Privacy Policy

This Privacy Policy explains how Artlapse collects, uses, and protects your personal data when you use our platform at artlapse.app. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).

1. Data We Collect

Account data

When you sign in with Google, we receive your name, email address, and profile picture from Google. You also choose a username during registration. We store this information to create and manage your account.

Content you upload

Videos, thumbnails, and any other content you upload to Artlapse are stored on our servers. We associate this content with your account.

Usage data

We collect information about how you use the platform, including videos you watch, likes, comments, and other interactions. This data is used to provide core platform features such as your feed and creator analytics.

Technical data

We collect standard technical data including your IP address, browser type, device type, and operating system. This is used for security, fraud prevention, and platform stability.

Cookies

We use cookies to keep you logged in and, with your consent, to serve advertisements. See our Cookie Policy for full details.

2. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR): processing your account data and content is necessary to provide the Artlapse service you signed up for.
• Legitimate interest (Art. 6(1)(f) GDPR): we process technical data and usage data to maintain platform security, prevent abuse, and improve the service.
• Legal obligation (Art. 6(1)(c) GDPR): we may retain certain data to comply with applicable legal requirements, including Swedish bookkeeping law (Bokföringslagen) and responses to lawful requests from authorities.
• Consent (Art. 6(1)(a) GDPR): where we rely on consent (such as advertising cookies), you may withdraw your consent at any time without affecting the lawfulness of prior processing.

3. How We Use Your Data

• To create and maintain your account
• To display your content to other users
• To provide your personalised feed and discovery features
• To show you advertisements via Google AdSense (only with your consent)
• To send you platform notifications (push notifications, if you have opted in)
• To detect and prevent abuse, spam, and illegal activity
• To provide creators with analytics about their content
• To comply with applicable legal obligations

4. Sharing Your Data

We do not sell your personal data. We share data only with the following third-party service providers:

• Google LLC: sign-in via Google OAuth and advertising via Google AdSense. For advertising, Google acts as an independent data controller, meaning it processes advertising data under its own terms and privacy policy, not solely on our behalf. Data transfers are covered by Standard Contractual Clauses. See Google's Privacy Policy.
• Cloudflare, Inc.: hosting, content delivery network, and video storage. Cloudflare is based in the United States. Data transfers are covered by Standard Contractual Clauses. See Cloudflare's Privacy Policy.

5. International Data Transfers

Both Google and Cloudflare are US-based companies. When your data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your data.

6. Data Retention

• Account data: retained until you delete your account or request deletion.
• Uploaded content: retained until you delete it or your account is terminated.
• Usage and technical data: retained for up to 90 days for security and operational purposes.
• Financial and legal records: retained for up to 7 years as required by Swedish bookkeeping law.

When you delete your account, your personal data and uploaded content will be removed within 30 days, except where retention is required by law (for example, for fraud prevention or legal claims).

7. Automated Decision-Making and Profiling

We use automated systems to personalise your feed and recommend content based on your interactions on the platform, such as videos you watch, like, or engage with. This constitutes profiling under GDPR. However, this processing does not produce legal or similarly significant effects on you; it only affects which content appears in your feed. You may object to this processing by contacting us at [email protected]. We will assess your request in accordance with applicable law.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and secure cloud infrastructure provided by Cloudflare. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your data against unauthorised access, loss, or disclosure.

9. Your Rights Under GDPR

As a user in the EU/EEA, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data. We will respond within 30 days.
• Right to restriction: request that we limit how we process your data in certain circumstances.
• Right to data portability: receive your data in a machine-readable format.
• Right to object: object to processing based on legitimate interest.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Supervisory Authority

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Swedish supervisory authority:

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the platform. The date at the top of this page reflects the most recent update.

12. Data Controller

The data controller responsible for your personal data is: