Privacy Policy

Effective Date: December 17, 2025

1. Introduction

Blacklight ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

Blacklight is co-headquartered in Brooklyn, NY (USA) and Berlin, Germany. We comply with applicable data protection laws including the General Data Protection Regulation (GDPR) for European users.

2. Information We Collect

Account Information

When you create an account, we collect:

Profile Content

Content you choose to upload to your EPK, including:

Usage Data

We automatically collect:

3. IP Address Handling

We collect IP addresses for security and analytics purposes. How we use IP data depends on your cookie consent:

IP addresses are retained for 24 hours for rate limiting and security purposes, after which they are deleted or anonymized.

4. Analytics and Tracking

We collect analytics to help you understand how visitors interact with your EPK:

If you enable Google Analytics integration on your EPK (optional), Google's privacy policy applies to that data collection.

5. Cookies

Essential Cookies

These cookies are necessary for the Service to function and cannot be disabled:

Analytics Cookies

These cookies help us understand how visitors use the Service. They are only set if you accept them:

Your cookie preference is remembered for 12 months. You can change your preference at any time through the cookie banner.

6. Consent Records

When you provide consent (for example, agreeing to our Terms or accepting cookies), we store a record of that consent including:

Consent records are retained for the duration of your relationship with Blacklight plus 3 years, as required by GDPR.

7. Third-Party Services

We use the following third-party services to operate Blacklight:

Each of these services has their own privacy policy governing how they handle your data.

8. How We Use Your Information

We use your information to:

9. Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

10. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights:

Data Export

You can export all your data at any time through your account settings. Your export will include:

Account Deletion

You can delete your account at any time. Account deletion will permanently remove all your data, including your profile, uploaded content, and analytics. This action cannot be undone.

We process deletion and data export requests within 30 days.

11. Data Retention

We retain your data for as long as your account is active. Specific retention periods:

When you delete your account, all associated data is permanently deleted.

12. Security

We implement appropriate technical and organizational measures to protect your data, including:

While we strive to protect your data, no method of transmission over the Internet is 100% secure.

13. International Transfers

Your data may be processed in the United States, Germany, or other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with GDPR.

14. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

privacy@blklight.net