Legal
Privacy Policy
Last updated 5 October 2026
This describes what monolitbeatz.com actually collects, why, and for how long. The data controller is Boris Miscenco, trading as Monolit Beatz, based in the United Kingdom — contact monolitbeatz@gmail.com for anything in this policy.
1. Contact form
If you use the contact form, we store your name, email address, and message in our database (hosted on Supabase) so we can reply. Each email address can send a limited number of messages per hour to stop spam.
Lawful basis: our legitimate interest in answering messages sent to us. Kept for: 2 years after your last message, or less if you ask us to delete it.
2. Buying Sledge Distortion
Checkout itself happens on Lemon Squeezy, our Merchant of Record — they take your payment details directly and we never see or store your card information. Lemon Squeezy also emails you the download and your receipt.
After an order, Lemon Squeezy sends us the order record and we store it as received. That includes your name and email address, their customer ID for you, whether you opted in to marketing, and the order details: order number, product, price, tax, currency, refund status, and receipt link. We use it to keep sales records, answer support questions, and handle refunds.
Lawful basis: performing the purchase contract, and our legal obligation to keep business and tax records. Kept for: 6 years after the order, as UK tax rules require. See Lemon Squeezy's own Privacy Policy for how they handle your payment and checkout data.
3. Analytics and cookies
Google Analytics (only if you accept). The homepage can use Google Analytics 4 to measure visits and how the music player and links are used. It stays switched off — no Google Analytics script, no request to Google, no cookies — until you click Accept in the cookie banner. If you accept, Google sets _ga cookies (kept up to 2 years) and receives your IP address and browser details, and data is kept in Google Analytics for up to 14 months. You can change your mind at any time with Cookie settings in the homepage footer; declining removes those cookies. Lawful basis: your consent.
Our own play and click counts. Separately, our server counts track plays and a few button clicks on the Sledge Distortion page. Each count records only which track or button and when — no name, email, IP address, or cookie — so it can't be linked to you. Lawful basis: our legitimate interest in knowing what's used.
Storage needed for the site to work. Your browser's local storage keeps the music player's track list (refreshed daily) and your cookie choice. If you arrive at the Sledge Distortion page from a link with campaign tags (utm_ parameters), they're kept for that browser session and passed on to checkout so we can see which links lead to sales. The Sledge Distortion page loads Lemon Squeezy's checkout script, which may set cookies needed to run checkout. These don't require consent because the site or checkout needs them.
4. Who else sees your data
- Lemon Squeezy — payment processing and order fulfilment (Merchant of Record).
- Supabase — hosts our database (contact messages, order records).
- Vercel — hosts the website and its backend functions; like any web host, it processes your IP address in server logs.
- Cloudflare — hosts audio files and cover art.
- Google — Google Analytics (only with your consent) and Google Fonts, which serves the site's fonts and so receives your IP address when a page loads.
- YouTube (Google) — when the music player is in YouTube mode, it loads YouTube's player from youtube.com, which receives your IP address and may set its own cookies. Videos in the Videos section only load when you click one, from YouTube's privacy-enhanced youtube-nocookie.com domain.
Some of these providers process data outside the UK, including in the United States. Where they do, they rely on safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
We don't sell your data, and we don't share it with anyone beyond what's needed to run the site and fulfil orders.
5. Your rights
Under UK data protection law you can ask us to access, correct, or delete the personal data we hold about you, to restrict or object to how we use it, to send it to you or another provider, or to tell you where it came from. Where we rely on your consent, you can withdraw it at any time. Email monolitbeatz@gmail.com and we'll respond within one month. For data Lemon Squeezy holds directly (like your payment details), contact them instead.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to sort it out first.
6. Children
This site isn't directed at children and we don't knowingly collect data from anyone under 16.
7. Changes to this policy
We'll update the date at the top of this page whenever this policy changes.