Connection Bridge privacy
Effective October 16, 2026
MusicRight Connection Bridge helps you connect your signed-in DistroKid and The MLC accounts to MusicRight. This policy explains the data handled by the Chrome extension and its connection features.
Information the extension accesses
- Authentication information: session cookies and bearer tokens for DistroKid and The MLC, plus your MusicRight access token. These credentials can provide access to your account and are sensitive.
- Account identity: your MusicRight email address or name, and MLC member identifiers when available, to identify your connection and show your sign-in status.
- Connection metadata: supported website origins, relevant tab identifiers, capture timestamps, and connection results. The extension observes authentication headers and relevant network events on supported DistroKid and MLC pages. It does not collect a general history of websites you visit.
The extension reads existing authenticated sessions. It does not read passwords you type, capture keystrokes, or inspect Google or Discord sign-in forms.
How this information is used
MusicRight account information is read when you check the selected website's sign-in status or start a connection. Provider authentication information is held temporarily in Chrome so your requested provider connection can be completed.
When you choose Connect with extension on an allowed MusicRight website, the extension sends the selected provider's session credentials to the MusicRight backend to establish that connection. Your MusicRight access token authenticates this request. Provider credentials are encrypted by the backend before storage.
The developer tools offer an optional, explicit action to send the active DistroKid session and your MusicRight authentication to a backend URL you select. Chrome requests any additional site permission needed. Local development can use unencrypted HTTP on a loopback address; non-local destinations must use HTTPS. Use this feature only with a backend you control and trust.
The token-testing control can copy a captured DistroKid bearer token to your system clipboard at your request. Your operating system and other applications may have access to clipboard contents.
Storage and retention
The extension keeps session credentials in Chrome's session storage, rather than persistent extension storage. This browser storage is cleared when Chrome restarts or the extension is removed. Some captured credentials are also cleared after successful transfer or an authentication rejection. The popup includes a control to clear a captured DistroKid bearer token.
Removing the extension clears its browser storage but does not delete a provider connection already stored by MusicRight. Use MusicRight's disconnect controls or contact us to request deletion of stored connection information. Signing out of or revoking sessions at the provider can also invalidate the credentials.
Sharing and limited use
Extension information is used to provide the MusicRight account-connection features described here. It is not sold, used for advertising, or used to determine creditworthiness or lending eligibility. The extension contains no advertising or analytics SDKs and does not transmit credentials to advertising services.
Data is transferred to MusicRight for a connection you request, or to a backend you explicitly choose in the developer tools. Information is handled by service providers operating the MusicRight service as needed to deliver these features. It is not shared for unrelated purposes.
Your choices
You can decline a connection, remove optional site permissions in Chrome, clear a captured token, disconnect a provider in MusicRight, revoke the provider's sessions, or uninstall the extension. These actions have different effects on browser credentials and stored server connections, as explained above.
Changes and contact
We will update the effective date when this policy changes. For questions or requests about extension information, contact hi@musicright.ai.
For the rest of the MusicRight service, see the MusicRight website privacy policy.