Privacy

Who is responsible

Jasper de Boer, Hilversum, the Netherlands, Chamber of Commerce number 59221070, is responsible for the data on this site. Reach us at j@sperdeboer.nl.

What we collect and why

Your email address. It is the only thing the checkout asks for. We use it to send you the link to your seconds, a note when your seconds have been made, and a note when the film reaches your seconds if you chose to carry on from your neighbour. Stripe sends the receipt for the payment itself. We also add you to the film’s own mailing list, which is where news about the film goes, and you can leave it from any of those emails.

Your prompt, your credit and your clip. We need all three to make your seconds and to put them in the film. The clip and the credit are public: the clip is the film, and the credit is in the picture and under it, with the link you gave, while your seconds play. Your prompt is not shown on the site today. Write it as something you would be content to have read anyway.

Clicks on your link. When a visitor follows the link in your credit, we count it: which seconds, which page of the site, which address, and when. Nothing about the visitor. The count is shown to you on your own page, and it stays with your seconds.

Payment. Stripe handles it. We see the amount, the state of the payment and Stripe’s reference for it. We never see your card.

Server logs. Like every server, ours logs requests with the address they came from. We keep those briefly and use them only to keep the site running and secure. The one address we store ourselves is the address a wrong admin password came from, which is how guessing is made to slow down.

A note to the owner. When seconds are reserved, sold, or given up because a checkout ran out, the owner gets a Telegram message with the seconds, the price and your email address, so somebody knows it happened.

Who handles it

These companies process data for us. One line each, and where they run.

• Stripe takes the payment and sends the receipt. United States.
• Loops sends our email and holds the mailing list. United States.
• Replicate runs the video model. Your prompt goes there, and so does the clip before yours if you continue from it. Your email does not. United States.
• Cloudflare answers the site’s DNS and stores the video. Worldwide.
• Simple Analytics counts visits, without cookies and without personal data. The Netherlands.
• Telegram carries the note to the owner when seconds are sold. Worldwide.
• [HOSTING PROVIDER] runs the server and the database. European Union.

Stripe, Loops and Replicate are in the United States, so what goes to them leaves the European Union.

Cookies

None for visitors. Simple Analytics counts visits without cookies and without personal data, so there is no banner to click away. One cookie exists on this site, for the site’s own admin login, and only the admin ever gets it.

How long

The clip, the prompt and the credit: for as long as the film exists. Your email address: for as long as your seconds are in the film, or until you ask us to remove it. Logs: briefly. The address of a wrong admin password: until the right one is entered from it.

Your rights

You can ask to see what we hold about you, have it corrected, have it deleted where the law allows, or object to our using it. Write to j@sperdeboer.nl and we answer within a month.

One honest limit. Your email address and your credit we can remove at once. The clip is harder. Once your day to change it is up, the seconds after yours may have been made from it, so taking it out of the film may not be possible. We say that here rather than promise something we cannot do.

If you think we handle your data wrongly, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Contact

j@sperdeboer.nl. What you buy and what it costs is on the terms page.