Privacy policy

Skeellz may process data provided when creating and managing an account: email address, username, profile information, biography, skills, credits, images, social links, portfolio content, preferences, contact messages and information needed for support.

Skeellz also processes technical data related to use of the service: session identifiers, security logs, IP address, browser, pages viewed, timestamps, publication status and billing information.

When the user signs up or logs in with Google, Skeellz receives from Google the email address and name associated with the Google account. Skeellz does not receive the Google password and does not access other Google data.

Full payment card details are processed by the payment provider and are not stored by Skeellz.

Data is used to create and administer accounts, provide the service, publish public profiles requested by users, manage contact requests, secure the platform, process subscriptions, send transactional emails and respond to support requests.

Some data may be used to measure service usage, improve Skeellz and prevent abuse, in accordance with the user's consent choices where consent is required.

Processing necessary to create an account, provide the service and manage subscriptions is based on performance of a contract or pre-contractual measures.

Processing related to security, abuse prevention, service improvement and proof of operations is based on Skeellz's legitimate interests.

Processing required by law, including accounting and tax obligations, is based on a legal obligation. Cookies or trackers that are not strictly necessary are based on consent where required.

Data is accessible to authorized Skeellz personnel and to technical service providers strictly necessary for operating the service.

These providers may include application hosting, database and storage providers, the payment provider, transactional email providers, security tools, support tools and analytics tools.

With analytics consent, we use PostHog Cloud EU (Frankfurt) to understand registration, profile editing and publication. Events are associated with an account identifier, and your profile username is included as a person property so we can relate usage to your Skeellz profile. Page-view events also include the path and username of public profiles visited, without URL query parameters or fragments. First and last names, email addresses and other profile field contents are not sent as analytics event properties.

Images are delivered and processed through Cloudflare. When background removal is enabled for a gear photo, the photo is sent to Cloudflare to generate a cut-out version, which is stored alongside the original. The contact form is protected by Cloudflare Turnstile, which analyses technical signals from the browser to detect automated submissions.

Where providers are located outside the European Union, Skeellz ensures that appropriate safeguards are in place, such as an adequacy decision, the EU-US Data Privacy Framework or Standard Contractual Clauses where necessary.

Account and profile data is kept for the duration of use of the service, then deleted or archived within a reasonable period after account deletion, unless a legal obligation requires otherwise.

Billing data and accounting records are kept for the legally required period. Technical logs and security data are kept for a limited period proportionate to security and evidence needs.

Contact messages and support requests are kept for the time needed to process the request and manage the relationship.

To limit abuse of the contact form, Skeellz records a salted hash of the sender's IP address, never the address itself, together with the targeted profile. These records only serve a rolling 15-minute limit and are purged automatically once it has passed.

When the user publishes their profile, the information they choose to make public may be visible to anyone with the link or browsing the website.

The user is responsible for the information they decide to publish and may edit or remove content from their management area when the feature is available.

Skeellz may use cookies that are strictly necessary for website operation, authentication, security and saving user choices.

Audience measurement, advertising or social media cookies that are not strictly necessary are only used with the user's consent where required by law.

If you reject optional cookies, we still measure audience anonymously with PostHog Cloud EU (Frankfurt), without cookies or browser storage: page views and product events are counted with a hash of the IP address and browser that PostHog computes on its servers with a salt deleted every day, so a visitor cannot be recognised from one day to the next. These events are not linked to your account, username or any other identifier, and no session recording is made.

Accepting optional cookies also enables PostHog session recordings. They are limited to the sign-up pages and the signed-in Builder and may include visible profile content, ordinary field values, images and interactions, including draft changes before publication. Password, email and phone fields and explicitly private elements are masked or excluded. Login, password reset and payment screens are excluded. You can withdraw your cookie consent at any time using Cookie settings in the footer; this stops future collection without affecting access to Skeellz.

Under the GDPR and the French Data Protection Act, the user may request access, rectification, deletion, restriction, objection to processing or portability of their personal data where these rights apply.

To exercise these rights, the user may contact Skeellz at contact@skeellz.com. Proof of identity may be requested where necessary to verify the requester's identity.

The user may also lodge a complaint with the CNIL if they believe their rights have not been respected.

Visit the CNIL website

Skeellz implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure.

Because no online service can guarantee absolute security, the user must also protect their login credentials and report any suspected unauthorized use of their account.

This policy may be updated to reflect changes to the service, providers or legal framework. The date shown at the top of the page identifies the applicable version.