PRIVACY
POLICY.

1. Who we are and what this covers

Slugwurf Music, LLC (Ohio), referred to as “Slugwurf,” “we,” or “us,” operates the official Slugwurf website, www.Slugwurf.com, and its management workflows, including this hosted version of the Site. We are committed to protecting your privacy. This Privacy and Cookie Policy explains how we collect, use, share, and protect personal information when you browse the Site, contact us, submit music, request resources, or purchase through our linked stores, and describes your choices under applicable privacy laws. This policy covers information handled through our website, submission forms, newsletter, resource requests, and related communications. For privacy questions, submit a privacy request or use the privacy email in the Contact us section below.

External platforms, including BeatStars, YouTube, Instagram, TikTok, Discord, and the publications linked from News, operate their own services under their own privacy policies. This policy does not replace those policies.

2. Information we collect

• Inquiries and submissions: your name, email address, role (such as artist, producer, media, or record label), social/profile link, company or label where requested, messages, beat or loop titles, uploaded files, and your acknowledgments of submission terms and rights.
• Newsletter and store interest: your email, name, selected role where requested, signup source, consent records, and any product or size interests you send us. Press-alert requests also include your optional publication/outlet and preferred email format; press alerts are separate from the general newsletter. Saving a wishlist alone keeps it on your device; it does not send us your email or subscribe you.
• Industry and document requests: business contact details, requested resources, purpose, correspondence, and information needed to review or fulfill your request. Contracts and confidential business documents are handled separately from public press downloads.
• Optional analytics: random browser and session IDs, page paths, event types, selected link or button destinations, referrer domain, and the role selected when a form is submitted. These records are pseudonymous, not fully anonymous. They do not contain names, emails, message text, uploaded audio, full referrer URLs, or IP addresses in our analytics event table.
• Orders and accounts: beat and sound-kit purchases use BeatStars. Merchandise can be browsed and added to a local shopping bag on this Site, while Shopify securely handles checkout, payment, taxes, shipping, and order confirmation. Shopify and the applicable fulfillment provider collect the contact, billing, shipping, and order information needed to complete and fulfill the purchase. We do not collect or store full payment-card numbers on this Site. We may receive order and customer details needed for fulfillment, support, accounting, and fraud prevention.
• Technical and security information: hosting and security providers may process IP addresses, browser/device information, timestamps, authentication information when sign-in is required, and request or error logs to deliver the site, protect forms, and investigate misuse. Those service records are separate from optional analytics.

Do not upload identification documents, financial credentials, sensitive personal information, or another person’s private information unless we specifically request it through an appropriate secure channel.

3. How we use information

We use information to review collaboration submissions; answer inquiries; deliver requested forms and resources; manage industry relationships; record consent; send requested newsletters and store updates; protect the site; and comply with legal, accounting, or contractual obligations.

With analytics permission, we study aggregate page journeys and conversion patterns to understand which content and features people use and improve navigation. The current system does not record browsing outside this site, record sessions, capture keystrokes, fingerprint devices, or link analytics browser IDs to contact email addresses. We do not use these analytics to make decisions with legal or similarly significant effects.

When management’s AI assistant is configured, relevant CRM context—such as contact names, company details, correspondence summaries, owner notes, document metadata or text, and submission titles—may be sent to OpenAI to help authorized staff search and summarize records. The current assistant does not send uploaded audio files to the AI service and does not automatically contact people or make changes to their records.

Where applicable data protection law requires a legal basis, we rely on consent for optional analytics and requested marketing; steps toward or performance of a contract for requested business services; legitimate interests in responding, administering business relationships, and maintaining security (subject to your rights); and compliance with legal obligations. We do not use legitimate interests to bypass your optional tracking choices.

4. Email updates are a separate choice

Cookie permission does not subscribe you to marketing emails. Use the communications option on the relevant form to request updates, and review that choice before submitting. Where available, you can submit music without requesting marketing emails. When Mailchimp is connected, new signup requests are submitted for email confirmation before marketing is activated, subject to the subscriber’s existing status.

You can unsubscribe through an email’s unsubscribe link or contact us. We may retain a minimal suppression record to respect your unsubscribe request. Necessary replies about your submission, request, transaction, or an existing business relationship are separate from marketing. Email service providers may report delivery, opens, and clicks under their own service settings; your website analytics preference does not control email tracking. Contact us with questions about a particular mailing.

5. Service providers and external services

Appointment scheduling: We collect the details you submit for a call and use Resend to send appointment-related emails. When management enables Microsoft Outlook calendar sync, your name, email, meeting topic, and scheduled time are added to management’s private calendar. Outlook busy-time information is used to prevent booking conflicts; private calendar event details are not shown to visitors. See Microsoft’s privacy statement.

We disclose information only as relevant to operating the site, delivering requested services, managing business relationships, or meeting legal requirements. Current services and supported integrations include:

• Hosting, database, storage, authentication, and security: the OpenAI Sites platform and Cloudflare infrastructure support the site. Cloudflare Turnstile, when configured, checks form requests for abuse; verification may involve browser signals and an IP address. These protections are not advertising tools. See Cloudflare’s privacy policy and OpenAI’s privacy policy.
• Email and contact management: Mailchimp receives subscriber information when connected and may manage confirmation, delivery, unsubscribe, and campaign reporting. See Intuit/Mailchimp’s privacy statement.
• Google Analytics 4: After you allow analytics, Google receives page and selected interaction events, browser and device information, and technical connection information including your IP address. We use this to understand traffic and improve the site. Google Analytics is blocked before consent; advertising storage, advertising personalization, and Google signals are disabled. Admin pages and private scheduling routes are excluded. The events we submit omit names, emails, form contents, URL query strings, and fragments. See Google’s privacy information.
• Embedded media: YouTube players connect to Google only after your media permission or a deliberate one-video load. We use YouTube’s privacy-enhanced embed domain, but this does not make playback anonymous or free of all storage. Google receives connection information during playback. See Google’s privacy policy.
• Purchases: BeatStars handles checkout, licensing, and delivery for beat and sound-kit purchases. Shopify supplies live merchandise catalog information and handles secure merchandise checkout, payment, taxes, shipping calculations, and order confirmation. Shopify and the applicable production or fulfillment partner receive the information required to process and fulfill the order. Our Site does not receive full payment-card numbers. See BeatStars’ privacy policy and Shopify’s privacy policy.

Authorized management staff and professional advisers may access relevant records as needed. We may disclose information to meet a valid legal obligation, protect rights or safety, prevent fraud, or in a business transfer subject to applicable privacy protections. We do not currently sell personal information or share it for cross-context behavioral advertising.

6. Cookie policy and similar technologies

BeatStars embedded beat store: On Browse Beats, the player stays unloaded until you select “Load BeatStars player.” This connects your browser to BeatStars so you can listen, review licenses, and shop. BeatStars receives technical information such as your IP address and browser details and may use its own cookies or storage under its privacy policy. This one-time action is separate from your optional analytics and YouTube preferences. Use “Close player” to stop the embedded connection; it does not erase storage already set by BeatStars. You can also shop using the external BeatStars link.

Cookies are small files stored by a browser. Local storage and session storage also keep information on your device. This section covers all of these technologies, even where the site uses local storage rather than a cookie.

Essential and requested features support security, authentication where required, privacy choices, and a shopping bag you deliberately use. Site analytics and YouTube embeds are optional and off by default. Google Analytics 4 is enabled only after analytics consent. We do not install advertising pixels, Facebook/Meta or Bing Ads tags, session-replay tools, separate performance cookies, or unclassified tracking scripts. We therefore do not present consent categories or opt-out links for those uninstalled tools. Google/YouTube may show ads and process playback information under its own policies when you load an embedded video.

Manage cookie preferences

The first-visit notice offers “Accept All” and “Customise.” Customise opens Necessary, Functional (YouTube), and Analytics categories, with “Reject All,” “Save My Preferences,” and “Accept All” controls. Reject All disables every optional category; it does not disable necessary services. Accept All enables the available optional categories, subject to Global Privacy Control. It does not load a player until you select a video, grant permission to unrelated future services, or subscribe you to email. Closing the preferences window, scrolling, or continuing to browse does not grant permission. You can reopen preferences from the footer on every public page. A single-video choice permits that player for the current interaction without granting a persistent media preference.

Withdrawing analytics permission stops new events, removes our analytics identifiers, and requests deletion of events associated with the browser IDs still available on this device. If a request cannot complete immediately, it is queued for retry. This does not remove contact records, newsletter subscriptions, transaction records, data in other browsers, or independently maintained service-provider records. Email us for those requests.

Google Analytics records are held separately from the site’s own event database. Withdrawing consent does not automatically delete historical Google Analytics data. Submit a privacy request for help with provider-held records.

We honor a detected Global Privacy Control (GPC) signal by keeping optional site analytics off, including if you previously allowed them. We do not currently sell or share information for cross-context advertising. A legacy Do Not Track header does not have a separate implementation; use cookie preferences or GPC for these controls. Choices are browser-specific and do not sync across devices. If browser storage is blocked, optional permissions apply only to the current page visit.

Fonts and video thumbnails are served through this site so viewing pages does not require your browser to connect to Google Fonts or YouTube’s image servers. Going to an external link or loading an allowed player is different from merely browsing our pages.

7. Retention and security

We retain information only as reasonably needed for the purpose it was collected, ongoing business relationships, dispute resolution, or legal and accounting requirements. Inquiry and submission records are reviewed for continued usefulness. Subscriber records remain while a subscription is active; minimal suppression records may be kept to prevent unwanted mail. Contracts, payment-related records, and business correspondence may need longer retention. Retention by external checkout and email services is also subject to their policies.

Our own operational analytics retention window is 180 days. Google Analytics retention is managed separately in the Google Analytics property settings; browser cookie duration does not determine Google’s server retention. Routine analytics collection and dashboard maintenance delete older events in bounded batches; residual older rows can remain pending the next cleanup. Browser analytics IDs also have a 180-day maximum validity. Withdrawal triggers the browser-specific deletion process described above. Provider security logs and backups have separate lifecycles and may not be erased immediately.

We use restricted administrative access, server-side secrets, encrypted transport, and private storage/access controls for submitted files. No service or transmission is completely secure. Public press assets are intended for download; private submission audio and confidential documents are not published as press assets.

8. Your choices and privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, portability, restriction, or objection to certain processing; withdraw consent; opt out of sale or targeted-advertising sharing where relevant; and appeal a denied request or complain to a competent regulator. We will assess requests under applicable law and explain relevant limits, including records we must retain. We will not penalize you for exercising applicable privacy rights.

Submit a privacy request with the email used to contact us, or use the privacy email below. We may reasonably verify your identity or an authorized agent’s authority before disclosing or changing records. Please do not send government ID or sensitive documents in an initial email. We will respond within the timeframe required by applicable law. If you disagree with our response, reply requesting review or appeal.

9. International data transfers

Our team is based in the United States. Our providers may process personal information in other countries whose privacy protections differ from those where you live. When applicable law requires safeguards for international transfers, appropriate recognized safeguards must be used, such as approved standard contractual clauses where relevant. We do not claim a particular provider arrangement or certification unless it applies to that relationship. Contact us for information about the safeguards applicable to your data.

10. Privacy signals and advertising choices

We do not currently sell personal information or share it for cross-context behavioral advertising. A detected Global Privacy Control signal keeps optional site analytics off, including after an earlier Accept All choice. Legacy Do Not Track signals do not have a separate implementation. You can manage optional categories from Cookie preferences in the footer at any time. External checkout services and social destinations have their own controls.

We do not use fully automated decisions that produce legal or similarly significant effects. Analytics informs navigation improvements; the management AI assistant helps authorized staff find and summarize records. Contact us if you believe an automated security check has incorrectly blocked your request so we can review it.

11. Children’s privacy

This site is intended for a general music audience and is not directed to children under 13. Children under 13 should not submit personal information or audio through our forms. If we learn that we collected a child’s personal information without required authorization, we will take appropriate steps to delete it. A parent or guardian can contact our privacy email. Minors should involve a parent or guardian before submitting content or entering a purchase or licensing agreement.

12. Changes to this policy

We update this policy when practices, providers, or legal requirements change and revise the date above. Material changes will be brought to your attention as appropriate. Adding a new optional tracking purpose requires a new choice; an earlier analytics permission does not authorize future advertising or session recording.

13. Contact us

Slugwurf Music, LLC · Columbus, Ohio, United States
Privacy, access, deletion, and unsubscribe requests: privacy@slugwurf.com. You can also Submit a privacy request.