FDBK

    Security

    How FDBK handles your account, your audio and your data — and how to report a problem or an incorrect security warning about fdbk.studio.

    What this site is

    FDBK is a music promo and demo platform. Labels and artists share unreleased tracks with DJs and A&Rs through private links, and receive structured feedback. There is no file sharing with the general public, no downloads of third-party software, and no executables served from this domain.

    No ad or tracking scripts

    We do not load advertising networks, ad exchanges, affiliate scripts, crypto miners or third-party tracking pixels on this site. Pages are served as static assets plus a single JavaScript application bundle from our own domain.

    Third-party services we do use

    • Application backend (database, authentication, file storage and serverless functions), hosted on Supabase infrastructure.
    • Google Fonts for typography, loaded non-blocking.
    • Google Sign-In (OAuth 2.0), only when you choose “Continue with Google”.
    • Transactional email for sign-up confirmations, password resets and promo notifications.
    • Stripe for subscription payments. Card details are entered on Stripe’s own checkout and never reach our servers.

    Accounts and access

    • All traffic is served over HTTPS with HSTS enabled.
    • Passwords are hashed by our authentication provider; we never see them.
    • Every database table is protected by row-level security, so a signed-in user can only reach their own workspace’s data.
    • Audio files live in private storage buckets and are served through short-lived signed URLs, or through the token in a promo link.
    • Promo and demo links can be revoked by the sender at any time.

    Email

    Emails we send link directly to https://fdbk.studio/ — we do not use redirect or link-shortening hops. Every promo email includes a one-click unsubscribe.

    Reporting a vulnerability

    Email info@fdbk.studio with steps to reproduce. We aim to acknowledge within two business days. Please do not run automated scanning that degrades the service for other users, and do not access other people’s data. Our machine-readable contact lives at /.well-known/security.txt.

    Incorrect security warnings

    If an antivirus, VPN, browser or DNS filter shows a warning for fdbk.studio, or a page loads blank because part of it was blocked, email info@fdbk.studio with the name of the tool and a screenshot. We treat these as false positives, will supply the vendor with the full list of domains the app contacts, and will chase the re-review.