In short
- We collect what we need to run your account, your page and your sales, plus basic analytics.
- We don’t sell your personal information.
- Payments go through Stripe. We never see or store full card numbers.
- When fans buy from, book with or subscribe to a creator, the creator decides how to use that fan’s information. We handle it on the creator’s behalf.
- You can access, correct, export or delete your information by emailing info@slurpy.co.
01Who we are #
Slurpy (“Slurpy,” “we,” “us”) is a link-in-bio and creator platform operated by [Slurpy legal entity name], [Mailing address]. Slurpy includes:
- our marketing website at slurpy.co;
- public creator pages at slurpy.co/username (and any custom domain a creator connects);
- the creator dashboard at manage.slurpy.co;
- our agency product at agency.slurpy.co;
- and related emails, checkout flows and tools (together, the “Service”).
This policy explains how we handle personal information about creators (people with a Slurpy account), fans and customers (people who visit, buy from, book with, message or subscribe to a creator), and visitors to our website. Our Terms of Service govern use of the Service.
02Information we collect #
Information you give us
- Account details. Your name, email address, chosen username, the kind of creator you are, and a password. Passwords are stored only as a one-way cryptographic hash, never in readable form.
- Profile content. Whatever you add to your page: display name, bio, photos, videos, links, products, prices, booking availability, membership tiers and similar content. Most of it is public by design.
- Seller and payout information. To sell, you connect with Stripe and give Stripe the identity, tax and bank details it needs. Stripe collects and holds that information. We receive account status, transaction and payout information from Stripe, but not your full bank or card numbers.
- Purchases, bookings and messages. When a fan buys a product, books an appointment, joins a membership, sends a tip or a paid DM, or subscribes to a creator’s email list, we collect what’s needed to complete it. That usually means name, email address, what was purchased or booked, the time, any message or notes provided, and, for physical merch, a shipping address.
- Communications. Emails and messages you send us, such as support requests, copyright notices and reports of abuse.
Information collected automatically
- Signup records. When you create an account, we log the IP address and browser user agent used to sign up. We use them to prevent abuse and to rate-limit signups (for example, by limiting how many accounts can be created from one IP address in an hour).
- Creator page analytics. When someone views a creator’s page, we record a page-view entry for that creator’s analytics. It contains the date and time; the referring website’s domain (for example,
instagram.com, or “direct”); the visitor’s approximate location (country, region and city) derived from their IP address; the device type, browser and operating system, derived from the user agent; and how long the page stayed open and whether the visitor is returning. In this record, the IP address is stored only as a salted one-way hash, not in readable form, except that a creator can choose to see the IP addresses of visitors to their own page; when they do, the visitor’s IP address is also stored in readable form with that page view and is visible to that creator. - Location lookup. To estimate location, we may use a country code supplied by our network provider, or send the visitor’s IP address to an IP-geolocation service (currently ip-api.com). To avoid repeated lookups, we keep a cache that maps IP addresses to the approximate location returned. Entries in the cache are refreshed after at most 30 days.
- Link clicks. When a visitor clicks a link on a creator’s page, we record which link was clicked, its title and destination, and the date. We don’t attach visitor identifiers to click records.
- Agency pages. On pages served through our agency product, page views may be logged with the visitor’s IP address, user agent and referring URL.
- Marketing site analytics. Our marketing website uses Google Analytics (see Cookies), which collects information such as pages viewed, approximate location, device and browser information, and how you arrived at the site.
- Server logs. Like most websites, our servers automatically log technical information such as IP address, requested URL, date and time, and user agent.
Information from third parties
- Stripe sends us payment, subscription, payout and dispute information related to your account or purchase.
- Google Calendar. If a creator connects Google Calendar for bookings, we receive an access token from Google and use it to read and write calendar events needed for scheduling (for example, checking availability and adding confirmed bookings). Creators can disconnect at any time from their dashboard or their Google account settings.
03How we use information #
We use personal information to:
- Provide the Service: create and run accounts, publish creator pages, process orders, bookings, memberships, tips and paid DMs, deliver digital products, and send transactional emails such as verification links, receipts and booking confirmations;
- Verify and secure accounts: confirm email addresses, keep you signed in, and detect fraud, spam, abuse and unauthorized access;
- Show creators their analytics: page views, traffic sources, approximate visitor locations, devices and link clicks;
- Bill for plans: charge subscription fees and handle upgrades, downgrades and cancellations;
- Enforce our Terms: including the adult-content and age-gating rules, username rules and copyright policy, and respond to reports;
- Improve Slurpy: understand how the Service is used and fix problems;
- Communicate with you: answer support requests and send service announcements. If you joined our launch list, we’ll also send occasional product news, which you can unsubscribe from at any time;
- Meet legal obligations: tax and accounting rules, responses to lawful requests, and mandatory reporting (for example, reports of child sexual abuse material to NCMEC).
We don’t use the content of your private messages or your customers’ information to advertise to them on our own behalf.
04Legal bases (EEA & UK) #
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:
- Contract: to provide the Service you signed up for or the purchase you made;
- Legitimate interests: to secure the Service, prevent abuse, provide analytics to creators and improve Slurpy, where those interests aren’t overridden by your rights;
- Consent: where required, for example for non-essential cookies or marketing emails. You can withdraw consent at any time;
- Legal obligation: to comply with tax, accounting and other laws.
05Creators’ audiences: who is responsible #
Creators use Slurpy to sell to, book with, message and email their own audiences. For that audience information (email subscribers, buyers, members, people who book appointments, and senders of tips and paid DMs):
- The creator is the controller. The creator decides why and how that information is used: who to email, what to send, and how to fulfil an order or booking. Creators are responsible for having a lawful basis and for honoring their audience’s privacy rights.
- Slurpy is the processor (service provider). We store and process that information on the creator’s behalf and on their instructions, so that we can provide the Service. We don’t sell it, and we don’t use it to market our own products to that audience.
We act as a controller for some of this information too, where we use it for our own purposes: preventing fraud and abuse, processing payments, keeping records the law requires, and enforcing our Terms.
Email lists. Creators who collect subscriber emails and send campaigns through Slurpy must follow anti-spam and privacy laws (for example CAN-SPAM, and GDPR where it applies), only email people who signed up, and include a working unsubscribe link. Unsubscribe requests are honored for that creator’s list.
If you’re a fan and want to access or delete information a creator holds about you, contact the creator first. If you can’t reach them, or the request concerns Slurpy itself, email info@slurpy.co and we’ll help.
07Service providers #
These are the main third parties that process personal information for us. Each has its own privacy policy.
- Stripe
- Payment processing for plan subscriptions and creator sales, seller onboarding and identity verification, payouts, fraud prevention and disputes. Card details are entered with and held by Stripe.
- Google Analytics
- Traffic measurement on our marketing website (measurement ID
G-SRTVZJ5VXP). - Google Calendar
- Optional. Used only if a creator connects their calendar for bookings.
- IP geolocation
- ip-api.com, which returns an approximate location for an IP address so creators can see where page views come from.
- Email delivery
- Mail servers and email delivery services that send verification emails, receipts, booking notices and creator campaigns.
- Hosting & infrastructure
- The web hosting and network providers that store and serve the Service.
09Data retention #
We keep personal information only as long as we need it for the purposes in this policy:
- Account and profile information, including the signup IP address and user agent, is kept while your account is open. After you delete your account, we delete it or de-identify it within a reasonable period, except as described below.
- Creator analytics are kept while the creator’s account is open, so creators can see trends over time.
- IP-to-location cache entries are refreshed after at most 30 days.
- Transaction, tax and payout records are kept as long as tax, accounting and anti-fraud laws require, even after an account is closed.
- Records related to abuse, safety or legal claims may be kept for as long as needed to investigate, comply with the law or defend legal claims.
- Backups are overwritten on a rolling basis, so deleted data can remain in them for a limited time.
10Security #
We use reasonable technical and organizational measures to protect personal information. For example, we serve the Service over HTTPS, store passwords only as one-way hashes, store IP addresses in creator analytics as hashes, restrict access to systems that hold personal data, and leave card handling to Stripe.
No system is completely secure, and we can’t guarantee the security of information sent to or stored on the Service. Use a strong, unique password and keep it private. If you think your account has been compromised, contact us right away. If a breach affects your personal information, we’ll notify you where the law requires.
11International transfers #
Slurpy is based in the United States, and our service providers may process information in the US and other countries. Data protection laws there may differ from those where you live. When we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (and their UK equivalents) where our providers offer them, or other lawful transfer mechanisms.
12Your rights & choices #
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy;
- Correct information that is inaccurate or incomplete;
- Delete your information;
- Port your information to another service in a commonly used format;
- Object to or restrict certain processing, including processing based on legitimate interests;
- Withdraw consent where we rely on it, without affecting earlier processing;
- Complain to your local data protection authority.
Creators can update most account and profile information directly in the dashboard. For anything else, email info@slurpy.co from the address on your account. We may need to verify your identity before acting, and we’ll respond within the time the law requires. If you’re a creator’s customer or subscriber, see Creators’ audiences.
Marketing emails always contain an unsubscribe link. Even if you unsubscribe, we’ll still send transactional and account messages, such as receipts and security notices.
13US state privacy rights #
Residents of California and other US states with comprehensive privacy laws have the rights described above (to know, access, correct and delete), plus the following:
- No sale or targeted-advertising sharing. We don’t sell personal information, and we don’t knowingly share it for cross-context behavioral advertising. We have no actual knowledge of selling or sharing information about anyone under 16.
- Non-discrimination. We won’t treat you differently for exercising your privacy rights.
- Authorized agents. You can use an authorized agent to make a request. We may ask for proof of the agent’s authority and verify your identity directly.
- Appeals. If we deny your request, you can appeal by replying to our decision or emailing info@slurpy.co with the subject “Privacy appeal.”
Categories we collect (as defined by the California Consumer Privacy Act) include identifiers (name, email, username, IP address), commercial information (purchases, plans, bookings), internet activity (page views, link clicks, device and browser data), approximate geolocation, and the content of messages sent through the Service. If you sell through Slurpy, Stripe collects government identifiers and financial account details directly. We collect these categories from the sources and for the purposes described in this policy, and disclose them only to the recipients listed in How we share information.
Sensitive information. Some content on creator pages, such as adult content, may reveal information about sex life or sexual orientation. Creators choose to publish it. We use it only to provide the Service and to enforce our Terms, such as age-gating. We don’t use it to infer characteristics about people.
14Children #
You must be at least 18 years old to create a Slurpy account. Age-restricted creator content is shown only to visitors who confirm they are 18 or older. The Service is not directed to children under 13, and we don’t knowingly collect personal information from them.
If we learn that we’ve collected personal information from a child under 13, or that someone under 18 has opened an account, we’ll delete the information or close the account. If you believe a child has given us personal information, contact info@slurpy.co.
15Changes to this policy #
We may update this policy as Slurpy grows. We’ll change the “Last updated” date at the top. If we make material changes, we’ll give notice before they take effect, for example by email or in the dashboard. Continuing to use the Service after changes take effect means you accept the updated policy.
16Contact us #
Questions, requests or complaints about privacy:
- info@slurpy.co
- Company
- [Slurpy legal entity name]
- [Mailing address]
Last updated October 1, 2026. See also our Terms of Service.