Privacy Policy
Last Updated: October 16, 2026
This Privacy Policy describes how Design Business Company Inc. ("Slip," "we," "us," or "our") collects, uses, and shares information when you use our website at sliplink.co and related services (the "Platform").
1. Information We Collect
Information You Provide
Account Information:
- Email address
- Username/display name
- Password (encrypted)
- Profile photo (optional)
Optional Fan Accounts:
- If you create one: your email address and password (held by our authentication provider), and the list of conversations saved to it: those you open while signed in, and those kept on a device you sign in on. Checkout still asks for your email.
Your Purchases Links:
- If you ask us to email you a link to Your purchases, we record a one-use code for it (only a one-way hash of the code), when it was made, and when it was used. It works once, within 24 hours, and only for the email address you bought with. The page says the same thing whether or not that address has bought anything, so no one can use it to learn who buys on Slip.
Creator Verification Information:
- Legal name
- Date of birth
- Government-issued ID
- Address
- Tax identification information (for payouts)
Payment Information:
- We do not collect or store credit card numbers. Card details are entered directly with our payment processor.
- Payment processing is handled by third-party payment processors specializing in adult-industry transactions
- We receive transaction confirmations, the last four digits of the card, and payout details
Purchases and Customer Lists:
- Your email address, collected when you make a purchase or join a creator's customer list. We use it for receipts, delivery, disputes, and messages from creators whose customer lists you joined.
- Your Telegram chat ID or push subscription, collected when you join a creator's customer list through Telegram or push notifications.
- Slip does not send SMS and does not collect phone numbers.
Creator Integrations:
- If a creator saves a Discord webhook to announce windows, we keep the webhook address to post there when they tap Post. Only Slip's servers read it; the creator sees its last characters.
Performer Records:
- Identity and consent documents for people who appear in creators' content. These are stored encrypted and accessed only for compliance.
Early-Access Applications:
- Name, email address, the handle you request, links to your profiles on other platforms, audience size range, the kinds of content you create, and country of residence. We use these only to review your application and contact you about it.
Content and Communications:
- Messages sent between fans and creators
- Media files (photos, videos, voice notes) shared through the Platform
- Support requests and communications with us
Information Collected Automatically
Device and Usage Information:
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Pages visited and features used
- Time and date of visits
- Referring URLs
Payment safety records:
- When you pay: the time and amount, how many payments you've made and how much you've spent in recent hours and days (so Slip can apply its spending limits), and, when our payment processor provides them, your bank's verification result (3-D Secure) and a token or fingerprint for your card (never the card number)
- When you tip: the confirmation you agreed to, with the time, your IP address, your browser's user agent and a one-way code made from your device
- When you open or save a file you bought: the time, kept as a record that it was delivered
- The spending limits and pauses you set, and the receipts and session statements we send you
- If a payment is disputed: the record of that payment we send our payment processor to answer it. If an account is barred after a dispute or a fraud report, we keep its email address and card token so the bar holds.
Cookies and Similar Technologies:
- Strictly necessary cookies: one recording that you passed the age gate, and a sign-in cookie for creators and fans with an account
- If you choose "Remember me on this device" at checkout or "Keep on this device" after buying, or open an emailed Your purchases link, a cookie holding a random code so this device can pay again without your email and open Your purchases (you can remove it at any checkout or from Your purchases)
Visit counts for creators: when you open a creator's link page or one of their content pages, we count the visit and note where it came from (a tagged link such as ?s=reddit, or the site that sent you). We identify a visit only by a one-way code made from your IP address and browser that changes every day, so the same visit isn't counted twice in a day and you can't be followed from one day to the next; no cookie is set for this. Your browser keeps where you came from, and the window you came through if the link had one, in session storage until you close the tab, so a purchase is credited to it. Creators see totals (visits, orders and sales by page, by source and by window), never who you are.
We do not currently run any third-party analytics or advertising cookies. If that changes we will update this policy and our Cookie Policy, and will ask for consent before setting any non-essential cookie.
2. How We Use Your Information
We use collected information to:
Provide and Operate the Platform:
- Process transactions and payouts
- Facilitate communications between users
- Verify creator identities
- Prevent fraud and unauthorized access
Improve and Develop:
- Analyze aggregate usage patterns from our own server logs
- Debug and fix issues
- Develop new features
Communicate With You:
- Send transaction confirmations
- Notify you of messages and responses
- Provide customer support
- Send service announcements
Legal and Safety:
- Comply with legal obligations
- Enforce our Terms of Service
- Protect against fraud and abuse
- Respond to legal requests
3. How We Share Your Information
With Other Users
- Creators see: your purchases, their amounts, and optional messages
- Your customer details are shared with the creator you bought from or whose customer list you joined, and that creator can export them. Your email address is shared with a creator only when you join their list (the Join form, the checkbox at checkout, or the button in your thread each say so), and only while you stay on it; buying alone does not share it. You can leave a creator's customer list by unsubscribing or by contacting support.
- Files you buy carry an identifier derived from your purchase record
- Fans see: creator profiles, responses, and content sent to them
- Display names and avatars are visible to users you interact with
- Creators do not see whether a fan has an optional fan account, or that account's email address
With Service Providers
We share information with third parties who help us operate:
| Category | Provider | Purpose |
|---|---|---|
| Payment processing | Third-party adult-industry payment processors | Card processing, payouts, chargeback handling |
| Application hosting | Vercel Inc. | Serving the Platform |
| Database, authentication, and media storage | Supabase Inc. | Account, message, and transaction data; account login and session management; photos, video, and voice notes |
| Transactional email | Resend, Inc. (from launch) | Receipts and notifications |
| Customer list email | Our email delivery provider | Messages from creators whose customer lists you joined |
| Telegram messaging | Telegram | Messages from creators whose customer lists you joined through Telegram |
| Creator announcements | Discord | A creator's window post to their own server, when they tap Post. It holds no information about you. |
| Web push delivery | Your browser's push service (for example Apple, Google, or Mozilla) | Notifications you subscribed to |
| Identity verification | Persona Identities, Inc. (from launch) | Creator age and identity checks |
| Analytics | None at this time | - |
These providers are contractually bound to protect your information and use it only for specified purposes. Email and identity verification are being connected before launch. We will update this list if we change or add a provider.
For Compliance Review by Payment Processors
Our payment processors must be able to check that content on Slip meets card-network rules. Their compliance reviewers have read-only access to content flagged in our moderation process, the record of our moderation decisions, and the creator accounts involved. They do not see the names, email addresses or descriptions given by people who report content, and they cannot change or remove anything.
For Legal Reasons
We may disclose information:
- To comply with legal process (subpoenas, court orders)
- To respond to government requests
- To protect our rights, privacy, safety, or property
- To enforce our Terms of Service
- In connection with a merger, acquisition, or sale of assets
With Your Consent
We may share information for other purposes with your explicit consent.
4. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Specific Retention Periods:
- Account data: Until account deletion + 30 days. Deleting your account from Your purchases, on a device that has opened a link we emailed you, removes your login, your list of saved threads, your email address and every device that opens your purchases, and your conversation links stop working. Your purchases stay in our transaction records for the period below, without your email address. The conversations themselves remain with the creator under the messages and content period below, and a creator who exported their customer list before you deleted keeps that copy. If an account was barred after a dispute or fraud report, its email address is kept while the bar applies.
- Transaction records, including payment safety records, tip confirmations, delivery records, dispute records, receipts and session statements: 7 years (legal/tax requirements and card disputes)
- Spending limits and pauses you set: while they apply, then 7 years with your transaction records
- An account barred after a dispute or fraud report: its email address and card token, for as long as the bar applies
- Creator verification records: Duration of account + 5 years (2257 compliance)
- Messages and content: Until deleted by user or account termination
- Early-access applications: 12 months from submission, or until you ask us to delete yours
- Server logs: 90 days
After retention periods expire, data is deleted or anonymized.
5. Your Rights and Choices
All Users
Access: Request a copy of your personal data
Correction: Update inaccurate information
Deletion: Request deletion of your account and data
Portability: Receive your data in a portable format
Objection: Object to certain processing activities
To exercise these rights, contact privacy@sliplink.co.
Cookie Preferences
The Platform sets only strictly necessary cookies, plus the "Remember me on this device" cookie when you choose it at checkout, tap "Keep on this device", or open an emailed Your purchases link. You can manage or clear these through your browser settings. See our Cookie Policy for the full list.
Communication Preferences
- Manage email notifications in account settings
- Unsubscribe from marketing emails via link in email
- Transactional emails (receipts, security alerts) cannot be disabled
6. Data Security
We protect your information with technical and organizational measures, including:
- Encryption in transit: every connection to Slip uses TLS (HTTPS).
- Encryption at rest: our database and stored media are encrypted at rest by our hosting providers.
- Passwords: stored only as salted hashes. We never see or store your password itself.
- Access controls: each account can reach only its own data, enforced in the database as well as the app. Staff access is limited to the people who run moderation and support, and every moderation decision is logged.
- Private media: photos have location and camera data removed before upload, and photos and voice notes are shown only through private, time-limited links.
- Abuse protection: sign-in, sign-up and other forms are rate-limited.
- Confidentiality: anyone who works on Slip with access to personal data is bound by confidentiality.
We review these measures as the Platform changes. If a security breach affects your personal information, we will notify you as the law requires.
No system is completely secure, and we cannot guarantee absolute security of your data.
7. International Data Transfers
We are based in the United States. If you access the Platform from outside the US, your information will be transferred to and processed in the US.
Access from the UK and the European Union may be restricted at launch.
For users in the European Economic Area (EEA), UK, or Switzerland, we rely on:
- Standard Contractual Clauses approved by the European Commission
- Your consent where applicable
8. Children's Privacy
Slip is not intended for anyone under 18 years of age. We do not knowingly collect information from minors. If we learn we have collected information from someone under 18, we will delete it immediately.
If you believe a minor has provided us with personal information, contact us at privacy@sliplink.co.
9. California Privacy Rights (CCPA)
California residents have additional rights:
Right to Know: Request information about data collection, use, and sharing
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt out of "sale" of personal information
Right to Non-Discrimination: Equal service regardless of privacy choices
We do not sell personal information as defined by the CCPA.
To exercise your rights, contact privacy@sliplink.co or call (971) 236-2828.
We will verify your identity before processing requests. You may designate an authorized agent to make requests on your behalf.
10. European Privacy Rights (GDPR)
If you are in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation:
Legal Bases for Processing:
- Contract performance (providing our services)
- Legitimate interests (security, fraud prevention, improvement)
- Legal obligations (tax, compliance)
- Consent (marketing, certain cookies)
Additional Rights:
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
- Right to restrict processing
- Right to object to automated decision-making
Data Protection Officer:
We have not appointed a Data Protection Officer. Our processing does not meet the thresholds in Article 37 GDPR. Direct all data protection inquiries to privacy@sliplink.co.
EU Representative:
We have not appointed an Article 27 representative. If we begin offering the Platform to data subjects in the EEA on a scale that requires one, we will appoint a representative and update this policy.
11. Do Not Track
Some browsers have a "Do Not Track" feature. We currently do not respond to Do Not Track signals, as there is no industry standard for compliance.
12. Third-Party Links
The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification (for material changes)
Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
Questions or concerns about this Privacy Policy?
Design Business Company Inc.
Email: privacy@sliplink.co
Address: 5027 Rosewood St, Lake Oswego, OR 97035, United States
For data protection inquiries: privacy@sliplink.co
This Privacy Policy is effective as of September 25, 2026.