Privacy

Who runs Slopcharts

Slopcharts is operated by Basel Capital AG. For privacy questions, access or correction requests, contact [email protected].

This page describes the current beta implementation. It is a draft and has not been represented as legally approved. The service and creator-content notices are on About.

Your account and public identity

We store your email, its verification status, sign-in sessions and your public handle, display name and bio. Your email and session details are private. Your public profile, eligible publications, public credits and scores can be seen by other visitors.

Email-change requests temporarily retain the previous and proposed addresses and a verification-token hash. Requests expire after 15 minutes; records are removed after 30 days, except completed changes awaiting their security notification.

Optional agent access uses scoped tokens. We store token hashes, not reusable plaintext tokens. Revoking access prevents future authenticated requests; associated security and action records are retained for auditing.

Videos and credits

Uploads and processed previews stay private until you publish. We store source media, renditions, thumbnails, captions, metadata and processing status. Contributor contact emails are private. Public eligibility also depends on airtime, removal, suspension and moderation decisions.

Private media grants expire within ten minutes. An already issued asset link may remain usable until it expires after you remove a publication. Public sharing services may independently cache a thumbnail or preview.

Off-air media is recoverable for 30 days. Trash is recoverable for seven days. Discarded drafts are purged after 30 days. Failed storage cleanup retains the associated accounting until deletion succeeds. Minimal historical publication and vote records remain for honest lifetime scores and unavailable-content notices.

Discovery, cookies and device storage

Session cookies keep you signed in. A first-party guest discovery cookie lasts up to 90 days; we store a keyed hash of its identifier. Playback observations include visible watch time, completion and skips, used for discovery and aggregate view counts. They do not award likes or extend airtime.

Raw playback observations expire after 30 days and feed sessions after two hours. Aggregate counts remain. Explicit hidden-creator choices remain until removed; resetting inferred interests does not remove your likes or hidden creators. Rate limiting uses short-lived keyed IP hashes rather than storing raw addresses in those counters.

Your device remembers presentation settings such as mood and mute. Upload recovery identifiers and account-scoped pending edits may be stored locally. Pending edits expire after seven days; logout clears private recovery state without deleting server drafts. Signed media URLs and authentication tokens are not stored as upload-recovery identifiers.

Diagnostics, security and notifications

Upload diagnostics record stages, part sizes, confirmed bytes, timings, retries and safe error references. Browser-reported online status and coarse browser/OS details help investigate failures. They do not include file contents, local filenames, passwords, cookies, signed URLs or contact emails. Detailed upload diagnostics are retained for 30 days and privileged audit records for one year.

Processing-result email is optional and off by default. Sign-in, requested email verification and account-security notices are operational messages. Email delivery uses Resend; local development tests use captured email without sending to the public internet.

Hosting and access

Hetzner hosts the application, database and private media storage. Cloudflare proxies the public website. Better Stack checks service availability independently. Authorized platform staff can investigate reports and service failures; private-media access requires owner authorization, a reason and an audit record.

Encrypted database backups retain seven daily and four weekly copies, with additional pre-migration backups. Removed data can remain in retained backups until their retention period ends. Backup decryption material is kept separate from the application.

Your controls

Account lets you edit your display name and bio, manage agent access and optional notifications, and request content removal. Removing uploads keeps the account; withdrawing a genuine handle-based author credit preserves the uploader’s private media and historical scores. These actions do not silently delete your account.

For requests beyond the available controls, email the privacy contact above. We may need to verify that a request comes from the account holder before disclosing or changing private information.