Privacy Policy
Version 1.1. Effective date: 6 August 2026.
1. Scope
This Policy explains what personal data may be processed when using terialstreet.com, why it is processed and what rights visitors have.
2. Controller
The data controller is the natural person operating the independent international music and media project under the public pseudonym Terial Street. Privacy and data-rights contact: TerialStreet@gmail.com.
3. Data processed
- technical server logs: IP address, request time, URL, response code, browser and operating system;
- comments submitted voluntarily: display name, original text, selected language, time and relationship to another comment;
- one-way hashes derived from the IP address and user agent for rate limiting, moderation and abuse prevention;
- data voluntarily sent by email;
- technical data sent to YouTube only after the visitor clicks the player-loading button.
4. Purposes and legal bases
- operation, security and diagnosis of the site — legitimate interests, Article 6(1)(f) GDPR;
- publishing, moderating and translating a comment after the visitor accepts the discussion rules — consent, Article 6(1)(a) GDPR;
- rate limiting and preventing abuse — legitimate interests, Article 6(1)(f) GDPR;
- responding to correspondence and handling legal claims — Article 6(1)(f) GDPR; where a message requests steps toward an arrangement, Article 6(1)(b) GDPR;
- loading YouTube — one-time consent expressed by clicking, Article 6(1)(a) GDPR.
5. Cookies and browser storage
After a language is selected, the functional terial_lang cookie may be stored for up to 365 days. The language and a technical PWA registration timestamp may remain in localStorage until site data is cleared; dismissal of the language picker may remain in sessionStorage until the browser session ends. The hosting infrastructure may place a strictly necessary load-balancing cookie for the session. The site does not use advertising cookies, profiling, analytics pixels or automatically loaded YouTube content.
6. YouTube
The privacy-enhanced player (youtube-nocookie.com) loads only after a click. Google/YouTube may then receive the IP address and other technical data. The site does not store that consent, so the player must be loaded again on a later visit.
7. Recipients and international transfers
Data may be processed by OVHcloud as hosting provider, Google as Gmail provider and — after a click — YouTube. Transfers outside the EEA may rely on an adequacy decision, Standard Contractual Clauses or another GDPR-approved mechanism.
8. Retention
Technical logs are retained no longer than they remain available through the standard OVHcloud service and are needed for security or diagnosis. Approved comments and their translations remain visible until removed or until the relevant material is deleted. Pending, rejected and spam comments, together with security hashes, are retained only as long as reasonably required for moderation and abuse prevention. Ordinary correspondence is deleted within 12 months after the matter is closed, unless longer retention is necessary for a legal obligation or legal claims.
9. Voluntary provision, profiling and rights
No personal data must be provided merely to view the site. Email and loading YouTube are voluntary. The site does not make automated decisions or profile visitors.
Where applicable under the GDPR, visitors may request access, correction, deletion, restriction, objection, portability and withdrawal of consent without affecting prior lawful processing. Contact: TerialStreet@gmail.com. A complaint may be lodged with the President of the Personal Data Protection Office in Poland or another competent supervisory authority.
10. Children, security and changes
The site is not intended to collect children's data deliberately. Reasonable technical and organisational safeguards are used. This Policy is updated when site functions or processing practices change; a new version applies from the date stated at its beginning.
Anonymous visit statistics
Only after you consent, the site stores a random visitor and session identifier, page path, language, device type, referral source and active viewing time. Raw IP addresses are not stored and administrator visits are excluded. Records are automatically deleted after 180 days.