Privacy Policy
Career Tones is an animated entertainment and career-education brand. The website is operated by SkillsterX FZ-LLC, a company in the United Arab Emirates. This policy explains what the site actually collects, why, and how to ask about your information. It is not a certificate that every privacy law has been audited.
Questions about this policy go to hello@careertones.com. The Terms and Conditions cover use of the site. Cookie Information lists the cookies by name.
Who operates Career Tones
The operator of this website is SkillsterX FZ-LLC. The public brand is Career Tones. The public contact is hello@careertones.com. The site is made in the UAE and is powered by SkillsterX.
A street address and a trade-license number are not published on this website. Privacy requests do not need either of those. Use the email address above.
Information you choose to send
The public site does not ask you to create an account.
The contact form collects your name, email address, inquiry category, subject, and message. Organization, telephone number, and a social profile or website link are optional. Categories include general questions, press, brand collaboration, episode sponsorship, partnerships, and feedback. A copy is emailed through Cloudflare Email to the verified destination that already receives hello@careertones.com. That destination address is not published. The message is also stored. If Cloudflare does not accept the email, the confirmation page says so and asks you to write to hello@careertones.com directly.
The story form collects your name, email address, story title, category, and the story itself. Telephone number and social handle are optional. Image uploads are turned off until private file storage is available, so the form does not accept a photo. The form stores whether you ticked the box allowing Career Tones to contact you about a possible adaptation, and that you confirmed you had read the submission terms and this policy.
You do not have to use either form to watch videos or read the character pages.
Technical information
When a story or contact message is stored, the site keeps a one-way hash of the network address used for that request. The raw address is not written into the submission record or the team inbox. The hash is used to slow repeated automated sends. The same kind of hash is used to rate-limit character votes.
The site does not keep a separate database of browser versions or device identifiers for ordinary page views. Cloudflare, which hosts the site, processes connection data as part of delivering and protecting the website. That can include a network address and ordinary request details.
A short confirmation cookie is set after a form is stored, so the thank-you page can show a real result. It is cleared when that page opens. Character voting uses a random browser id, described below. The private team area uses its own sign-in cookie. Visitors who never open that area do not receive it.
On a watch page, the site can remember the last episode slug in your browser’s local storage so “continue” can point at it. That value stays on the device. It is not sent as an account record.
Cloudflare Turnstile, a spam check, is loaded only if the operator has added Turnstile keys. Until those keys are set, the check is not shown and Turnstile does not run.
Why information is used
Information from the forms is used to read and reply to inquiries, to consider collaborations, sponsorships, and press requests, and to review stories as possible ideas. Voting information is used to count one favorite per browser and to show the public totals. Technical information is used to keep the forms and the vote from being flooded, and to confirm that a submission came from this website.
If visit measurement is later switched on, it is used only to understand which public pages are used. It is not required for the forms, the votes, or playback.
Legal bases
SkillsterX FZ-LLC is established in the United Arab Emirates. Where the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, applies to a particular activity, processing follows that law. This page does not say that compliance has been certified, and it does not claim that the EU General Data Protection Regulation or a United States children’s privacy statute has been assessed for this site.
Under that UAE law, personal data is processed with a person’s consent unless a listed exception applies. Sending a contact message or a story is consent to use that information for the purpose stated on the form: reading it, storing it, and replying. The optional adaptation box is a separate consent to be contacted about a possible adaptation. It is not consent to publish the story.
An inquiry about a collaboration or sponsorship is a request to start a conversation. It is not itself a contract. If a contract is later discussed, information needed for that discussion may be used for that purpose.
The network-address hash, rate limits, and spam checks are used to protect the website and the people who send messages. Some of that protection can also be required to meet a legal duty. The site does not rely on a general “legitimate interests” label of the kind used in European law.
If a UAE authority requires a record to be kept or disclosed, SkillsterX FZ-LLC may do so to the extent that law requires.
Email and marketing
Sending a form does not sign you up for promotional email. The site does not have a newsletter checkbox, and a contact message is not treated as permission to send marketing.
If the team replies, that reply is about the message you sent. If a separate marketing email is ever offered, it will ask for its own permission and will say how to stop it. That feature is not on the website today.
Contact messages and story notices are emailed through Cloudflare Email to the verified destination already used by Email Routing for hello@careertones.com. That send stays on the free routing path. It does not use a separate paid email product, and the destination address is not published. The confirmation page says whether Cloudflare accepted the email. A message you send yourself to hello@careertones.com uses the same routing.
Stories and images
Story text is stored so it can be reviewed privately. It is not published on the website because you submitted it. Image uploads are turned off. The story form does not accept a photo until private file storage is available. When that storage is connected later, an optional JPG, PNG, GIF, or WEBP file of 5 MB or less can be kept in a private bucket. It will not be placed on a public page.
Publishing a story, a name, a social handle, or an image in a way that identifies you needs a separate permission. The adaptation checkbox only means the team may contact you. A real adaptation needs its own written agreement. There is no promise that a story will be used, paid for, or credited.
Character voting
Choosing a favorite character stores a random id in a cookie named ct_voter. The database stores that id, the character, and the time of the vote. It does not store your name or email. One browser has one current favorite. Choosing someone else moves the vote. It does not add a second vote.
The cookie is HttpOnly and SameSite=Lax. On the public site it is also Secure. It is set for about 400 days. A hashed network address is used only to limit how often votes can be sent. Public numbers are counts of stored votes. They are not estimated and they are not a contest.
YouTube, Google, and sign-in
The public website does not ask visitors to sign in with Google. It does not receive your Google account, your YouTube login, or permission to publish videos on your behalf.
Episode pages show a thumbnail first. The thumbnail may be requested from YouTube’s image servers. The YouTube player itself is not loaded until you press play. Playback then comes from youtube-nocookie.com inside the page. From that moment, Google may process information about the playback under Google’s and YouTube’s own rules, which can include device and log data and, if you are signed in to Google in that browser, information associated with that session. Career Tones does not receive your YouTube account from that player.
Links such as Watch Now and Subscribe open YouTube in a new tab. Those pages are YouTube’s.
The website’s own servers may read the public Career Tones YouTube channel, using the public RSS feed and, if a server key is configured, the YouTube Data API. That sync builds the episode list. It does not connect a visitor’s Google account.
A separate, private production tool may later use Google or YouTube APIs so the team can publish videos. That tool is not part of this public website. If it is offered in a way that involves visitor data or a public OAuth consent screen, this policy will be updated first with the data actually used, the purpose, and how to contact the operator. No Google API scope is claimed here.
Cookies and analytics
The cookies in current use are described on the Cookie Information page: ct_flash for a form confirmation, ct_voter for a favorite character, and ct_admin for the private team sign-in. None of these is an advertising cookie.
Google Analytics is not loaded unless a measurement ID has been configured. The public site does not need one. If an ID is added, a notice asks you to allow or refuse measurement. The script is loaded only after you choose Allow measurement. That choice is saved in local storage on your browser under the key ct-consent. The tag is set to anonymize IP addresses. Choosing No thanks means Google Analytics is not loaded. Forms, votes, and videos still work.
Until a measurement ID is configured, the consent notice is not shown and no analytics cookie is set by this website.
Service providers
The site is built to run on Cloudflare. Pages are served from Cloudflare. Form records, votes, and the video catalog are stored in Cloudflare D1. Story images are not stored, because image uploads are turned off. Team notification email is sent with Cloudflare Email to the verified routing destination. Turnstile, when configured, is Cloudflare’s spam check. Cloudflare processes the information needed to provide those services.
YouTube and Google process thumbnail requests and, after you press play, the embedded player. Outbound links go to YouTube, Instagram, Facebook, and LinkedIn. Those services process your visit under their own policies once you leave this site or load their player.
Career Tones does not sell personal information and does not share story submissions with sponsors.
International processing
SkillsterX FZ-LLC operates from the United Arab Emirates. Cloudflare’s network, Google, and YouTube can process a request on infrastructure outside the UAE. A stored submission may therefore be handled outside the UAE because of the host and, after you press play, because of YouTube.
Where the UAE Personal Data Protection Law restricts a transfer, the transfer should meet that law’s conditions. This page does not name a specific Cloudflare region or a completed transfer assessment. Those details are still with the operator. Video playback remains subject to Google’s processing of the player.
How long information is kept
The website does not delete stories or contact messages on an automatic calendar. They are kept so the team can review them, reply, and handle a follow-up, until you ask for deletion or the operator adopts a written retention schedule. No fixed number of months is applied by the software today, so this policy does not invent one.
The form confirmation cookie lasts up to 30 minutes and is cleared when the thank-you page is opened. The vote cookie lasts about 400 days, or until it is cleared in the browser. The team sign-in cookie lasts up to 12 hours. Rate-limit counters are short operational records. Email attempt logs record whether a team notice was sent, skipped, or failed. They are not a public mailbox.
If you ask for deletion, the stored submission and any attached image that can still be matched to it will be removed, unless a legal duty requires a copy to be kept.
Security
Submissions are sent over HTTPS on the public site. Stored stories and messages are not shown on public pages. Image uploads are turned off, so the story form does not accept a photo. A honeypot field, a form token, same-origin checks, and rate limits reduce automated junk. The network address is stored only as a hash.
These steps reduce risk. They are not a promise that unauthorized access is impossible.
Your privacy rights
Where Federal Decree-Law No. 45 of 2021 applies, you may have the right to ask for access to personal data, correction of data that is inaccurate, and erasure, and to object to or restrict certain processing. Where processing is based on consent, you may withdraw that consent. Withdrawing consent does not undo a publication or a contract that was separately agreed, and it does not erase a record the law still requires.
Rights are subject to the exceptions in that law, including where a record is needed for a legal claim or a legal duty. This site does not offer a self-service download of your file. Requests are handled by email.
How to make a request
Email hello@careertones.com. Say whether you want a copy, a correction, or deletion, and include the email address you used on the form so the record can be found. A vote has no name attached. To drop a favorite, clear the ct_voter cookie in your browser or choose a different character, which moves the single vote.
The team will respond within the time the applicable law requires. This page does not promise a shorter deadline than the law sets.
Younger viewers
Career Tones is animated entertainment about students, careers, and everyday mix-ups. Younger people may watch it. The website is not built as a service for young children, and the forms are not designed to collect a child’s personal information.
Where UAE law requires a guardian’s consent before a child’s personal data is processed, this website does not collect that consent. Do not use the forms to send a child’s name, contact details, image, or story. If a parent or guardian writes to hello@careertones.com about a child’s information, the matching submission will be deleted where it can be found.
This policy does not set a site-wide minimum age, and it does not claim compliance with a child-specific statute that has not been reviewed for this audience.
Other websites
Links to YouTube, Instagram, Facebook, and LinkedIn leave Career Tones. Embedded playback is YouTube’s once you press play. Those sites have their own privacy rules. SkillsterX FZ-LLC does not control them.
Changes
If the forms, storage, analytics, or a Google publishing tool change what this site does with personal information, this page will be updated and the effective date will change. The date at the top is the date of this version.
Contact
SkillsterX FZ-LLC, operator of Career Tones.
Email: hello@careertones.com
Website: https://careertones.com