Your practice, your data.
SHF CLUB exists to support your practice — not to watch you. We keep only what makes the practice work: your log, your hero, your circles. No ads, no selling, no cookies for analytics.
Last updated: November 13, 2026 · Applies to shf.club and the SHF CLUB apps
Who runs SHF CLUB
SHF CLUB came into being through No Self Labs. We are responsible for your data (the “controller”). Questions, requests or worries: hello@shf.club.
Your voice
In Voice mode the microphone is used only to recognise three words — “see”, “hear”, “feel”. Recognition runs entirely on your device (an offline speech model loaded into the page or app). Audio is never recorded, stored or sent anywhere — not to us, not to anyone. Only the count of each label is kept. Silent mode doesn’t use the microphone at all.
Without an account (guest)
You can practice forever without signing up. Your sits, level, hero, pact and settings stay in your browser’s local storage (or the app’s storage) on your device. We never see them unless you later sign in and choose to carry them over. Clearing your browser data or uninstalling the app removes them.
What we store for members
| What | Why |
|---|---|
| Email address | Sign-in codes and links; emails you switched on (circle sit reminders, the monthly letter). Never shown to anyone. |
| Pseudonym, optional bio, hero, wardrobe | Your profile. Visible to members of your circles and, if you allow it, on the leaderboards. |
| Time zone and your settings | So your day, streak and sit times are counted in your own time. |
| Practice log: start and end time, length, the three label counts, solo or together, voice or silent, room code, XP | Streaks, levels, badges, the calendar, circle and leaderboard numbers. Never audio, never what you noticed. |
| Circles: names, descriptions, members, scheduled sits, who’s coming | So you can practice with others. Seen only by the members of that circle. |
| Your pact, if you make one: what you want more of, days a week, length of a sit, your cue (“After I …”), the nudge time, start and end date, paused or not | To show your week and to nudge you at the time you chose. Private: only you can read it, unless you choose one friend as its witness: they then see the pact sentence and how many days of your week are done, never your reason. Nobody in your circles, on the leaderboards or anywhere else sees it. Change, pause or remove it any time in your profile. |
| Friends: who you are friends with, requests you sent or received with their one-line message, who may send you requests, your invite code, people you blocked | So you can practice alongside people you know. A friend sees your pseudonym, hero, level, streak, whether you sat today and the thread you share. Nobody sees your list of friends, and nobody but you sees your settings, your invite code or your blocks. A declined request's message is deleted at once. |
| Echoes, if you leave them: one of four words for how a sit was, an optional line, the day | Shown to your friends and the people in your circles, after they sat themselves that day. No public feed. You can remove yours; a circle's owner can remove a line in their circle. |
| Tea time: lines you write in the chat around a planned circle sit or a world sit | Seen by the members of that circle (world sits: by signed-in members), under your pseudonym. The chat closes 10 minutes after the sit and its lines are deleted within a day. |
| Sparks you send or receive, a witness you choose for your pact, a rhythm partner if you ask for one | To let friends support each other's practice. Only the two people involved see them. |
| Your weekly answers (“where did practice show up?”): what you tapped and an optional line | Private: only you can read them. We count how many people tapped each answer; the lines are never read. |
| When you last changed your hero, and the hero before | So your sits count for the right hero group (a change counts from the next Monday). Hero group scores are totals per hero, never per person. |
| Which reminder emails and notes were sent to you (kind, channel, time) and whether you sat within a day after one | So you never get the same message twice, never more than one a day or three a week, and so we can count whether these notes help people practice. Counted as totals only; deleted with your account. |
| Your notification choices, including “Pause all messages” | So we only send what you asked for. |
What we count for everyone
To see whether SHF CLUB actually helps people practice, we count visits and sits without cookies and without storing IP addresses. Each visitor becomes a scrambled code that changes every day, so nobody can be followed from one day to the next. With it we keep only the page, where you came from, country, phone or computer, and the length and type of the sit. We also count which features are used, as plain counts with no name attached: for example "poster saved", "radio opened", "listened to the radio for a minute", "sign-in email sent", and a rough bucket for how long ago this browser first visited (worked out on your device). Browsers of the SHF team are marked so we can leave ourselves out of the numbers.
We also use PostHog in cookieless mode to count page views, practice starts and completions (length, solo/together, voice/silent, microhit and total label count, and whether it happened in the app or on the website), and circle creation, joining, scheduling and RSVP actions. We also count page departures, time on the page and scroll depth, and measure page speed, visual stability and interaction responsiveness (FCP, LCP, CLS and INP). Requests are forwarded through shf.club to PostHog; this does not add cookies or account identification. Web Vitals include metric values, not DOM elements, page text or resource-attribution details. We send no account ID, email, pseudonym, circle name or code, chat text, audio, or URL query strings and fragments. Session recording, automatic click capture and error/log collection are disabled. PostHog stores no analytics identifier in cookies or browser storage; it uses a daily-changing server-side hash to estimate visitors. Network addresses are processed for delivery and hashing but are not included as event properties.
Our host also keeps aggregate traffic numbers (Netlify Analytics) and short-lived technical server logs, which include IP addresses, for security and fixing errors.
SHF Radio chat
If you write in the #radio chat we keep your chat name, the text and the time for up to 7 days. To stop spam and enforce mutes we also keep, with each line, the random code of your browser (or your account for members) and your network address — neither is ever shown to others. Who is listening right now is shared live and not stored.
Where your data lives and who helps us
We use a few trusted services to run SHF CLUB. They process data only on our behalf:
- Supabase — database and sign-in. Data stored in the EU (Frankfurt, Germany).
- Netlify — hosting, server functions and traffic counts.
- PostHog — cookieless product analytics, hosted in the US. Analytics is not linked to your SHF account.
- Resend — sending emails (sign-in codes, reminders, the letter).
- Google Firebase Cloud Messaging — delivers notifications to the Android app, only if you turn them on. It gets a random device token and the notification text, never your email or practice log.
- Google Fonts — the typefaces are loaded from Google, which sees your IP address when they load.
- Google Play / Apple App Store — if you install the app, the store handles the download under its own privacy policy.
Some of these companies are based in the US; transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
Why we’re allowed to (legal basis)
Running your account and practice features is the service you asked for (contract). Emails like the monthly letter and reminders are based on your consent — switch them off in your profile any time. The anonymous counter and security logs are our legitimate interest in keeping the site safe and useful.
How long we keep it
- Account and practice log — until you delete your account.
- Your pact — until you remove it or delete your account. The “nudged today” marker is kept for two days under a scrambled code.
- Friendships, requests and blocks — until you remove them or delete your account (deleting your account removes them for both sides). A rhythm-partner pairing ends by itself after two weeks.
- Sparks — who sent one to whom and when it was caught, until either account is deleted.
- Echoes — shown for two days; stored until you remove them or delete your account.
- Tea-time lines — deleted within a day after the sit they belonged to.
- Your weekly answers — until you delete your account.
- Radio chat lines — up to 7 days.
- Anonymous visit and sit counts — kept as statistics; they can’t be linked to you.
- Server logs — a few days, set by our host.
Delete your account
We immediately and permanently delete your sign-in, profile, practice log, badges, wardrobe, RSVPs and circle memberships, and remove you from the monthly letter list. Circles you own are handed to the longest-standing member; circles where you were the only member are deleted; sits you scheduled in shared circles stay, so others can keep sitting. Your #radio chat lines as a member are removed too (guest lines expire within 7 days). This can’t be undone.
Can’t sign in any more? Email hello@shf.club from the address of your account and we’ll do it for you.
Your rights
You can ask for a copy of your data, correct it (most of it you can edit yourself in your profile), delete it, restrict or object to its use, and take it with you. Write to hello@shf.club — we answer within 30 days. If you’re in the EU/EEA or UK, you can also complain to your local data protection authority.
The app
The SHF CLUB app for phones is the same SHF CLUB with the same rules. It asks for the microphone only for Voice mode (recognised on your device, never recorded), and for notifications only if you want sit reminders. It contains no ads or advertising ID. The same cookieless PostHog analytics described above applies in the app too.
Children
SHF CLUB is not meant for children under 13, and we don’t knowingly create accounts for them. If you think a child made an account, write to us and we’ll delete it.
Changes
If we change this page in a way that matters, we’ll update the date at the top and tell members in the app or by email before it takes effect.