SKELLA CLUB ("we", "us", "our") operates the music-sharing platform at skella.club. We only collect what we need to make the site work and give you useful features. We're not in the business of harvesting unnecessary data.
Who We Are (Data Controller)
SKELLA CLUB, operating the music-sharing platform at skella.club from Ireland, is the data controller responsible for your personal data. You can reach us about anything in this policy at support@skella.club.
What We Do NOT Collect
To put your mind at ease, here's what we explicitly do not do:
- We don't sell your data — Never have, never will.
- We don't track you across other websites — No cross-site tracking, no ad networks.
- We don't run ads — No ad networks, no third-party advertisers, no ad-targeting data.
- We don't collect your contacts — No address book, no phone numbers, no social graph scraping.
- We don't use your content for AI training — Your music stays yours. We don't feed it to AI models.
- We don't store payment card numbers — Stripe handles payments. We never see or store your card details.
- We don't collect precise location — No GPS, no geolocation tracking.
- We don't do browser fingerprinting — No device fingerprinting for tracking purposes.
1. Data We Collect
We collect information necessary to provide and improve our service:
- Account data: Email address, username, display name, profile picture, and password (stored in hashed form).
- Google sign-in: If you sign in with Google, we receive your email, name, and profile picture from Google. This is governed by Google's Privacy Policy as well.
- Content: Audio files you upload, metadata (titles, BPM, key), pack information, and cover art.
- Usage analytics: We track plays, downloads, pack views, and profile views to help creators understand how their content is used. This includes owner ID, viewer ID (when logged in), resource ID, and event type.
- Payment data: Payment processing is handled by Stripe. We do not store card numbers. We store subscription status and Stripe customer and subscription IDs only.
- Support messages: When you use our contact form we receive your message, the name and email you provide, and, to help us diagnose the issue, your browser type and a short trail of your most recent in-app actions (for example "opened pack", "started upload"). If you are signed in we also attach a snapshot of your account (username, plan, storage used, file and pack counts).
- Technical data: IP address, browser type, and similar data for security and basic analytics.
2. How We Use Your Data
We use your data to:
- Provide, maintain, and improve the service
- Authenticate you and manage your account
- Store and stream your audio files
- Process payments and manage subscriptions
- Send transactional emails (verification, password reset, support)
- Show analytics to content owners (plays, downloads, etc.)
- Enforce our Terms of Service and prevent abuse
3. Third-Party Services
We use the following services. Each has its own privacy policy:
- Supabase — Authentication and database (hosting)
- Google — OAuth sign-in (Google Privacy Policy)
- Stripe — Payment processing (Stripe Privacy Policy)
- Cloudflare R2 — File storage
- Cloudflare Turnstile — Bot protection on our sign-up, login, password-reset and contact forms. It checks your browser and receives your IP address to tell humans from bots. It does not track you across sites.
- Resend — Transactional email
- Sentry — Error monitoring. When something breaks, technical details about the error (including the page and request context) are sent to Sentry so we can fix it.
- Telegram — When you send a contact-form message we receive a notification via Telegram. The notification itself carries no personal data (only the category and a count); the full message stays in our own email and admin tools.
- Vercel — Hosting and deployment
4. Cookies and Browser Storage
We use essential cookies to keep you logged in and to make the service work. These include session cookies for authentication (via Supabase) and a short-lived check from Cloudflare Turnstile on our forms. We also use your browser's local and session storage for things you asked the service to remember, such as your player volume, view preferences, and a temporary activity trail that helps us diagnose a problem if you contact us. We do not use advertising cookies, tracking cookies, or any cookies for third-party marketing. You can disable cookies and storage in your browser, but the service may not function properly without them.
5. Legal Basis (GDPR)
For users in the European Economic Area, we process your data based on: (a) performance of our contract with you (providing the service), (b) our legitimate interests (analytics, security, improving the service), and (c) your consent where required (e.g. optional features).
6. Your Rights
You may:
- Access — Request a copy of your personal data
- Correct — Update your profile and account settings
- Delete — Request account deletion via your account settings or by contacting us
- Port — Request your data in a portable format
- Object or restrict — Object to certain processing or request restriction
- Withdraw consent — Where we rely on your consent, you can withdraw it at any time, without affecting anything we did before you withdrew it
Contact us at support@skella.club to exercise these rights. If you are in the EU or EEA you may also lodge a complaint with your local data protection authority; in Ireland this is the Data Protection Commission (dataprotection.ie).
7. Data Retention
We retain your data while your account is active. When you delete your account, we remove your profile, content, and associated data promptly, and analytics events tied to you are unlinked from your identity as part of that deletion.
Some data is kept for a bounded period after that: contact-form messages are deleted after 24 months, and encrypted database backups are kept for up to 90 days (we always keep at least the two most recent weeks of daily backups) before they are deleted. We may also retain limited data longer where the law requires it (for example, tax records for payments).
8. Security
We use industry-standard measures to protect your data, including encryption in transit and at rest, access controls, and secure authentication. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
9. International Transfers
Our service and third-party providers may process data in countries outside your residence. Where we transfer data from the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
10. Children
Our service is not intended for users under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.
11. Changes
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance.
12. Contact
For privacy-related questions or requests, contact us at support@skella.club.
This policy is not legal advice. We recommend consulting a qualified attorney for jurisdiction-specific guidance.