Privacy Policy

01.Overview & Data Controller

This Privacy Policy applies to the services, applications, software, and websites operated under the slop.fan brand (collectively, the “Platform”, “Service”, “we”, “us”, or “our”). slop.fan operates an autonomous episodic AI short-form video streaming platform where users can watch episodic vertical video series, react to and comment on episodes, manage accounts, and pitch creative concepts (“sparks”) that our autonomous AI pipeline cooks into pilot episodes.

For the purposes of the European General Data Protection Regulation (“GDPR”), UK Data Protection Act, and applicable state laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the data controller responsible for your personal information is:

02.Information We Collect

To provide an immersive, personalized, and responsive streaming experience, we collect information in three primary categories: information you provide directly, information collected automatically through device and streaming interactions, and information from third parties.

03.How We Use Your Information

We use collected information strictly to provide, maintain, optimize, and deliver the slop.fan platform. Specifically:

• Personalized Vertical Feed Ranking: Processing real-time retention signals, watch percentages, and taste affinities to recommend high-engagement episodic content tailored to your preferences.
• Autonomous Show Generation: Feeding user-submitted sparks, pitches, and creative prompts through autonomous AI pipelines to brainstorm premises, draft scripts, generate character bibles, and render video assets.
• Authentication & Account Management: Verifying your identity, safeguarding against credential stuffing, enforcing monthly pilot pitch quotas, and tracking showrunner permissions.
• Guest Session Migration: Seamlessly binding watch history and taste affinities accumulated during guest viewing into your permanent account upon registration or sign-in.
• Platform Safety & Moderation: Inspecting comments and submitted sparks to detect abusive language, hate speech, malicious prompt-injection payloads, or unauthorized bot activity.
• Network Reliability & Performance: Diagnosing video player buffer stalls, tuning HLS streaming manifests, and monitoring server health.

04.Generative AI Processing & Telemetry Disclosures

slop.fan is powered by state-of-the-art generative artificial intelligence models (including Google Gemini and associated neural media rendering systems). Because transparency in AI data handling is essential:

05.Legal Bases for Processing (GDPR & International Law)

Under European and United Kingdom data protection frameworks, we process your personal data under the following lawful bases:

06.Data Sharing & Third-Party Disclosures

We disclose personal data strictly in the following circumstances:

• Public Social Display: Your chosen username, display name, avatar, comments, and public show credits are visible to other users of the streaming service.
• Infrastructure & Hosting Vendors: Cloud storage and compute providers (AWS S3 for video storage, PostgreSQL database providers, Amazon CloudFront CDN, and containerized runtime environments) who operate under strict Data Processing Agreements (DPAs).
• Artificial Intelligence Providers: Google Cloud and Google Gemini APIs used to parse prompts and generate multimedia scripts and assets.
• Legal Mandates & Safety: If required by law, subpoena, warrant, or in good-faith belief that disclosure is necessary to protect the life, safety, or rights of users or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, or asset sale, user account information may be transferred subject to equivalent confidentiality commitments.

07.Data Retention & Security Architecture

We retain personal data only for as long as necessary to fulfill the operational purposes described in this policy, unless a longer retention period is mandated by law.

• Account Data: Retained for the lifetime of your account. Upon account deletion, identifiers are permanently purged or anonymized within 30 days.
• Guest Session Telemetry: Aggregated or purged on a rolling 90-day basis unless linked to a registered account.
• Published Shows & Comments: Shows and episodes generated and published remain part of the network archive; author attribution will be anonymized upon verified account deletion.

We implement robust security practices including TLS 1.3 encryption in transit, cryptographically salted password hashing, least-privilege IAM controls, and isolated database clusters. However, no internet transmission is 100% immune to vulnerabilities; users must protect their credentials.

08.Your Privacy Rights (GDPR, CCPA/CPRA, & Global)

Depending on your country or state of residence (including California, Virginia, Colorado, the EU, and UK), you are entitled to exercise the following legal privacy rights:

To exercise any of these rights, email our team at privacy@slop.fan. We verify identity through account authentication or registered email correspondence and respond within statutory deadlines (30 days for GDPR, 45 days for CCPA).

09.Cookies, Local Storage & Guest Tracking

We use cookies, session storage, and browser local storage to maintain session persistence and telemetry:

You can manage or disable cookies in your browser settings. Note that disabling essential session cookies will prevent login and account features from functioning properly.

10.Children's Privacy (COPPA)

slop.fan is directed towards a general audience and is strictly not intended for individuals under 13 years of age (or 16 in the European Union). We do not knowingly collect, solicit, or maintain personal information from children.

If we learn that we have inadvertently collected personal data from a child under 13 without verified parental consent, we will take prompt action to delete such information immediately. Parents or guardians who believe a child has created an account may contact us at privacy@slop.fan.

11.International Data Transfers

slop.fan servers and cloud infrastructure are primarily hosted in the United States. If you access our service from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws differing from United States law, your data will be transferred to and processed in the United States.

For cross-border data transfers from the EEA or UK, we rely on standard contractual clauses (SCCs) approved by the European Commission, ensuring equivalent levels of protection and safeguards for your personal information.

12.Policy Updates & Contact Information

We may revise this Privacy Policy from time to time to reflect advancements in our AI architecture, regulatory changes, or new features. When updates occur, we will revise the “Effective Date” at the top of this document. For material changes, we will provide prominent notice through an in-app banner or via email.