Privacy Policy

Effective October 10, 2026

This policy describes museai.codes, an independent directory of Muse AI referral and invite codes. The site is not operated by Muse or Meta. It explains what the site stores, what is shown publicly, and what is used only to limit spam.

What you can submit

The code form asks for a display name, a referral or invite code, and an optional note. The name, code, and note are published on the homepage under Community codes. Do not submit a Muse password, a Meta login, a payment card, or any other secret. The site has no field for those and will not ask for them.

The contact form asks for a name, an email address, and a message. Those messages are stored so the site operator can read them. The email address is not published on the site.

Copy counts

When a visitor copies a community code, the site adds one to that code’s public copy count. Featured codes do not show a copy count, and copying a featured code is not sent to the count. Repeat copy requests from the same network are counted at most once a minute. The count is a measure of copy-button clicks, not of successful redemptions.

Spam limits and security checks

Submissions, contact messages, and copy counts are checked with Cloudflare Turnstile. Turnstile may set a cookie and process your connection to decide whether the request looks automated. Cloudflare describes that processing in its own privacy policy.

The site also limits how often one network can submit a code, send a message, or record a copy. For that limit, the site stores a hash of the IP address with a secret salt. It does not publish the IP address, and it does not build a public profile from it. A hidden form field is ignored by people and used to drop automated fills.

Admin sign-in

The operator can sign in at a private dashboard. A successful sign-in sets an HttpOnly cookie that lasts 12 hours and is used only to authorize changes to codes and contact messages. The cookie is not set for ordinary visitors. Failed sign-in attempts are rate limited. The password is stored as a Cloudflare secret, not in the database.

Theme preference

The site opens in light mode. If you switch to dark mode, that choice is saved in your browser’s local storage under the key “theme”. It is not sent to the server.

Cookies, hosting, and advertising

The site does not run its own analytics product and does not create accounts. Cloudflare, which hosts the site and the database, processes connection data such as IP address and request details to deliver pages and block abuse.

If advertising is added later, Google AdSense may use cookies to serve and measure ads. That would be described by Google’s policies, includingHow Google uses information from sites or apps that use its services. This site does not sell personal information. No AdSense publisher ID is installed on the site until an account is approved.

Outbound links

Redeem and Open Muse AI links leave this site and go to https://muse.ai/join, operated by Meta. Meta’s sites have their own privacy terms. This site does not collect Muse account credentials.

How long information is kept

Published codes stay on the site until the operator removes them. Contact messages stay until the operator deletes them after handling the request. Rate-limit records expire with their time window. You can ask for a community code or a contact message to be removed through thecontact form.

Changes

If this policy changes, the effective date on this page will change with the text.