Privacy Policy

Skrtt is operated from Italy. For any privacy question or request, contact: info.skrtt@gmail.com.

2.1 Anonymous identifier (functional cookie). When you visit Skrtt, we assign your browser a random anonymous ID stored in a cookie. This ID is not linked to your name or email — we don't know who you are, only that “this browser” uploaded certain beats or cast certain votes. This is a strictly necessary cookie required for the Service to work (linking your beats to your profile, preventing duplicate votes), so it does not require your consent, but we disclose it here as required by law.

2.2 Content you submit. If you upload a beat: the audio file, cover art image, beat title, producer name, country, genre, BPM, musical key, mood tags, and optional preview start time. If you fill in a producer bio or contact link, that too.

2.3 IP address (hashed). In our own application database, we hash (irreversibly scramble) your IP address to enforce upload/voting rate limits (reset hourly) and detect abuse — we never store it in readable form there, and we do not use it to identify you personally. Separately, our hosting provider's infrastructure logs raw IP addresses briefly as standard technical/security practice — see 2.5.

2.4 Reports. If you report a beat, we store which beat was reported, when, and a hashed identifier of the reporter (to prevent spam reporting).

2.5 Standard server logs. Our hosting infrastructure (Cloudflare) automatically logs requests (e.g., IP address, browser type, timestamps) for security and reliability, as is standard for any website.

2.6 On-device storage. Your browser also remembers, purely on your own device (never sent to or readable by us), which beats you've already voted for and which you've already reported — so the button reflects that correctly if you revisit. Clearing your browser's site data resets this, on your device only.

We do not collect: your name, email address, or any government ID, unless you voluntarily include it in your bio or contact field.

• Your beat, profile, and associated data are kept until you ask us to delete them or until they are removed for violating our Terms.
• Report records are kept for a reasonable moderation period, then may be deleted.
• Standard server/security logs are retained according to Cloudflare's standard log retention (typically a matter of weeks), not controlled directly by us.

We don't sell your data. We use the following processors to run the Service:

Cloudflare (hosting, database, file storage, and content delivery) — Cloudflare may process data on servers outside the EU as part of its global network. Cloudflare is GDPR-compliant and offers Standard Contractual Clauses / a Data Processing Addendum for this purpose.

We do not share your data with advertisers. If this changes in the future (e.g., we add analytics or advertising tools), this Policy will be updated first, and a cookie consent banner will be added for any new non-essential cookie before it's used.

If paid features launch: when Skrtt introduces paid placement (as noted in our Terms of Service), a payment processor (e.g., Stripe) will be added to this list to handle transactions. Skrtt will not itself store your card details — the processor handles that directly under its own privacy policy. This Policy will be updated before payments go live.

Cookies

Local storage (kept only on your device, never sent to us)

Skrtt does not currently use analytics, advertising, or marketing cookies. If we add any in the future, we will show a consent banner before setting them, as required by law.

Because Skrtt doesn't use traditional accounts, you can exercise these rights by emailing info.skrtt@gmail.com with enough detail to locate your data (e.g., producer name, beat titles):

• Access — get a copy of the data we hold linked to your profile
• Rectification — correct inaccurate data (e.g., an editable bio field already lets you do this yourself)
• Erasure — ask us to delete your profile, beats, and associated data
• Restriction / Objection — ask us to limit or stop certain processing
• Portability — receive your data in a portable format
• Complaint — you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) or your own country's equivalent authority

We will respond to verified requests within the timeframe required by law (one month from receipt, extendable by up to two further months for complex requests, in which case we'll tell you why within the first month).

Under Italian law, the digital age of consent is 14 (Art. 2-quinquies of the Privacy Code) — this is the number referenced in our Terms of Service. We do not knowingly collect data from children below the minimum age stated in our Terms. If you believe a child has used the Service in violation of this, contact us and we will remove the relevant data.

We use reasonable technical measures (rate limiting, hashed identifiers, file validation, restricted admin access) to protect data. No online service can guarantee perfect security, but we don't store readable IP addresses, passwords, or sensitive personal identifiers, which limits what could be exposed in the event of a breach.

Skrtt is based in Italy but accepts users worldwide, consistent with our leaderboard's country filter. Wherever you are, your data may be processed in Italy and on Cloudflare's global infrastructure as described in Section 5.

We may update this Policy from time to time. Material changes will be highlighted on this page with an updated date at the top.

Questions or requests about this Policy: info.skrtt@gmail.com.