Privacy policy

Last updated: October 2026

The short version: you don't need an account to browse the library, we don't use tracking or advertising cookies, and we only keep your details if you contact us or create an account.

Who we are

The Step Sequencer Library is run by Kill Signal Studios, which is the "controller" of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018). For anything about your information, use the contact page or email .

When you browse the site

You can use the library without signing up or telling us anything. We don't use analytics, advertising or tracking cookies, and we don't build profiles of visitors.

Like every website, the services that host the site receive technical information when your browser asks for a page or file: your IP address, browser type, the page requested and the time. They use it to deliver the site, keep it secure and fix problems, and keep it only for a short time. These services are:

• Vercel, which hosts the website;
• Supabase, which stores the library and serves its pictures and PDFs.

Fonts and everything else the pages need come from our own site, not from third parties such as Google.

If something goes wrong on a page, your browser sends us a short error report so we can fix it: the page address, the error message and your browser type (for example "Safari on iOS"). It doesn't include your IP address or anything you've typed, and reports are deleted after 90 days at most.

When you contact us

If you use the contact form or email us, we receive your name, email address, and whatever you write, including any set you mention. We use it only to read and reply to your message, and, for takedown requests, to deal with the request and keep a record of it.

We keep messages for up to 12 months after we've dealt with them, then delete them. We keep takedown requests for up to 3 years, in case the same question comes up again.

Our legal basis is our legitimate interest in answering messages and running the library properly. For takedown requests, it's also to meet our legal obligations.

Accounts

Anyone can create an account, to keep MOCs in a library of their own. Designers and the people who run the site have accounts too. If you have one, we hold:

• your email address, and how you sign in (a password, Google or Discord);
• the name, profile address, picture, links and "about you" text you choose for your profile;
• the reviews you write (stars and words), and any reviews you report, with your reason;
• your role (designer, member or admin), and when you last signed in;
• which MOCs are in your library, and when you added them;
• if you buy a MOC: what you bought, the price, when, your country, and Stripe's reference for the payment. Stripe takes the payment and holds your card details; we never see them;
• if you're a designer who sells MOCs: your Stripe account reference and whether it can be paid. Stripe collects your identity and bank details itself, under its own privacy policy.

If you sign in with Google or Discord, they tell us your name and email address; we never see your password for them. Passwords you set with us are stored only in scrambled (hashed) form. We use these details to run your account and, for designers, to credit you on your designs. Your profile (display name, address, picture, links and "about you") is public, and so are your reviews, with your name and picture beside them. So are the MOCs designers publish, with their names, descriptions and the date they were published. Your email address is never shown. Members' pages are kept out of search engines; reports of reviews are seen only by the people who run the site.

Accounts are stored by Supabase, our database host. Signing in keeps you signed in with one cookie and some browser storage, both strictly necessary for your account to work; people who don't sign in don't get them. Our legal basis is running the account you asked for. We keep your details until your account is closed: to close it, or get a copy of your details, contact us.

Who we share it with

We don't sell your information or share it for marketing. It's handled for us by the hosting services above, which act on our instructions. They may process it outside the UK, including in the United States. Where they do, it's protected by the safeguards UK law requires, such as the UK-US data bridge or the UK International Data Transfer Addendum. We may also share information where the law requires it.

Payments go through Stripe, which takes the payment, checks for fraud and, for designers, checks identity and pays them. We keep records of sales for six years, as UK tax law requires, even if you close your account.

Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct it, or to delete it;
• object to how we use it, or ask us to limit it.

To do any of these, contact us. We'll reply within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put it right first.

Children

The library is for builders of all ages, and you can browse it without giving us any information. If you're under 13, please ask a parent or guardian before you contact us.

Changes

If we change how we use information, for example if we add visitor statistics, we'll update this policy first and change the date at the top.