Privacy
This describes exactly what Galabada keeps about you. It is short because we keep little: there is no advertising here, no third-party tracking, and nothing about you is sold or shared for marketing.
Who is responsible
Galabada is operated by Mosaic. For anything in this document, write to team@mosaic.business.
Your identity lives elsewhere
Your account is a Chakloon account. Your email address, your password and your name are held by Chakloon Passport, the identity service shared across Chakloon products. Galabada never receives your password, and it does not store your email address at all.
What Galabada stores
- Your profile: your Chakloon account identifier, the display name and avatar link that come with it, your interface language, your role in the service, and the times your profile was created, updated and last seen.
- Your library: liked tracks, followed artists, and playlists you create, with their contents.
- Your listening history: which track, when, how many milliseconds were played, and whether it came from the web or an app. Playback is only recorded after twenty seconds, so skipping through a queue does not fill your history.
- A sign-in cookie (see below).
That is the whole list. We do not build advertising profiles, and we do not attempt to identify you across other sites.
Cookies
galabada_session— keeps you signed in. It holds your Galabada profile identifier and a signature, is not readable by scripts, and lasts thirty days.galabada_pkce— a ten-minute technical cookie used only if you sign in through Chakloon Passport directly. It is deleted the moment sign-in finishes.
Both are strictly necessary for signing in. There are no analytics or advertising cookies, which is why Galabada does not ask you to accept anything.
Server logs
Our web server writes ordinary access logs, which include IP addresses, for security and diagnostics. They rotate and are kept for about fourteen days.
Why we are allowed to hold this
- To provide what you asked for: your profile and library exist because you created an account and used it. Without them the account has no meaning.
- Our legitimate interest: keeping the service running, secure and free of abuse, and understanding in aggregate what is being listened to.
Where it lives
On servers and object storage in Germany. The catalogue audio and images are stored with our hosting provider; the database runs on our own server.
Who else sees it
Chakloon Passport, as the identity service behind your account. Our hosting and storage provider, as infrastructure. Nobody else. We do not sell data, and there are no advertising or analytics networks embedded in this site.
How long we keep it
Your profile and library for as long as your account exists. Listening history until you ask us to erase it or your account is deleted. Server logs about fourteen days.
Your rights
You can ask us to show you what we hold, correct it, erase it, restrict or object to how it is used, or hand it to you in a portable form. You can also complain to a data protection supervisory authority.
How to exercise them: write to team@mosaic.business from the address on your Chakloon account, or tell us your @handle. We answer within a month.
Deleting your Galabada data is currently done by us on request — self-service deletion in the interface is being built, and we would rather say so than pretend otherwise. Deleting your Galabada profile does not delete your Chakloon account, which is shared with other products and is managed in Chakloon Passport.
Children
Galabada is not directed at children under sixteen, and an account requires a Chakloon account. If you believe a child has an account here, write to us and we will remove it.
Changes
The current version always lives at this address with its effective date at the top. If a change materially affects you, we will say so on the service.
See also Terms of use.