Privacy.

Datenschutzerklärung · as of 6 Oct 2026

1. Who is responsible

Javier Fandos, Berlin, Deutschland, hello@slopcore.live.

2. What we store, and why

• Log in with X (only if you want a page): your X ID, @handle, display name, profile picture, bio and follower count (public data from X). Purpose: to link your page to you. Legal basis: Art. 6(1)(b) GDPR. We never get or store a password.
• Your page: what you enter (links, songs, texts, colors, photo). Public while your page exists.
• Cookie sl_s (30 days): only for log in. Strictly necessary (§ 25(2) TDDDG), so there is no cookie banner.
• Player without an account: nothing is stored; the link itself holds the songs. Your browser remembers pasted links locally (localStorage) so you don’t paste them again.
• “Tell me when it is ready”: if you leave your X @ or your email, we keep it (with your country and the time) only to let you know when pages open. Write to hello@slopcore.live to have it deleted.
• Log in problems: when you log in with X we count each step and, if something fails, we note the step, the reason and the kind of browser (for example “iOS · Safari”), never your name or IP address. Purpose: to fix errors. Kept for the last 100 problems only.
• “Get your page” preview (no account): if you type an @ to see a preview, we note that @, your country and the time, without your IP address. Purpose: to see what is used. No page is created from it.
• Saved lists (＋ Save): only video, title and author, tied to your account.
• Talk to Claude / Report: what you write, and optionally your @. Purpose: fix bugs and check content. Kept at most 12 months.
• Statistics: DataFast, no cookies, no cross-site tracking. Plays/likes are counted without personal data (a daily anonymous hash to stop abuse).

3. Service providers

Vercel Inc. (hosting), Upstash (database), X Corp. (log in, embedded videos), Google/YouTube (embedded videos via youtube-nocookie.com), Ko-fi (tips; their own privacy policy). Some are in the USA (standard contractual clauses). Embedded X/YouTube videos load content from those providers when you play them.

4. Your rights

Access, correction, deletion, restriction, portability, objection (Art. 15–21 GDPR), and a complaint to a data protection authority (Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit). Delete your page yourself in the editor (“Delete my page” removes all your data), or write to hello@slopcore.live.

5. Retention

As long as your page exists. Logs and reports at most 12 months.