Privacy Policy

Applies to SUNA at suna.soluna-artworks.com · Last updated 13 October 2026

1. Controller

The controller responsible for the processing of personal data in connection with SUNA (the "Service") is:

Soluna Visuals, Grafično oblikovanje in vizualno komuniciranje, Alicia Simonič s.p.
Cesta v Laško 19, 3000 Celje, Slovenia
Registration no. 9922229000 · Tax no. 37519972
Email: hello@soluna-artworks.com

(the "Operator", "we", "us"). "Member" or "you" refers to any person who uses the Service.

2. Personal data processed

We process the following categories of personal data:

• Patreon account data. When you sign in with Patreon, Patreon transmits your account identifier, display name, profile image, membership tier, pledge status and amount, and membership start date. This data is used to authenticate you, grant access corresponding to your membership, display your profile and badges, and verify your membership once per day so that access ends when the membership ends. It is stored in your login session together with the Patreon access tokens required for that verification.
• Session identifier. A strictly necessary cookie, and an identical session key in your browser's local storage, keep you signed in.
• Viewing progress. A record of the titles you have completed, consisting solely of your member identifier and the video identifier. It is used to display your progress and badges and can be erased at any time via "Reset my progress" in your profile.
• User content. Comments, replies and GIFs you post, together with your display name, profile image and the time of posting. User content is visible to other Members on the relevant title page.
• Likes. The titles you have liked and the time of each like. Other Members see only the total number of likes.
• Notifications addressed to you, for example when another Member replies to your comment.
• Reports. When you report a comment, the selected reason is stored for the purpose of review.
• Technical data. IP address and browser information, processed by our hosting provider Cloudflare to deliver the Service securely and to prevent misuse.

The following information is stored exclusively in your browser's local storage and is not transmitted to us: your personal list ("My list"), playback positions, titles you have already seen, and display preferences.

We do not process payment or billing data, your email address, or data about your activity on other websites.

3. Statistical data

We record aggregate figures: plays per title, plays per country (derived from the connection and not stored with any individual) and the number of Members who watched on a given day. To count each Member only once per day, a one-way hash of the member identifier and the date is stored and deleted after two days. The remaining figures cannot be attributed to any individual.

4. Purposes and legal bases

• Performance of a contract (Art. 6(1)(b) GDPR): authentication, membership verification, viewing progress, likes, user content and notifications, as these are necessary to provide the Service.
• Legitimate interests (Art. 6(1)(f) GDPR): security of the Service, prevention of misuse, handling of reports, notification of the Operator about new comments, and aggregate usage statistics. Our legitimate interest lies in operating a secure, moderated and well-maintained Service.

5. Recipients

Personal data is not sold. It is disclosed only to the following service providers, to the extent required:

• Patreon, Inc.: membership management, authentication and payment processing (privacy policy).
• Cloudflare, Inc.: hosting, database, and delivery of images and video (privacy policy).
• GIPHY: only when you use the GIF picker. Search terms are forwarded via our server without identifying you; GIF images are loaded directly from GIPHY's servers, which receive your IP address in the process (privacy policy).
• Spotify AB (Sweden): only when you press "Listen" on a song. The Spotify player is then loaded from Spotify's servers, which receive your IP address and may set their own cookies under Spotify's policies. Nothing from Spotify loads until you choose to play (privacy policy). Links to Apple Music, YouTube Music and DistroKid open those services in a new tab.
• Discord, Inc.: the text of new comments and the author's display name are transmitted to a private Discord channel to notify the Operator (privacy policy).

Fonts are hosted on our own servers; no data is transmitted to Google for this purpose.

6. Transfers to third countries

Patreon, Cloudflare, GIPHY and Discord are established in the United States. Transfers of personal data to these recipients are based on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Art. 45 and Art. 46 GDPR).

7. Retention

• Login sessions expire after approximately 30 days, or no later than one day after your membership ends.
• Viewing progress, likes and notifications are retained for the duration of your membership, or until you delete them or request their erasure.
• User content is retained until it is deleted by you or by us. Upon request, we will erase all user content associated with your account.
• Aggregate statistics do not contain personal data and are retained.

8. Cookies and local storage

The Service uses a single strictly necessary cookie for authentication and stores the items listed in section 2 in your browser's local storage to provide the functions you request. No analytics, advertising or tracking technologies are used. The Spotify player (section 5) is loaded only after you press "Listen", at your request. Consent is therefore not required under Art. 5(3) of Directive 2002/58/EC.

9. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). Requests may be sent to hello@soluna-artworks.com and will be answered within one month.

You also have the right to lodge a complaint with a supervisory authority. In Slovenia, the competent authority is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana.

10. Minors

The Service is intended exclusively for persons who have reached the age of 18. We do not knowingly process personal data of minors. Should we become aware that a minor has accessed the Service, the associated personal data will be erased without undue delay.

11. Provision of data

Providing the Patreon account data described in section 2 is necessary to use the Service. Without it, access cannot be granted. No automated decision-making within the meaning of Art. 22 GDPR takes place.

12. Amendments

We may amend this Privacy Policy to reflect changes to the Service or to legal requirements. The current version is always available on this page, with the date of the last update shown above. Please also refer to our Terms of Use.

Questions regarding data protection: hello@soluna-artworks.com