We collect almost nothing. No trackers, no ad pixels, no third-party analytics. Full stop.

What we store

• Account: your email and password hash (Supabase Auth), plus your display name / username.
• Uploads: your audio files, cover images, and the metadata you type (title, artist, description, content date).
• Play counts: how many times a mix has been played, as a counter only — we don't tie plays to who you are unless you're the owner.
• Sessions: standard auth cookies so you stay logged in. First-party only.
• Page views: which page you opened and the on-site page you came from, plus a random per-browser-session id — first-party only, no cookies, deleted after 180 days. Used solely for our own dashboard.

What we do NOT collect

• No third-party analytics (no Google Analytics, no Meta pixel, no Plausible, none).
• No cross-site tracking. No fingerprinting.
• No location, contacts, calendar, or photos from your device beyond files you explicitly upload.
• We don't sell, rent, or share your data with anyone. Ever. There's no ad business to fund.

Where your data lives

Files and database rows live in Supabase, served through our own domain (data.headsets.fun) and proxied by Nginx on our home server. Daily encrypted backups sit on drives we physically control. This is a hobby archive — it's run by humans, not a data pipeline.

Delete your data

Want out? Delete your account from the Control Deck, or email abuse@headsets.fun and we'll remove your account, uploads, and rows within two working days. No retention schedule — when we say deleted, we mean deleted.

Questions

Everything else: see Terms of Service. Or just email abuse@headsets.fun.