Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Fabian Kunz · Schönleinstraße 34 · 45131 Essen, Germany · Email: info@beatfloe.com

2. Scope

This website is the product and sales site for Beatfloe, a desktop application for music producers. Besides the data technically required to deliver the pages to your browser (Section 3), we process personal data when you create a user account (Section 5) and when you purchase and manage a subscription (Section 6).

We do not use analytics, tracking, advertising, or profiling on this website, and we do not operate a newsletter or a contact form. The Beatfloe desktop application additionally processes Google user data if — and only if — you connect your YouTube channel to it (Section 8).

3. Server log files

When you visit this website, our hosting provider automatically collects and temporarily stores information transmitted by your browser in server log files: IP address, date and time of the request, browser type and version, operating system, referrer URL, and the requested page or file. This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, stable, and functional operation of the website. The data is stored only as long as necessary for this purpose and then deleted.

4. Hosting

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. The server is located in Germany. Hostinger processes the server log file data described above exclusively on our behalf as a processor under a data processing agreement pursuant to Art. 28 GDPR. As both the provider and the server are located within the EU, no transfer of personal data to a third country takes place.

5. User accounts and authentication

To use Beatfloe you need a user account. When you register we process your email address, your password (stored only as a salted hash — we never see it in plain text), your first and last name, an internal user ID, and the timestamps of creation and last sign-in. We use this data to create and operate your account, to authenticate you, and to link your subscription entitlement to you. Legal basis is Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures).

Accounts and authentication run on Supabase, provided by Supabase Inc. Supabase acts as a processor on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Insofar as personal data is transferred to a third country in the process, this is done on the basis of the EU Standard Contractual Clauses.

You can delete your account at any time under "Account" on this website. Deletion cancels a running subscription, removes your subscription record, and deletes your user account, including the data listed above. If you only cancel your subscription but keep your account, we retain the subscription record with the status "canceled", because it tells us that a free trial has already been used; legal basis is Art. 6(1)(f) GDPR, our legitimate interest in preventing repeated use of the one-time free trial.

6. Payment processing and subscriptions

Payment processing and the sale of the paid subscription are handled by Paddle as our Merchant of Record. For customers outside the USA and Canada this is Paddle.com Market Ltd, Judd House, 18-29 Mora Street, London, EC1V 8BT, United Kingdom; for customers in the USA, Paddle.com Inc; for customers in Canada, Paddle.com (Canada) Ltd. Legal basis is Art. 6(1)(b) GDPR.

When you start a checkout, we transmit your email address and your internal Beatfloe user ID to Paddle so that the purchase can be assigned to your account. All payment and billing data — payment method, card details, billing address, and tax-relevant information — is collected by Paddle directly from you and processed by Paddle under its own responsibility. We never receive or store your card details. Paddle's privacy policy is available at paddle.com/legal/privacy.

In return, Paddle notifies our server of the status of your subscription. We store the subscription status, the plan, the end of the current billing period, and the Paddle subscription and customer IDs, in order to unlock the application for you and to display your subscription status. Managing your subscription — changing the payment method, viewing invoices, cancelling — takes place in Paddle's customer portal, which we open for you from your account page.

7. Cookies

We only use cookies that are strictly necessary for operation. These are the session cookies that keep you signed in after logging in; without them, protected pages such as your account page cannot work. Storing them is permitted under § 25(2) no. 2 TDDDG without consent; the associated processing is based on Art. 6(1)(f) GDPR, our legitimate interest in a functioning login. During checkout, Paddle may additionally set cookies that are necessary to process the payment.

We do not use analytics, advertising, or tracking cookies, which is why this website has no cookie banner. You can delete cookies at any time in your browser settings; you will then be signed out.

8. Google user data (YouTube integration)

The Beatfloe desktop application uses the YouTube Data API with your explicit consent via Google OAuth. Processing is based on Art. 6(1)(a) GDPR; you may withdraw your consent at any time with effect for the future.

Data accessed: your YouTube channel identity, and the videos the app uploads for you — including their title, description, thumbnail, scheduling and privacy status.

How it is used: solely to provide the app's core feature — uploading your beat videos to your own channel, scheduling them, and updating their descriptions with your store link. All processing happens locally on your computer; your OAuth token is stored only on your device. We do not store Google user data on our servers.

Sharing: we do not share, transfer, or disclose Google user data to anyone. It is not used for advertising and not transferred to third parties.

You can revoke access at any time at myaccount.google.com/permissionsor by disconnecting YouTube in the app's settings, which deletes the local token.

Beatfloe's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. SSL/TLS encryption

This website uses SSL/TLS encryption for security. You can recognize an encrypted connection by "https://" in your browser's address bar.

10. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise these rights, contact us at info@beatfloe.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

12. Status

This privacy policy is current as of July 2026.