Privacy policy

• Account data — your name, email address and a hashed password (we never store it in readable form), and whether you've confirmed your email.
• Profile — the display name, handle, bio, avatar and links you choose to add. These are public.
• Activity — the campaigns and funds you create, back, contribute to, bookmark, comment on or vote on; the creators you follow; updates and comments you post; and reports you file. Comments, updates and project pages are public; backers and contributors are shown only as counts, not by name.
• Date of birth — only if you turn on 18+ projects, to check you're 18 or older. It's never shown to anyone, and you can change or update it on your profile.
• Guest pledges — if you back a campaign without an account, the name you give and, if you add one, your email, so we can send your receipt and tell you the outcome.
• Payments — amounts, currencies and status. Card details go straight to the payment provider; we never see or store them.
• Sign-in sessions — when you sign in, we record the session's IP address and browser (user agent) to keep your account secure.
• Page views — how many times each campaign page is viewed per day, and which site sent the visit (such as a search engine, or a link tagged by the creator). These are counts only: no cookies, and nothing that identifies you. If you pledge, the pledge records that same source so the creator can see what brought backers in.

• To run the service you asked for — your account, pledges, contributions, votes, and AI credit (performance of a contract).
• To send emails that belong to it: email confirmation, password resets, receipts, campaign outcomes, and updates from campaigns you back (contract; updates on our legitimate interest in keeping backers informed).
• If you leave them switched on: reminders when a campaign you bookmarked is about to end, news when a creator you follow launches something, and replies in comment threads you're part of (legitimate interest). Each of these emails has an unsubscribe link, and you can switch them off on your profile.
• To show 18+ projects only to adults who've asked to see them (your consent, which you can withdraw by switching them off).
• To keep Slopstarter safe — preventing fraud and vote manipulation, and moderating reported projects (legitimate interest).
• To keep financial records we're required to keep (legal obligation).

We don't sell your data, and we don't use it for advertising.

• Payment provider — processes your payment; its own privacy policy applies.
• Email provider — delivers the emails we send you.
• OpenAI and Anthropic — when a creator receives AI credit, we set up a spend-capped project or workspace with the provider. We share only what's needed to create it, not backers' data. What a creator sends to the model is between them and the provider.
• Hosting providers — store the site's database and uploaded images.
• Creators — see the updates and comments on their own projects. They don't get backers' email addresses.

Exchange rates come from ExchangeRate-API; we fetch them on our side, and no personal data is sent. We may also disclose data where the law requires it. Some of these providers may process data outside your country; where that happens we rely on appropriate safeguards such as the EU standard contractual clauses.

We only use what's needed for the site to work — no analytics or advertising cookies.

• A session cookie that keeps you signed in, removed when you sign out or it expires.
• display_currency — remembers the currency you chose to see amounts in, for up to a year.
• A flag in your browser's local storage that remembers you've seen the "what is AI credit" introduction.
• While a tab is open, its session storage remembers that a campaign page was already counted today and which site sent you there, so a view is counted once and a pledge can be credited to that source. It's cleared when you close the tab.

We keep account and profile data while your account exists. When you delete it, we delete or anonymize your personal data, except payment and ledger records, which we keep for as long as tax and accounting law requires. Guest pledge details are kept for the same period as the pledge's payment records.

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Email [privacy@your-domain.example]; we'll answer within a month. You can also complain to a data protection authority — for us, [Name of your data protection supervisory authority].

Slopstarter isn't meant for children, and you must be an adult to create an account.

If we change this policy in a way that matters, we'll tell you by email or on the site. See also our terms of service and legal notice.