Last updated: October 2, 2026
1. Who We Are
Our website address is: https://www.allmetalmedia.com
All Metal (“All Metal,” “we,” “us,” or “our”) is an independent digital media platform focused on rock and metal music culture worldwide, from the softest rock to the heaviest metal. We are the data controller responsible for the personal data described in this policy. For any privacy or data protection inquiries, please use the Contact section of this website.
2. What Personal Data We Collect and Why
Comments. When you leave a comment, we collect the data shown in the comment form (your name, email address, and website if provided), as well as your IP address and browser user agent string, to help with spam detection. An anonymized string created from your email address (a hash) is sent to the Gravatar service to check whether you have an account there and to display your profile picture next to your comment; see Gravatar’s privacy policy for details. If you leave a comment, you may also opt in to have your name, email, and website saved in a cookie so you don’t have to re-enter them next time; this cookie lasts one year.
Contact form. When you use our contact form, the information you enter (name, email, subject, and message) is sent to us by email so that we can respond to you. It is not stored in our website’s database. The form is protected by Cloudflare Turnstile to prevent spam and abuse.
Newsletter. If you choose to subscribe to our newsletter – whether through the optional checkbox on the contact form, the optional checkbox on the comment form, or one of our newsletter sign-up pop-ups – we collect your email address and, where provided, your first name, and send them to Brevo, our email marketing provider. Subscriptions use a double opt-in process: you will receive a confirmation email and must actively confirm before being added to our list. See Brevo’s privacy policy for how they handle your data.
Discount and promo codes. From time to time, we offer a discount code in exchange for subscribing to our newsletter (currently for our Fourthwall-powered shop, and potentially for other retail partners in the future). This does not involve collecting any data beyond the newsletter sign-up itself.
Shop purchases. Our shop is powered by Fourthwall. When you make a purchase, Fourthwall directly processes your order, payment, and shipping information; All Metal does not receive, see, or store your payment details. Fourthwall also handles customer service and support for any questions related to your order; All Metal does not have access to your order or payment information. Please see Fourthwall’s privacy policy for details on how they handle your data.
Media. Images published on the site may contain embedded location data (EXIF GPS). Visitors can download and extract this data from any image on the site.
3. Cookies and Local Storage
We use a cookie consent banner (CookieYes) that lets you choose which categories of cookies to allow. These generally include:
Necessary cookies, required for the site to function.
Functional cookies, such as the optional comment-info cookie described above.
Analytics cookies (Google Analytics), which help us understand how visitors use the site.
Advertising cookies (Meta Pixel, Awin and Impact.com affiliate links, and Google AdSense if we enable it in the future), which may be used to measure and personalize ads.
The exact cookies in use, their purpose, and their duration are listed in the cookie banner, where you can also manage your preferences at any time. Our newsletter sign-up pop-up also uses your browser’s local storage (not a cookie) to remember that you’ve already seen it; this contains no personal data and stays until you clear your browser data.
4. Embedded Content and External Links
Articles on this site may include embedded content (for example, videos, images, or social media posts) or links to external sites, such as official band or artist pages, or our “support us” link to Buy Me a Coffee. Embedded content behaves exactly as if you had visited the other website directly, and external sites are governed by their own privacy policies. All Metal has no control over third-party data collection practices.
5. Who We Share Your Data With
We do not sell or rent personal data. We only share data with trusted service providers necessary to operate the website:
Brevo – email delivery and newsletter management
Fourthwall – shop, order processing, and payments
Google – analytics (Google Analytics), and advertising (Google AdSense, if enabled in the future)
Meta – advertising measurement (Meta Pixel)
Awin – affiliate advertising links and cookies, including our current and future retail partners
Impact.com – affiliate advertising links and cookies, including our current and future retail partners
Cloudflare – spam and bot protection (Turnstile) on our forms
Each provider’s own privacy policy governs how they process your data.
6. International Data Transfers
Some of the providers listed above (including Fourthwall, Meta, and Google) are based outside the European Economic Area. Where this is the case, they are required to provide appropriate safeguards for your data, such as Standard Contractual Clauses, in line with GDPR requirements.
7. How Long We Retain Your Data
Comments are retained indefinitely, for as long as the related article remains published, so we can recognize and manage follow-up comments.
Contact form messages are kept only as long as needed to respond to and resolve your inquiry.
Newsletter data is retained until you unsubscribe. Even after unsubscribing, Brevo keeps a minimal record of your email address on a suppression list, to make sure we don’t contact you again by mistake.
Shop purchase data is retained according to Fourthwall’s own policy, as they are responsible for processing it.
Analytics data is retained according to our Google Analytics settings, which currently range between 2 and 14 months depending on configuration.
Advertising and affiliate cookies (Meta, Awin, Impact.com, AdSense) are retained for the period set by each provider, as shown in our cookie banner.
8. Your Rights Under GDPR
If you have left a comment or subscribed to our newsletter, you can request a copy of the personal data we hold about you, ask us to correct it, or request that we erase it (except where we are required to keep it for legal or security reasons). You can also withdraw your consent at any time, for example by unsubscribing from our newsletter.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with Poland’s supervisory authority, the Urzad Ochrony Danych Osobowych (UODO): https://uodo.gov.pl/en.
Requests can be sent via the Contact section of this website.
9. Changes to This Policy
We may update this privacy policy from time to time, for example when we add a new service or change a provider. The “Last updated” date at the top reflects the current version. Continuing to use the site after a change means you accept the updated policy.