Privacy Policy

1) Controller

The controller of your personal data under the GDPR is DJ Uninen (private individual), Finland.

Address: Slipmat.io, Prosessikatu 1 B, Naantali, Finland

Contact: slipmat@slipmat.io

2) What we collect

Account data. Your email address, and either a password (stored hashed) or a sign-in with Apple or Google. Plus anything you choose to add to your profile, such as a display name, artist details, and photos.

Content you create. Events, chat messages, song requests, uploaded files, and other things you post or stream through Slipmat.

Technical data. Your IP address and standard server logs, plus automatic error reports when something breaks.

3) Signing in with Apple or Google

If you sign in with Apple or Google, we receive basic account information from them, such as your email address, so we can create and identify your account. We do not get access to your contacts and we never post anything on your behalf.

4) Why we use it, and our legal basis

To provide the Service — running your account, events, etc. Legal basis: performance of a contract.

To keep it working and secure — server logs, error reports, and abuse prevention. Legal basis: our legitimate interest in a reliable, safe service.

To email you — service messages such as password resets and notifications you enabled. Legal basis: performance of a contract, or your consent for anything marketing-related, which you can withdraw at any time.

5) Analytics

We use ethical analytic service Plausible for site analytics. It is cookieless, does not track you across other sites, and does not collect personal data. We do not use advertising or profiling trackers.

6) Who else processes your data

We share data only with the service providers we need to run Slipmat, and only for that purpose. They act as our processors under contract, and may not use your data for their own purposes:

• Backblaze B2 — file and media storage
• Mailgun — sending email
• Mailchimp — mailing list for the emails you subscribe to
• Sentry — automatic error reports
• Plausible — cookieless analytics
• Stripe — payments, if and when you buy a paid feature

Some of these providers are located outside the EU/EEA. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

We never sell your personal data, and we do not share it with advertisers or data brokers. We may disclose data if the law requires it.

7) Cookies

We use a session cookie to keep you signed in. It is required for the Service to work, so it is not something you opt into separately. Our analytics do not use cookies.

8) How long we keep it

We keep your account data for as long as your account exists. When you delete your account, we delete your personal data, except anything we must keep by law, such as accounting records. Technical logs and error reports are kept only as long as they are useful for security and debugging.

9) Your rights

Under the GDPR you have the right to access your data, correct it, delete it, take it elsewhere, restrict or object to how we use it, and withdraw consent you have given. Your account page has easy to use data exporting and account deletion mechanisms in place.

If you think we are handling your data wrongly, you can complain to your local data protection authority.

10) Changes

We may update this policy. Material changes will be posted here with a new “Last updated” date.

11) Terms

The rules for using Slipmat are in our Terms of Service.