Clear terms.
No fine-print fog.

1. Controller

Sections 1 to 10 describe the BeatScroll service. Section 11 describes payment processing for paid plans.

2. Website Access and Security Logs

When you access the site, data such as IP address, time, requested address, HTTP method, response status, and technical browser details is processed transiently to deliver the site, diagnose errors, and prevent abuse. The legal basis is Article 6(1)(f) GDPR; the legitimate interests are secure and reliable operation. Fastify and Caddy are currently configured not to write routine access logs. Technical error and security events may appear in size-limited container logs without form data or message bodies. Metadata needed for a specific security incident may be preserved until the incident is resolved. The hosting provider may additionally process its own infrastructure metadata under its contractual retention periods.

3. Messages and Reactions

Message text is required to send a message. A display name is optional; “anon” is shown if you leave it blank. Messages are transmitted to the locally connected DJ app and may be shown on the selected display. People at the venue may therefore see them. Reactions do not require a name.

The server keeps a message in memory only while delivering it and awaiting confirmation from the DJ app; there is currently no server-side message history. After confirmation, the content remains temporarily in the connected desktop app's volatile queue until shown, dismissed, or cleared. Rejected message bodies are not retained as messages. The legal basis is Article 6(1)(f) GDPR; the interests are the requested live communication and protection of the service.

4. Device ID, Browser Storage, and Drafts

• A random device ID is stored in the browser for rate limiting and abuse prevention and is sent with messages or reactions. It expires and is replaced after 30 days. Local storage access is based on Section 25(2)(2) TDDDG and subsequent processing on Article 6(1)(f) GDPR.
• A display name is not stored as a browser preference. It is processed only as part of the current message transmission.
• Only the text of an unsent message draft is held in the tab's session storage so it survives a connection interruption. The display name is not included in the draft. The draft ends with the browser session or is erased after confirmed delivery.

BeatScroll uses no advertising or analytics cookies.

5. Accounts, Sign-in, and Sessions

Clerk, Inc. provides signup, sign-in, verification, recovery, and browser sessions. Depending on the sign-in methods enabled in Clerk, it may process identifiers such as an email address or telephone number, verification and security data, technical request data, and the browser data needed to maintain a session. BeatScroll receives the stable Clerk user ID and verified session state. BeatScroll does not receive or store your password.

After account setup, BeatScroll stores the stable Clerk user ID, account status, DJ display name, language, and timezone. These fields are required to provide and secure the account and Deck. The legal basis is Article 6(1)(b) GDPR for steps requested by you and performance of the service, and Article 6(1)(f) GDPR for account and session security. Clerk's strictly necessary session storage is used under Section 25(2)(2) TDDDG. No account data is used for advertising by BeatScroll.

When you approve a computer, BeatScroll stores its name, platform, approval status, last-seen time, a hash of its device credential, temporary authorization records, and channel and live-session records. The raw device credential remains in the operating system's credential store. You can revoke it from the Deck at any time. Short-lived connection tickets are used only to establish the selected live session.

Deleting the Clerk identity disables the mapped BeatScroll account after receipt of Clerk's signed deletion event. Profile and mapping data is then retained only while needed to complete erasure or export requests and meet security or legal obligations. Access, export, and erasure requests are handled through [email protected]. Clerk is an external identity provider and may involve processing outside the EEA. Details of locations, transfer safeguards, and retention are provided in Clerk's applicable privacy and contractual documentation.

Gig plans (name, venue, date, time, timezone, optional private notes and guest-page tone), archived/featured selections, and QR artwork preferences are stored in the account database so they are available on your other computers. They are processed to provide the requested planning service under Article 6(1)(b) GDPR. Private planning notes are not included in the public audience page. Deleting a gig removes it from the current workspace; backup copies follow the retention period described below. The signed-in Deck loads plans from your account and does not read or import earlier browser-only plans. Data left by earlier development versions can remain in that browser until cleared through its storage settings. New account plans are not saved in browser local storage; unsaved edits remain in the current tab until saved or discarded.

6. Contact Form and Content Reports

When the contact page shows the server form as available, BeatScroll processes the submission type, language, optional name, email address, subject, and free text. Content reports additionally include the content location, an optional copy of the reported content, and the accuracy declaration. Email is required for ordinary contact; a content report may be possible without contact details where a lawful exception applies. The IP address is used only in the transient abuse-prevention rate limit and is not stored with the submission.

Purposes are handling and replying to requests, establishment or defence of legal claims, and assessment of allegedly illegal content. Depending on the request, the legal bases are Article 6(1)(b), (c), or (f) GDPR. Submissions are generally erased 365 days after recording; a documented statutory retention or evidence-preservation duty may place an individual case on hold. Deleted data may remain in encrypted backups for up to 28 additional days. A notification goes to the operator address configured by the server. Zoho Mail is used for form notifications over encrypted SMTP. An on-screen reference confirms storage only, not email delivery or a substantive decision. The email notification contains only the reference, type, and recording time, not the submitted free text or contact details.

If you use email, the mailbox service processes the sender address, technical email headers, subject, content, and any attachments. The purposes, legal bases, and general 365-day retention period are the same as for the server form; statutory duties or necessary preservation of evidence may apply for longer in an individual case. The mailbox is operated through Zoho Mail under the beatscroll.com domain.

7. Recipients and Hosting

Hetzner Online GmbH hosts the service in the European Union. Cloudflare proxies and protects public web traffic. Clerk, Inc. receives the identity, verification, session, and technical data needed to provide them. Zoho Mail processes direct email correspondence and the limited form-notification data described above. The message and optional display name also go to the connected DJ app and may appear on its output display. Service providers receive data only as needed for their task and under an appropriate contractual basis.

8. No Analytics or AI Training

BeatScroll does not use messages for personalized advertising or AI-model training. Security filters and rate limits may operate automatically, but they do not make a decision with legal or similarly significant effects about a person.

9. Your Rights

Subject to the GDPR, you may have rights of access, rectification, erasure, restriction, portability, and objection. Consent can be withdrawn for the future. Send requests to [email protected]. You can also complain to a data protection authority, particularly the Brandenburg Commissioner for Data Protection and Access to Information, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, lda.brandenburg.de.

10. Children

BeatScroll is not directed at children under 16. Paid accounts are intended to be available only to people aged 18 or older.

11. Payment Processing by Creem

Paid plans are sold by our reseller and Merchant of Record, Armitage Labs OÜ (“Creem”), Rotermanni 14, 10111 Tallinn, Estonia. At checkout you enter your name, email address, billing address, and payment details directly with Creem. Creem processes them for the purchase, payment, fraud prevention, invoicing, taxes, and refunds as described in its privacy notice. BeatScroll does not receive your card or bank details.

To activate and manage your access, BeatScroll sends your BeatScroll account ID with the checkout and receives from Creem the customer, subscription, and order IDs, the subscription status, the end of the paid period, and, for a Gig Pass, the gig and start time it was bought for. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). BeatScroll keeps these billing records while the account exists and for as long as statutory retention obligations require.

For guest content, the DJ, agency, or venue is intended to act as controller and BeatScroll as processor. Before a channel is activated, account holders must therefore provide their legal identity and privacy contact and enter into a data processing agreement. BeatScroll remains an independent controller for account, security, billing, and abuse data.

Creem is established in the EU. Where Creem or its payment service providers process data outside the EEA, Creem relies on safeguards such as the EU Standard Contractual Clauses, as described in its privacy notice.