Privacy Policy
Last updated 15 November 2026
This Privacy Policy explains how we collect, use and protect your personal data when you visit solypse.app, join the Heirs of Sin waitlist, or sign in to the Heirs of Sin app. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and applicable data protection law.
In short: we keep as little as we can. Members sign in with Patreon, so we never see a password or a payment card. We use one sign-in cookie and no tracking, advertising or analytics cookies. Our statistics are totals; the list of videos you start is kept only to award your seals.
1. Who is responsible for your data
The controller of your personal data is Soluna Visuals, Grafično oblikovanje in vizualno komuniciranje, Alicia Simonič s.p. (short name: Soluna Visuals, Alicia Simonič s.p.), Cesta v Laško 19, 3000 Celje, Slovenia, trading as Solypse (“we”, “us”, “our”), the operator of solypse.app and the producer of Heirs of Sin.
Entered in the Slovenian Business Register (PRS) · Registration no. 9922229000 · Tax no. 37519972 · Not liable for VAT.
For any question about this policy or your personal data, contact us at hello@solypse.app, in English or Slovenian.
2. What we collect, why, and on what legal basis
| Data | Why | Legal basis |
|---|---|---|
| Waitlist: your email address, the date and page of your sign-up, and your approximate country (derived from your connection by our host). | To email you once when Heirs of Sin opens, and with occasional updates about it. | Your consent (Art. 6(1)(a) GDPR). |
| Members: your Patreon user ID, your display name, your profile picture, your email address as verified by Patreon, whether you are a member of our Patreon and at which tier, and the access keys Patreon gives us to check this. Also the username you choose in the app (suggested from your Patreon name, yours to change), when you last changed it, and the language you read the app in. | To sign you in, show your username and picture, write to you in your language, and open the episodes and extras your membership includes. We re-check your membership with Patreon about once a day, and straight away when you join or upgrade. | Performance of our agreement with you (Art. 6(1)(b) GDPR). |
| Comments and likes: what you write under a video, any GIF you add, whether you marked it as a spoiler, your replies, the comments, videos and Whispers posts you like, and reports you send. Your username and picture are shown with your comments. | To run the comment sections, show who wrote what, and keep them safe (we may hide comments that break our Terms). | Performance of our agreement with you (Art. 6(1)(b) GDPR). |
| Seals and watch history: which videos you start and when, together with your device’s local hour and date at that moment, the date you joined our Patreon, whether you have been on a paid tier, and the seal you choose to show. | To award seals (for example for watching every episode, or watching late at night in your own time zone). Other members who tap your name see your username, the month you joined, and the seals you have earned. | Performance of our agreement with you (Art. 6(1)(b) GDPR). |
| Reminders: your email address as verified by Patreon, and the videos or galleries you tap Remind me on. | To send you one email when each of them is released. We never use it for anything else, and you only get an email for something you asked about. | Your request (Art. 6(1)(b) GDPR). |
| New video emails: whether you chose to be emailed about new videos, and your email address as verified by Patreon. | To email you when a new episode, intro, scene or gallery goes live, only if you switched it on (at your first sign-in or in Settings), until you switch it off or use the link in any of these emails. | Your consent (Art. 6(1)(a) GDPR). |
| Whispers alerts: whether you switched on Alerts on @whispers, and your email address as verified by Patreon. | To email you when a new Whispers post goes up, until you switch alerts off (on the Whispers page, or with the link in any alert email). | Your request (Art. 6(1)(b) GDPR). |
| Viewing statistics: counts of plays per video, per day and per country, and a count of how many people watched each day. | To understand what members enjoy and plan the show. | Our legitimate interest in running the service (Art. 6(1)(f) GDPR). |
| Emails we send you: for each email, the address it went to, which kind of email it was, when it was sent, and whether it was delivered, opened or clicked, as reported by our email provider. Opens are detected by a small image in the email, clicks by a short redirect on its links. | To see whether our emails arrive and are useful, and to stop sending to addresses that bounce or complain. | Our legitimate interest in sending the emails you asked for reliably (Art. 6(1)(f) GDPR). You can object at any time by writing to us, block it by not loading images, or stop the emails with the unsubscribe link. |
| Technical data: your IP address, browser type and the time of each request. | To deliver pages and video, and to protect the service from abuse. | Our legitimate interest in a safe, working service (Art. 6(1)(f) GDPR). |
How the viewing statistics stay anonymous. We count plays as totals. To count how many different people watched on a given day, we turn your member ID and that day’s date into a one-way code that cannot be turned back into your ID and cannot be linked from one day to the next. These codes are deleted after two days. Separately from these statistics, we keep the list of videos you have started so we can award seals (see the table above); it is never sold or used for advertising.
We do not use your data for advertising, profiling or automated decision-making, and we never sell or rent it. We never receive your password, your payment details or your address.
3. Memberships and payments
Memberships are run on Patreon. Patreon Inc. processes your membership, billing, renewals, cancellations and refunds as an independent controller, under its own privacy policy. When you sign in, Patreon tells us only what is listed in section 2.
4. Who receives your data
- Cloudflare, Inc. hosts solypse.app, its database and the videos (Cloudflare Stream), under a data processing agreement. When a member taps See translation under a comment, Cloudflare’s AI service translates the text of that comment, and we keep the translation so it is made only once.
- Patreon Inc., when you sign in or manage your membership (see section 3).
- GIPHY, Inc. supplies GIFs in comments. Your searches go to GIPHY through our server, without your name or ID; the GIF images then load from GIPHY, which receives your IP address and technical browser data.
- Esri supplies the map tiles in the app. Your browser loads them directly, so Esri receives your IP address and technical browser data.
- Google Fonts (Google Ireland Ltd.) supplies the typefaces, and jsDelivr supplies code libraries on the invitation page. They receive your IP address and technical browser data in order to deliver those files.
- Resend (Plus Five Five, Inc.) delivers all our emails: reminders, new-video and Whispers alerts, and the waitlist email when the app opens. It receives your email address and the email itself, and reports whether it was delivered, opened or clicked, solely to deliver it, under a data processing agreement.
We will not share your data with anyone else unless required to by law.
5. International transfers
Some of these providers process data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by an adequacy decision (such as the EU–U.S. Data Privacy Framework) or by Standard Contractual Clauses approved by the European Commission.
6. How long we keep it
- Waitlist: until you withdraw your consent or unsubscribe, or until we stop sending updates, whichever comes first. We then delete it within 30 days.
- Sign-in: up to 90 days after you sign in. It ends sooner if you sign out, or if Patreon tells us your membership has ended.
- Viewing statistics: the totals are kept; the one-day viewer codes are deleted after two days.
- Comments, likes, seals and watch history: kept even if your membership ends, so your seals are still yours when you come back. You can delete any of your comments yourself at any time, and you can ask us to delete the rest by writing to hello@solypse.app.
- Email records (delivered, opened, clicked): 12 months, then deleted automatically.
- Technical data held by our host is kept only for the short period needed for delivery and security.
7. Cookies and storage on your device
We use only what the service needs to work, so we do not ask for cookie consent (Art. 5(3) of the ePrivacy Directive).
| Name | What it does | How long |
|---|---|---|
hos_session (cookie) | Keeps you signed in. | Up to 90 days, or until you sign out. |
hos_oa (cookie) | Protects the sign-in with Patreon from being hijacked. | 15 minutes, during sign-in only. |
hos_hbind (cookie) | Finishes a sign-in that started in the home-screen app, only in the browser that started it. | 15 minutes, during sign-in only. |
| My List, saves, follows, your subtitle choice, where you stopped in a video, the install reminder, and the page you were on (browser storage) | Remembers your choices in the app. | Kept on your device and never sent to us. Clear them in your browser settings at any time. |
| The language you chose (browser storage) | Shows the app in your language. | Kept on your device. It is also saved with your account, so our emails reach you in the same language. |
The operator’s own editing tools use two further cookies (CF_Authorization and hos_preview) that are never set for members or visitors. Before the app opens, invited guests get one more (hos_enter) that lets them through the invitation; it lasts up to 90 days.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to its processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.
To exercise any of these rights, email hello@solypse.app. We will respond within one month. Every alert, new-video and waitlist email contains a link to unsubscribe; reminders you tapped Remind me on are sent once and never again. You can also disconnect our app from your Patreon account in your Patreon settings at any time.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. Our lead authority is the Information Commissioner of the Republic of Slovenia (ip-rs.si).
9. Notice for residents of the United States
We do not sell or share personal information for cross-context behavioural advertising. Because Heirs of Sin includes content for adults, membership may reveal personal interests; we treat this information as sensitive, use it only to provide the service, and never disclose it to anyone except the providers listed above.
10. Adults only
Heirs of Sin is for adults aged 18 and over, or the age of majority where you live if that is higher. We do not knowingly collect personal data from anyone younger. If you believe a minor has given us their data, contact us and we will delete it.
11. Security
We protect your data with appropriate technical and organisational measures. Connections are encrypted (HTTPS). Sign-in sessions are stored only as one-way codes, so our database alone cannot be used to sign in as you. Access to our tools is restricted to the operator and protected by a second sign-in. Videos play through short-lived signed links.
12. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, with the date of the latest update at the top. If we make material changes to how we use your data, we will tell you, and ask for your consent again where required.
Back