a breach affects your information we will tell you as the law requires.

9. Where information is processed

SodaStudios is run from the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States and by the providers named above, which may have different data protection laws than your country.

10. Changes to this policy

We may update this policy. We will change the effective date above and, for significant changes, announce them on our Discord server. Using SodaStudios after a change means you accept the updated policy.

11. Contact

Questions or requests about privacy: the SodaStudios Discord server (message a moderator, or use the help and report channels), or the in-game help report.