Your data,
locked down
SOULLESS is a crew, not a data business. We keep the minimum we need to run the members’ area, we protect it properly, and you can take it with you or wipe it whenever you like.
Who is responsible
The data controller for soullesscrew.com and the SOULLESS members’ area is Andress Emans, NIE Y5808328Z, Madrid, Spain. Contact: [email protected].
We process your data on the basis of your consent when you join (and, for crew news, only if you opt in). You can withdraw it at any time by deleting your account or unticking the news box.
What we store
| Data | Why | Who can see it |
|---|---|---|
| To send your log-in codes and, only if you tick the box, crew news. | Encrypted. Never shown to other members. | |
| Name & member number | Your card and how the crew knows you. | Logged-in members. |
| Photo, city, about | Optional, for your profile. | Logged-in members. Hidden if you turn off “Show me in the members list”. |
| Plans & replies | The community board. | Logged-in members. |
| Private messages | Conversations between two members. | Encrypted. Only the two people in the conversation can open them in the site. |
How it’s protected
- Encryption at rest: emails and private messages are encrypted with AES-256 before they are saved. A copy of the database on its own is unreadable.
- No passwords: you log in with a 6-digit code sent to your email. It expires in 10 minutes and only allows 5 tries. Codes are stored as one-way fingerprints, never as the code itself.
- Secure sessions: one essential cookie keeps you logged in. It can’t be read by scripts, only travels over HTTPS and only works on soullesscrew.com. A few display preferences (like the last tab you opened) are remembered in your own browser.
- HTTPS everywhere, strict browser security rules and protection against other sites acting on your behalf.
- Limits against abuse: repeated attempts are slowed down and blocked automatically.
- You’re in control: block any member, hide your profile, sign out on every device at once.
What we never do
- No advertising, no tracking pixels, no analytics cookies.
- We never sell or share your data.
- We will never ask you for your log-in code. Don’t share it with anyone.
Your rights
From Community → Your profile → Privacy & security you can:
- Download my data: everything stored about your account, including your private messages, in one file.
- Delete my account: removes your member number, profile, photo, plans, replies and every conversation you’re in. It can’t be undone.
- Unsubscribe from crew news by unticking the box in your profile, or by writing to us.
For anything else, or to make a request under the GDPR, email [email protected]. You can also complain to the Spanish data protection authority (AEPD, aepd.es).
Who helps us run it
The site, the database and the members’ area run on Cloudflare. Log-in codes are sent through Resend. The shop is separate and run by Shopify under its own privacy policy.
Your data stays for as long as your account exists. Log-in codes disappear after 10 minutes and sessions after 90 days.