Last updated 31 October 2026

Privacy Policy

We keep what's needed to run your page and nothing for advertising. No tracking scripts, no selling data, no ad networks.

1. What we keep about you

• Account: your email, a scrambled (hashed) version of your password, your account number and when you joined.
• Your page: your name, display name, bio, picture, banner, background, links, blocks, songs, lyrics, look and settings.
• Discord, if you connect it: your Discord ID, username and picture. Connecting also adds you to the Stellic Discord server (the "join servers" permission), where our bot sees your online status and what you're playing or listening to, so a status card on your page can show it live. We never see your messages or your other servers. Leave the Stellic server or disconnect Discord and the bot stops seeing your status.
• Security: your sign-in sessions, and your two-factor secret and hashed backup codes if you turn that on.
• Messages you leave: guestbook notes and reports you send.

2. People who visit your page

We count views and clicks so you can see your stats. A visitor is recorded as a code made from their IP address, browser and the day, scrambled so it can't be turned back into the IP, and changed every day. We also keep the referring site and whether it was a phone or a computer. We don't store visitors' IP addresses. Browsers that send Do Not Track or Global Privacy Control aren't counted.

3. How we use it

• To run your page and your account, and to show you your stats.
• To send emails you need (verification, password resets, security alerts) and the ones you choose in Notifications.
• To keep the site safe: rate limits, spotting abuse, and moderation.

We don't sell your data, and we don't use it for advertising.

4. Other services we use

• Hosting and database: our server and database host store the site's data.
• Email: Resend delivers our emails.
• Cloudflare: handles our domain, its security and incoming email.
• Discord: for Discord sign-in, and server cards on pages.
• Lanyard: a backup for live Discord status cards, only if you add one and joined their server yourself.
• LRCLIB, NetEase Cloud Music and lyrics.ovh: we send a song's title and artist to find lyrics. Nothing about you is sent.

5. What's public

Your page is public: anyone with the link can see your name, picture, bio, links, blocks and the stats you choose to show. Unlisted pages stay out of search, discovery and the leaderboard, but the link still works. Your email is never shown.

6. How long we keep it

• Visit and click records: 90 days, then deleted automatically.
• Your account and page: until you delete them.
• Deleting your account removes your page, links, uploads, hearts and analytics straight away. Backups that still hold them expire on their own.

7. Your choices

• See it: download everything we hold about you from Settings, under Your data.
• Change it: edit your page and settings at any time.
• Delete it: delete your account from Settings.
• Emails: turn optional emails off under Notifications.
• Cookies: choose on the Cookies page.

Depending on where you live (for example under the UK or EU GDPR), you may have more rights, like objecting to how we use your data or complaining to your data protection authority. Email us and we'll help.

8. Security

Passwords are hashed with scrypt, sign-in sessions are stored as hashes, everything travels over HTTPS, and you can turn on two-factor sign-in. No system is perfect; if something goes wrong that affects you, we'll tell you.

9. Contact

Privacy questions or requests: [email protected].