Privacy

Updated 5 October 2026.

What is public

sleeves is a public diary. Your username, profile, scores, notes, listen dates, want-to-listen list, collections, tags, likes, your four, and who you follow can be read by anyone, signed in or not. Search engines can index them. Do not write anything in a note you would not post in public.

What is private

Your email address, your password (stored only as a hash), your sign-in sessions, and the people you block. Sessions may record the IP address and browser that signed in. No one else sees these.

Cookies and storage

One cookie keeps you signed in. There are no ads, no analytics, and no tracking pixels. The four you are arranging is kept in your browser until you save it to your profile.

Who else handles data

• Cloudflare runs the site and sees each request, including your IP address, which is also used to limit repeated sign-in attempts.
• Neon hosts the database.
• Sentry receives error reports: the page, the time, your account id if you are signed in, and the error. Reports leave out cookies, form contents, search terms, and email addresses.
• Cover images load straight from the Cover Art Archive, which sees your IP address the way any image host does.
• When sleeves sends email, such as a password reset, Cloudflare delivers it.

Nothing is sold, and nothing is shared for advertising.

Your copy and your exit

Settings downloads your diary as a CSV file: album, artist, score, date, and note. Settings also deletes your account. Deleting removes your account and everything attached to it from the live database at once. Database backups expire on their own.

Questions

Write to hello@sleeves.fm.