Privacy Policy
Last updated: March 5, 2026
1. Information We Collect
SecureBeats collects the minimum information necessary to provide our service. The data we collect depends on how you use the platform.
For Creators (Account Holders)
- Email address (for sign-in)
- Display name (if signed in via Google)
- Uploaded audio files (stored encrypted on Cloudflare R2)
For Listeners (No Account Required)
- IP address
- Browser and device information (user agent)
- Timestamp of each listen event
2. IP Address Logging
We log the IP address of every listen event. This data is used to:
- Provide creators with analytics about who is listening to their beats
- Enforce rate limits to prevent API abuse (50 requests/minute/IP)
- Track unique listener counts per track
IP addresses are stored in our database and are visible to the creator who uploaded the track. We do not sell or share IP data with third parties.
3. Analytics & Listener Tracking
When a listener plays a beat through a shared link, we record the following information and display it on the creator's dashboard:
- Device type — e.g. Mac, iPhone, Windows PC, Android
- Browser — e.g. Chrome, Safari, Firefox
- Operating system — e.g. macOS, iOS, Windows
- IP address — full IP address of the listener
- Timestamp — when the beat was played
This data helps creators understand who is accessing their work and detect unauthorized distribution attempts. We do not use this data for advertising or behavioral profiling.
4. Data Storage
Your data is stored securely using industry-standard services:
| Data | Stored On | Retention |
|---|---|---|
| Audio files | Cloudflare R2 | 3 days maximum, or until deleted by creator |
| Account data | Supabase (PostgreSQL) | Until account deletion |
| Listen logs | Supabase (PostgreSQL) | Deleted instantly when link or track is deleted |
| Auth sessions | Supabase Auth | Session-based |
5. Third-Party Services
- Supabase — database, authentication (Privacy Policy)
- Cloudflare — file storage (Privacy Policy)
- Google — OAuth sign-in (if used) (Privacy Policy)
6. Your Rights
You can request deletion of your account and all associated data by contacting us at:
7. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via the platform. Continued use of SecureBeats after changes constitutes acceptance.