Privacy policy
Last updated 20 October 2026
This policy explains how PT Musim Panen Harmonis ("Musimpanen", "we") handles personal data on musimpanen.id and in the Musimpanen Lab: our experiments at *.musimpanen.id and the Lab account at id.musimpanen.id. We follow Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022, "UU PDP"). Using the Lab is also covered by our terms of use.
Who we are
PT Musim Panen Harmonis, Jl. Merdeka Raya No.7 Blok 6, RT.1/RW.7, Abadijaya, Kec. Sukmajaya, Kota Depok, Jawa Barat 16417, Indonesia. Contact for anything about your data: hello@musimpanen.id.
Visiting our websites
You can read musimpanen.id without an account. Opening the Lab and its experiments needs a free Lab account. We don't use advertising or analytics cookies, and we don't track you across sites. Like any website, our hosting provider (Cloudflare) processes technical data such as your IP address to deliver pages and protect them from attacks. Our pages load fonts from Google Fonts, which receives your IP address when fonts are downloaded.
Your Lab account
A free Lab account unlocks every experiment. When you create one, we collect:
| Data | Why |
|---|---|
| Email address | To identify your account and send sign-in links. |
| Name and Google account ID (if you use Google) | To sign you in with Google and greet you. |
| WhatsApp number (optional, only if you add it) | To contact you about experiments, if you want that. |
| Where you signed up from (for example "ig-karhutla") and which experiments you opened | To learn which of our content and experiments are useful, so we build more of what works. |
| A session cookie | To keep you signed in across *.musimpanen.id. It's the only cookie we set. |
| Your consent choices and their dates | To respect and prove what you agreed to. |
We don't sell your data, and we don't use it for advertising profiles.
Your choices
- Account: creating a Lab account is optional. Agreeing to this policy is required to create one.
- Updates by email: separate and optional. Turn it on or off anytime in your account.
Who processes your data for us
- Cloudflare hosts our websites, stores the Lab database, and runs Turnstile, the bot check on the sign-in form.
- Google handles "Continue with Google" sign-in, if you choose it.
- Resend delivers sign-in link emails.
These providers may process data outside Indonesia. We use them under their data-protection terms and only for the purposes above.
How long we keep it
- Account data: until you delete your account.
- Sessions: 30 days. Sign-in links expire after 15 minutes and are deleted within a day.
- Activity records (signups, sign-ins, experiments opened): 12 months.
Your rights
Under UU PDP you can ask to see, correct, export or delete your data, and withdraw consent at any time. You can do most of this yourself at id.musimpanen.id/account: edit your details, download your data, or delete your account. Deleting the account removes your profile, sessions and activity records. For anything else, email hello@musimpanen.id. We'll reply within the time the law requires.
Security
Sign-in uses one-time links or Google sign-in; we never ask for or store passwords. Session and sign-in tokens are stored only as one-way hashes. Access to the database is limited to us. If a data breach affects you, we'll notify you and the authorities as UU PDP requires.
Children
The Lab is meant for adults. If you are under 18, please ask a parent or guardian before creating an account.
Experiments and their data
Lab experiments are non-commercial prototypes. Each one names its data sources. They are not official sources: for decisions about safety, health or emergencies, use official services.
Changes
If we change this policy in a way that matters, we'll update the date above and, for account holders, tell you by email.