Privacy policy

Chills collects only the information needed to provide accounts, personal libraries, community features, and a reliable service. Chills does not sell personal data or use account activity for cross-app advertising. Media providers may collect information and serve advertising when you use their players, as described below.

We use this information to authenticate you, provide your library and listening statistics, publish contributions you intentionally make public, operate moderation and rights-holder workflows, prevent abuse, diagnose problems, maintain the security of Chills, and manage carefully targeted partner outreach. We use consent for inbound partner enquiries and may rely on legitimate interests for proportionate corporate business-to-business outreach, subject to review and your right to object.

Chills uses Supabase for authentication and database services, Vercel for hosting and audio processing, Cloudflare R2 for uploaded audio and recording artwork storage and delivery, Exa to research public business sources, and Instantly and our email provider to manage reviewed partner outreach. When you stream music or open a provider player, SoundCloud, Audiomack, Bandcamp, Audius, Archive.org, Phish.in, or the relevant media host may receive your IP address, device or browser information, and playback interactions. Embedded providers may use cookies, personalise content or advertising, and share information with their partners under their own policies. You can review the SoundCloud privacy policy and Audiomack privacy policy, including the choices offered by those providers. External artist-support and contribution links are governed by the destination service.

Page descriptions, photos, banners, gallery captions, venue and booking details, events, external links, announcements and selected recordings are public. We keep representation claims and their evidence private, and share team account details only with page owners and authorised reviewers. Images are checked and image metadata is removed before publication. Supabase stores and serves public page images. Page edits and access decisions have a private audit history. If you choose to save an editing draft, it stays in this browser for your account and page. Drafts can be restored for up to 30 days and are removed when published, discarded or next opened after expiry. Clear your browser storage to remove drafts from a shared device. Deleting a team member’s account removes their membership and comments; public page content remains associated with the artist, venue or organisation. Contact us for help removing or transferring a page. Organisation recording credits are public after independent approval; credit requests and supporting evidence are private to authorised page teams and reviewers. Curated picks do not establish a publication or event-presentation credit. Artist, venue and promoter tag suggestions, explanations and review statuses are public, with aggregate community and team-confirmation counts. Raw reviewer account IDs and votes remain private; you can see your own vote. Verified team dispute evidence and moderation notes are private to authorised reviewers. Deleting an account removes its tag votes and clears its references in retained contribution and audit records.

We store the audio file and recording details you submit, your permission to share it, and technical checks such as its size, duration and audio checksum. Eligible audio is playable on its community review page before it appears in discovery. An optional photo or poster is cropped and stored with the recording. We remove embedded image metadata before publication; the cover follows the recording’s availability, including on its community review page. Your email and account identifier are private. Interrupted transfers can resume using an upload identifier and file details saved on your device. Unfinished uploads expire after seven days. Completed recordings and their review history remain until a valid removal request or another applicable retention reason is acted on; unlisting does not delete the original recording. Account deletion clears the contribution’s author reference and is separate from a request to withdraw recording rights.

A display name and visible performance memories, timestamps, comments and replies may be shown to other people. Accepted nomination details are shown without the submitter's identity. Likes, votes, chill moments, and crowd ratings appear only as anonymous totals; their account-linked rows, your listening history, and your email address are not public.

Reports and blocked-listener choices are private. We use reports to review potentially objectionable content and blocks to hide that contributor's public memories, timestamps and comments from your account. A reported contribution may be held or removed while it is reviewed.

Verified page teams can see aggregate recorded listens, saves and follows for their public recordings and pages, without listener identities or emails. These totals use retained activity, so deleting your account or history changes them. Official ticket-link clicks are counted as daily page totals; they do not measure purchases. We use a separate daily changing, keyed network digest to limit duplicate clicks and abuse, without storing raw IP addresses. Abuse-limit entries older than two UTC days are removed on the next tracking request. Do Not Track and Global Privacy Control requests are not counted. Ticket links still open if tracking is blocked or unavailable.

Feedback is private and does not require an account. We save your message, its bug or suggestion category, an optional reply email, the page path (without query strings), and basic browser and screen-size details to understand and address your feedback. A daily changing, hashed network identifier helps limit spam; we do not save raw IP addresses in the feedback inbox. Spam-limiting records are removed after 24 hours when the next message is submitted. Feedback is kept only as needed to handle the issue and improve the service.

Account information and personal activity are kept while your account is active. You can permanently delete your account and associated data from the Account screen or at chills.live/account/delete. You may also email us. Limited security or legal records may be kept only where required.

You can browse without an account, choose what community content to submit, update your display name, and delete your account. To request access, correction, or help with deletion, contact hello@chills.live.

Every partner email identifies Chills and provides a simple way to opt out. If you object or ask us to stop, we keep the minimum email address or domain needed on a suppression list so the request is respected. We do not use private-data scraping or buy indiscriminate consumer lists.

Chills is not directed to children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can remove it.

We may update this policy when the product or its providers change. The current version and its effective date will always appear on this page.