Privacy Policy
Effective Date: December 31, 2025
Overview
Sleever helps you track and sleeve your physical music collection. We collect and use the minimum data necessary to provide the service. This policy explains what we access, how we use it, how long we keep it, and how you can control it. It specifically details our handling of Google user data required for sign-in.
Google User Data
We use Google OAuth solely for authentication. We request only basic identity scope (OpenID Connect) such as openid, email, and profile. We do not access Gmail, Drive, Calendar, or any other Google data.
Data Accessed
- Google account ID (subject identifier)
- Basic profile: name and profile image
- Email address
- Identity/OAuth tokens used to complete sign-in
Data Usage
- Authenticate you and create your account
- Display your name and avatar in the app UI
- Secure your session and prevent fraud/abuse
- Send essential account communications only (no marketing)
Data Sharing
- We do not sell Google user data.
- We do not share Google user data with advertisers or third-party music services.
- We use Supabase as a data processor for authentication and storage. Supabase processes your Google-authenticated account data on our behalf.
Data Storage & Protection
- Account data (user ID, email, name, avatar) is stored in Supabase Auth and our database. We do not store Google access to other Google APIs.
- Sessions are managed via secure cookies. Data is transmitted over HTTPS and stored by our cloud providers using industry-standard security.
- Access to production data is restricted to authorized personnel for legitimate operational reasons.
Data Retention & Deletion
- We retain your Google-linked account while your account remains active.
- You can revoke Sleever’s Google access at any time at myaccount.google.com/permissions.
- To delete your account and associated data, email us at garrett@sleever.space. We will remove your Supabase Auth user and app data linked to your user ID.
Other Data We Handle
App Data (Library & Activity)
- Albums you add and formats purchased are stored to power your library.
- Search sessions you choose to save are kept for up to 90 days.
- Physical media search results may be cached for up to 24 hours to improve speed.
Music Service Integration (Optional)
- If you connect a music service (such as TIDAL), we store your connection and tokens to import library/playlist metadata and to keep your data in sync.
- We may cache playlist metadata for performance. Disconnecting your music service removes the tokens and cached playlists associated with your account.
Cookies & Tracking
We use essential cookies for authentication and session security. We do not use advertising cookies or third-party analytics trackers.
Your Choices
- Revoke Google access at any time in your Google Account permissions.
- Disconnect your music service at any time from Settings.
- Request account deletion via email, and we will remove your data.
Contact
For privacy inquiries or data deletion requests, contact garrett@sleever.space.
Changes
We may update this policy from time to time. We will update the effective date above and, when appropriate, provide additional notice in the app.