Privacy policy
Last updated: 31 October 2026
This page says what Need Ears stores about you, why, where it lives, and how you can see it, fix it or delete it.
Who is responsible
The data controller is Kevin Brenden. Contact: contact@needears.com.
What we store
| What | Details |
|---|---|
| Account | Your email address (from Google or from the email link), and a sign-in session (with the IP address and browser it came from) |
| Profile | Username, display name, avatar and bio. If you sign in with Google, the name and picture Google provides may be used as a starting point |
| Tracks | The audio (converted for streaming), its waveform, and title, genre, tags, description, what you want feedback on, and your experience level |
| Comments and reactions | Your comments, reactions, and which comments were marked Helpful |
| Reports | Reports you file, and reports about your content |
| Notifications | In-app notifications |
| IP address at upload | The IP address you uploaded a track from, stored for 30 days, then deleted automatically |
We do not store your original audio file, only the converted stream.
Why
- To run your account and show your profile, tracks and comments (needed to provide the service you signed up for).
- To keep the service safe: the IP address at upload is kept for 30 days so that copyright complaints and abuse can be traced, and reports are used for moderation. This is our legitimate interest in keeping the site safe and lawful.
- To keep the site working: error reports when something breaks.
We don't sell data, and we don't show ads.
What is public
Your profile (username, display name, avatar, bio, reputation and when you joined), your tracks and your comments are public. Anyone can see them without an account. Your email address is not shown to other users.
Where it is stored, and who handles it
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, audio storage | Stockholm, Sweden |
| Vercel | Hosting the website | Frankfurt, Germany |
| "Sign in with Google" | Wherever Google operates | |
| Resend | Sending sign-in links | United States |
| Sentry | Error reports when something breaks | Frankfurt, Germany (EU region) |
These companies process data for us under their data processing terms. Vercel and Resend are US companies, and the data they handle for us (your email address for sign-in links, and technical request logs) can be transferred to the United States. Those transfers rely on the EU Standard Contractual Clauses. Your tracks, comments and profile stay in Supabase in Stockholm.
Cookies
We use only the strictly necessary cookie that keeps you signed in, and your light or dark theme choice is saved in your browser. We don't load third-party scripts that set cookies. That's why there is no cookie banner.
How long we keep it
- Your account, tracks and comments: until you delete them or your account.
- IP address at upload: 30 days.
- After you delete something, provider backups may hold a copy for a short time.
Your rights
You can ask to see, fix, move or delete your data:
- See and take your data: Settings, "Download my data". You get a file with all of it.
- Fix it: edit your profile in Settings, or email us.
- Delete it: Settings, "Delete account". It removes your account and all your content. You'll be asked to sign in again first.
- Anything else (for example objecting to processing, or restricting it): email contact@needears.com. We'll answer within 30 days.
Complaints
If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet. We'd appreciate hearing from you first, so we can fix it.
Children
You must be at least 13 to use Need Ears.
Changes
If this page changes, the date at the top changes. For big changes we'll tell you on the site or by email.