Privacy policy
Last updated 29 September 2026.
Who runs Sleeve
Sleeve is a free, non-commercial website run by Benjamin Bekes, a private individual in Hungary. I am the data controller for the personal data described here. Contact: hello@sleeveclub.com.
What Sleeve stores
- Your account: your email address and, if you set one, your password (stored only as a secure hash). If you sign in with Google, Sleeve receives your name and email address from Google, and nothing else.
- Your profile: username, display name, bio, top four albums and, if you add one, a profile photo.
- What you add: diary entries, ratings (of albums and of tracks), reviews, vibes, likes, lists, comments, follows, listen later, and the records in your sleeve (your collection).
- Where and who with: if you note where you listened or who you were with, it is private (only you can see it) unless you choose to share it on that entry.
- Reports you send about content, so they can be reviewed.
- Technical data: the services that run Sleeve keep short-lived logs (such as IP address, browser type and time of visit) to keep it working and secure.
The barcode scanner works on your device: camera images are never uploaded. Only the barcode number is sent, to look up the record.
What is public
Sleeve is a social site. Your profile and everything you add to it (diary, ratings, reviews, likes, lists, comments, follows, listen later and your collection) can be seen by anyone, including people who aren't signed in. Your email address is never shown. Where and who with stays private unless you share it.
Why, and on what legal basis
- To provide the service you signed up for: your account, profile and everything you add (GDPR Article 6(1)(b), performance of a contract).
- To keep Sleeve secure, prevent abuse and handle reports (Article 6(1)(f), legitimate interests).
Sleeve only sends emails you need for your account (confirming your address, sign-in links and password resets). There is no marketing email, no advertising and no selling of data.
Who processes your data
These services store or handle data on Sleeve's behalf, under data processing agreements:
- Supabase: database, sign-in and file storage (profile photos). Stored in the EU (Frankfurt, Germany).
- Vercel: hosting; serves the pages.
- Resend: sends account emails.
- Google: only if you choose “Sign in with Google”.
Vercel, Resend and Google are based in the United States. Transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.
Album information comes from MusicBrainz and cover art from the Cover Art Archive. Sleeve doesn't send them any of your personal data.
How long it's kept
Your data is kept while you have an account. When you delete your account (in Settings), your profile and everything you added are deleted straight away. Copies can remain in backups for up to 7 days, and in service logs for up to 30 days, before they are deleted too.
Cookies
Sleeve only uses cookies that are essential to keep you signed in. There are no advertising, tracking or analytics cookies, so there is no cookie banner.
Your rights
Under the GDPR you can ask to access, correct, delete or export your data, to restrict its use, or object to it. Most of this you can do yourself: edit your profile in Settings, download everything with “Export my data”, and delete your account there at any time. For anything else, email hello@sleeveclub.com; you'll get a reply within one month.
If you think your data has been handled unlawfully, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu) or the data protection authority where you live.
Age
You must be at least 16 to use Sleeve.
Changes
If this policy changes in a way that matters, members will be told on the site before the change applies.