Privacy Policy

1. Who we are
blip-blop ("we", "us") is a browser-based audio sampler available at blipblop.app, operated by Blip Blop SIA, a company registered in the Republic of Latvia, EU.

2. What data we collect
• Email address — account creation and login
• Google account name & avatar — if you sign in with Google
• Audio files you upload — processed locally in your browser unless you save a session or submit to a Challenge
• Challenge submissions — final competition recordings, waveform previews, metadata, and judging notes
• Saved sessions/projects — if you choose to save your work (stored in Supabase)
• Download history — to enforce free-tier limits and track one-time credits
• Payment information — handled entirely by Stripe; we never see your card details
• IP address & browser info — standard server logs (Supabase/Vercel infrastructure)

3. How we use your data
We use your data to authenticate you, persist your sessions, enforce plan limits, and process payments via Stripe. We do not sell, share, or use your data for advertising.

4. Third-party services
• Supabase — authentication and database (supabase.com/privacy)
• Stripe — payment processing (stripe.com/privacy)
• Google — OAuth sign-in and optional Google Drive integration (policies.google.com/privacy)
• Vercel — hosting (vercel.com/legal/privacy-policy)

5. Audio files and Challenge submissions
Audio you load into blip-blop is processed in your browser using the Web Audio API. Files are not uploaded to our servers unless you save a session, use a server-backed feature, or submit to a Challenge. Challenge submissions are stored in private Supabase storage so Blip Blop admins and authorized judges can stream and download them for judging, moderation, fraud checks, prize fulfillment, and competition administration.

6. Cookies & storage
We use browser localStorage and sessionStorage to keep you logged in and remember your preferences. We do not use third-party tracking cookies.

7. Data retention
You may delete your account at any time by contacting us. Deletion removes associated account data from our database unless retention is required for legal, payment, dispute, fraud-prevention, tax, or competition administration reasons. Non-winning Challenge submissions may be deleted after the retention period stated in the relevant Challenge rules.

8. Your rights
Under GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing and to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) at www.dvi.gov.lv.

9. Children
blip-blop is not directed at children under 13. We do not knowingly collect data from children.

10. Changes
We may update this policy. Continued use of the service after changes constitutes acceptance. Material changes will be notified via the app.

11. Contact
privacy@blipblop.io