Privacy policy

1 Who is responsible

The data controller is Radek Dvořák (Skeli), e-mail skelimc@seznam.cz. Send any request about your data to this address.

2 What we process and why

• Account: username, e-mail, password (only as an encrypted bcrypt hash – we never know the password itself), date of sign-up and e-mail confirmation. Used to run the account, comments and voting (performance of a contract – the terms of use).
• Profile (optional): display name, age, city, a few words about you, profile photo, theme and language. You fill in only what you want and can change or delete it any time (consent).
• Comments and votes: the comment text, its date and votes on songs and comments. Comments are public. Only the administrator sees reports of comments.
• News by e-mail: your e-mail and the dates of subscribing and confirming. The subscription starts only after you click the link in the confirmation e-mail, and every e-mail has a link to unsubscribe (consent).
• Security: your IP address is kept briefly in the server's memory to stop spam and password guessing and appears in the server's technical logs. When you set a password we check whether it has appeared in data breaches (Have I Been Pwned): only the first 5 characters of the password's hash leave the server, never the password or your details (legitimate interest – security).
• Visit counting (no cookies): when a page is shown, the site turns your IP address and browser type (or your account number when signed in) into an anonymous fingerprint. Its key is thrown away every day at midnight and a new one is made, so the fingerprint can neither identify you nor link visits from different days. It is only used for numbers: how many people are on the site right now, how many came in a day and how often a song text was read (each text counts at most once a day for you). We do not store your IP address or browser (legitimate interest – knowing how the site is used).

3 Cookies and browser storage

• Necessary sign-in cookie (JSESSIONID): signing in doesn't work without it. It lasts until you close the browser, 30 days with "Remember me on this device".
• Settings in your browser (localStorage): your choice in the cookie bar, light/dark theme, lyrics text size, the Spotify player's state and MC Kevin's settings. They stay in your browser and are never sent to the server.
• Visitor statistics with Matomo on the site operator's server (not Google) – it loads only after you allow it in the cookie bar ("Accept all" or "Settings" → Visitor statistics). Until then nothing is sent to the statistics server. You can change or withdraw your consent any time with "Cookie settings" in the footer.

Cookie settings

4 Content from other services

YouTube videos and the Spotify player load only after your consent in the cookie bar or a click on "Load the player". Then YouTube (Google) or Spotify see your IP address and follow their own policies. Clip thumbnails, fonts and icons come from our own server. Links to Instagram, Facebook, YouTube, Spotify and Apple Music lead to their sites.

5 Who gets the data

We never sell it. It is processed technically by the operator of the server and mail the site runs on (hosting in the Czech Republic); e-mails (account confirmation, password reset, news) go out through the mail server.

6 How long

The account and profile until you delete the account. The news subscription until you unsubscribe. A password reset link is valid for 30 minutes, an e-mail confirmation for 48 hours. Database backups serve only to recover after a failure.

7 Deleting your account

In Settings → Delete account. Your name, e-mail, password, profile photo, profile, reports and news subscription are deleted and you are signed out on every device. Comments stay as "Deleted account" and votes stay counted, no longer linked to you. Want the comments deleted too? Write to skelimc@seznam.cz.

8 Your rights

You have the right to access your data (Settings → Export data (JSON)), to correct it (Settings), to erasure, restriction, portability (the download is JSON), to object and to withdraw consent. You can complain to the Czech Office for Personal Data Protection (uoou.gov.cz).

9 Age

If you are under 15, ask your parents to agree to your sign-up.