LEGAL
Privacy Policy
Last updated: October 1, 2024
1. Data Controller
Beatstorm ("we", "us", "our") is the data controller responsible for your personal data. For privacy-related enquiries, contact us at privacy@beatstorm.net.
2. What Data We Collect
We collect the following categories of personal data:
Account Data
Email address, username, country, and profile picture when you create an account or sign in with Google.
Content Data
Audio files and metadata of beats you upload to the Platform.
Usage Data
Pages visited, battles viewed, votes cast, and timestamps of interactions — collected to personalise your experience and improve the Platform.
Technical Data
IP address, browser type, device identifiers, and cookies — collected automatically to operate the Platform securely.
Communications
Email address and message content when you contact our support team.
3. How We Use Your Data
- To provide and operate the Beatstorm platform (Art. 6(1)(b) GDPR — contractual necessity)
- To send transactional emails: beat approval/rejection notices, battle start and result notifications (Art. 6(1)(b) GDPR)
- To detect and prevent fraud, abuse, and security threats (Art. 6(1)(f) GDPR — legitimate interest)
- To improve our services through anonymised analytics (Art. 6(1)(f) GDPR)
- To comply with applicable legal obligations (Art. 6(1)(c) GDPR)
We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without explicit consent.
4. Third-Party Service Providers
We use the following processors to operate our service:
All processors are contractually bound to process data only as instructed and in accordance with applicable data protection law.
5. Data Retention
We retain your personal data for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law (e.g. tax and accounting records, up to 10 years). Anonymised aggregate statistics may be retained indefinitely.
6. Cookies
We use strictly necessary cookies for authentication (session tokens) and security. We do not use third-party advertising or tracking cookies. You can manage cookies in your browser settings; disabling session cookies will prevent you from logging in.
7. Your Rights (GDPR)
Under the GDPR you have the following rights:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request that we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdrawal of consent — withdraw consent at any time where processing is consent-based
To exercise any of these rights, email privacy@beatstorm.net. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
8. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted data transmission (TLS), row-level security on our database, and access controls limiting who can view personal data.
9. Children's Privacy
Beatstorm is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice on the Platform. The date at the top of this page indicates when the policy was last revised.
11. Contact
For any privacy-related questions or to exercise your rights, contact: privacy@beatstorm.net