Privacy

Sleeves has no accounts and no ads. Here’s everything it stores, everything it sends elsewhere, and what it counts.

In your browser

Your grid, your poster settings, My Grids and your light or dark choice are saved in this browser’s storage on your device. They aren’t sent to our server unless you create a share link. Clearing this site’s data deletes them, so export grids you want to keep.

Sleeves used to live at sleeves-grids.fly.dev. If you press Move my grids there, your saved grids pass through our server to reach this address: they’re held in memory under a one-time code, deleted the moment this address collects them, and deleted anyway after 10 minutes.

When you search or play a preview

• Apple Music and MusicBrainz are searched directly from your browser, so they see your IP address and what you searched for, as with any website.
• Deezer searches, pasted links (Spotify, Apple Music, Deezer, Bandcamp, MusicBrainz) and tracklists go through our server, so those services see our server, not you.
• Album covers load from those catalogs, and 30-second previews stream from Apple or Deezer.
• Fonts load from Google Fonts.

Share links

When you create a share link, we store the poster image, its title and subtitle, the album list with favorite songs, and its design. Anyone with the link can see it. Links aren’t listed anywhere, but they aren’t secret either, so don’t put anything private in a poster.

Albums from shared posters are also counted, without any link to you, for the “On everyone’s shelf” list.

Anyone can report a shared poster from its page. Reports store the poster’s link, the reason and the time. We remove posters that break the rules.

What we count

We count page views and a few actions, like starting or finishing a grid, downloading, sharing and remixing, so we know what’s working. Only the counts are kept.

• No cookies and no third-party analytics.
• To count each visitor once a day, your IP address and browser are mixed with a random value that changes every day and turned into a code that can’t be reversed. The day’s codes are deleted the next day. Your IP address itself isn’t stored.
• If your browser sends Do Not Track or Global Privacy Control, nothing is counted.
• If the site hits an error in your browser, it sends the error message, which page and your browser’s name and version, so we can fix it.

Limits and logs

To stop abuse, our server keeps IP addresses in memory for up to an hour to limit how many share links and reports one address can make. Our host, Fly.io, keeps standard server logs.

Last updated October 2026.