SKELLA CLUB ("we", "us", "our") operates the music-sharing platform at skella.club. We only collect what we need to make the site work and give you useful features. We're not in the business of harvesting unnecessary data.
What We Do NOT Collect
To put your mind at ease, here's what we explicitly do not do:
- We don't sell your data — Never have, never will.
- We don't track you across other websites — No cross-site tracking, no ad networks.
- We don't run ads — No ad networks, no third-party advertisers, no ad-targeting data.
- We don't collect your contacts — No address book, no phone numbers, no social graph scraping.
- We don't use your content for AI training — Your music stays yours. We don't feed it to AI models.
- We don't store payment card numbers — Stripe handles payments. We never see or store your card details.
- We don't collect precise location — No GPS, no geolocation tracking.
- We don't do browser fingerprinting — No device fingerprinting for tracking purposes.
1. Data We Collect
We collect information necessary to provide and improve our service:
- Account data: Email address, username, display name, profile picture, and password (stored in hashed form).
- Google sign-in: If you sign in with Google, we receive your email, name, and profile picture from Google. This is governed by Google's Privacy Policy as well.
- Content: Audio files you upload, metadata (titles, BPM, key), pack/playlist information, and cover art.
- Usage analytics: We track plays, downloads, pack views, and profile views to help creators understand how their content is used. This includes owner ID, viewer ID (when logged in), resource ID, and event type.
- Payment data: Payment processing is handled by Stripe. We do not store card numbers. We store subscription status and Stripe customer ID only.
- Technical data: IP address, browser type, and similar data for security and basic analytics.
2. How We Use Your Data
We use your data to:
- Provide, maintain, and improve the service
- Authenticate you and manage your account
- Store and stream your audio files
- Process payments and manage subscriptions
- Send transactional emails (verification, password reset, support)
- Show analytics to content owners (plays, downloads, etc.)
- Enforce our Terms of Service and prevent abuse
3. Third-Party Services
We use the following services. Each has its own privacy policy:
- Supabase — Authentication and database (hosting)
- Google — OAuth sign-in (Google Privacy Policy)
- Stripe — Payment processing (Stripe Privacy Policy)
- Cloudflare R2 — File storage
- Resend — Transactional email
- Vercel — Hosting and deployment
4. Cookies
We use essential cookies to keep you logged in and to make the service work. These include session cookies for authentication (via Supabase). We do not use advertising cookies, tracking cookies, or any cookies for third-party marketing. You can disable cookies in your browser, but the service may not function properly without them.
5. Legal Basis (GDPR)
For users in the European Economic Area, we process your data based on: (a) performance of our contract with you (providing the service), (b) our legitimate interests (analytics, security, improving the service), and (c) your consent where required (e.g. optional features).
6. Your Rights
You may:
- Access — Request a copy of your personal data
- Correct — Update your profile and account settings
- Delete — Request account deletion via your account settings or by contacting us
- Port — Request your data in a portable format
- Object or restrict — Object to certain processing or request restriction
Contact us at support@skella.club to exercise these rights. You may also lodge a complaint with your local data protection authority.
7. Data Retention
We retain your data while your account is active. When you delete your account, we remove your profile, content, and associated data within a reasonable period. Some data may be retained for legal, security, or backup purposes as required by law.
8. Security
We use industry-standard measures to protect your data, including encryption in transit and at rest, access controls, and secure authentication. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
9. International Transfers
Our service and third-party providers may process data in countries outside your residence. Where we transfer data from the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
10. Children
Our service is not intended for users under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.
11. Changes
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance.
12. Contact
For privacy-related questions or requests, contact us at support@skella.club.
This policy is not legal advice. We recommend consulting a qualified attorney for jurisdiction-specific guidance.