Privacy Policy
Last updated: 2026-05-08

SLAY Radio ("we", "us", "our") operates this website and mobile application as
a non-commercial community project. This policy explains what personal data we
process and why.

1) Who we are
SLAY Radio is operated by its owner and staff community.
Privacy contact: staff@slayradio.org

2) Products covered by this policy
- SLAY Radio website (primary service with community/account features).
- SLAY Radio mobile app (current release focused on listening/stream playback).

3) Data we may collect
- Account data: username/login, display name, email address, password hash,
  account status, and preferences.
- Community content: contact form messages, shouts, live requests, votes,
  and similar user-submitted content.
- Donation metadata: donor name/email and transaction metadata from payment
  providers used by the site.
- Technical data: IP address, session identifiers, timestamps, and basic
  request metadata for security and operations.
- Third-party interaction data: providers may receive network/browser data
  when external scripts, embeds, or hosted assets are loaded.

4) Mobile app status (current)
The current mobile app version does not require user login and does not store
user account or profile data. We do not currently collect user-submitted
personal data through the app itself.

The app may still involve basic technical/network processing required to stream
audio and deliver content (for example requests to our servers or third-party
infrastructure). This policy will be updated when authorization, accounts, or
related features are introduced in the app.

5) How data is collected
- Directly from you via forms and account actions.
- Automatically from browser/session/server logs.
- From third-party services where applicable (for example webhook events).

6) Why we process data
- Operate accounts and member features.
- Authenticate users and secure the service.
- Run community functions and moderation workflows.
- Process and track donation metadata provided by external payment processor.
- Maintain, debug, and improve site operation.
- Meet legal and abuse-prevention needs.

7) Legal bases (EEA/UK context)
Where applicable, we rely on:
- Contract performance (service delivery),
- Legitimate interests (operations, security, moderation),
- Consent (where required), and
- Legal obligation.

8) Cookies and similar technologies
We use essential session cookies and related technologies needed for login and
core functionality. Third-party analytics/media providers may also set or use
their own technologies.
You can control cookies in your browser settings.

9) Sharing
We may share data with:
- Hosting/infrastructure providers,
- Payment/donation providers (for example PayPal, Stripe, Donorbox, Ko-fi,
  Twitch integrations where applicable),
- Analytics/CDN/embed providers used by the site,
- Staff/moderators with operational need,
- Authorities where required by law.
We do not sell personal data.

10) International transfers
Some providers may process data outside your country, including outside the
EEA/UK. Where required, we rely on suitable safeguards offered by providers.

11) Retention
We keep data only as long as reasonably needed.
Typical defaults:
- Account/community records: while active and up to 24 months after inactivity.
- Technical logs: up to 90 days (subject to system rotation).
- Contact messages: up to 24 months.
- Donation/transaction records: up to 7 years where required.

12) Security
We apply reasonable technical and organizational safeguards, but no internet
service can guarantee absolute security.

13) Your rights
Depending on your location, you may request access, correction, deletion,
restriction/objection, portability (where applicable), and consent withdrawal.
You may also lodge a complaint with your local supervisory authority.

14) Children
This site is not intentionally directed at children below the age required by
applicable law.

15) Policy updates
We may update this policy. Changes are reflected by the "Last updated" date.