SlopShutterfor YouTube
← Back to website

Privacy policy

For SlopShutter for YouTube and slopshutter.com. Last updated: 7 November 2026.

1. Controller and contact

Mike Remlinger, Lampennester Str. 4, 66292 Riegelsberg, Germany. Email: impressum [at] remlinger [punkt] net. Further contact details are available in the legal notice.

2. Website, hosting and connections

The community service runs on webspace provided by Febas, operated by Roman Baumgärtner, Ostlandstraße 5, 49565 Bramsche, Germany. Each connection sends technically necessary information to the server, such as your IP address, time, requested address, browser and connection information. This also applies when the extension downloads the community list.

The purposes are providing the service, maintaining operational security and preventing abuse. The legal basis is Article 6(1)(f) GDPR. Technical logs may be stored as part of the hosting service. Their retention depends on what is necessary for troubleshooting, security and compliance with legal obligations; information about the specific hosting procedures can be requested from the controller. The hosting provider may access this information as a technical service provider.

A data processing agreement under Article 28 GDPR has been concluded with the hosting provider.

3. Data in the extension

Personal blocks, exceptions, settings and the downloaded community list are stored locally in your browser. Filtering uses the video and channel information displayed on YouTube.

When enabled, the community list is downloaded at startup, approximately every six hours while your browser is running, and on manual request. The server receives the information necessary for the connection. You can disable community updates and filtering, and remove personal entries in Settings. Local data remains until it is deleted or the extension is removed; the exact behaviour also depends on your browser.

If channel information is unavailable after an explicit right-click request, the extension may retrieve public video details through YouTube’s oEmbed endpoint or fetch the video’s YouTube page without login cookies to identify the channel. This identifies the selected video to YouTube. The request concerns the video selected through the context menu.

4. Reports and removal requests

A channel report is sent when you choose the community review action in the extension. The first submission asks for your agreement. This choice and its timestamp are saved locally in your browser; later uses of the community review action submit directly. You can withdraw this choice under Privacy in the extension Settings. Removal requests continue to use a separate confirmation. The information processed includes the selected channel ID and any video evidence, any explanation, evidence URL, time and review status. Removal requests are also linked to the original list entry. Reports can be submitted directly from the extension. Please do not submit private information about yourself or others that is unnecessary for the explanation.

This information is used to process reports, review and maintain the community list, and handle correction requests. The legal basis is Article 6(1)(f) GDPR: the interest in a useful, accountable filtering service and in correcting inaccurate entries. Submission confirmation helps prevent unintended transfers.

The explanation and evidence URL are generally available only to authorised moderators. For listed entries, the public list contains the channel ID and the public decision note provided by the service or moderator. Moderators review the explanation and evidence privately. Public channel information may be personal data, particularly where a channel relates to an individual.

Reports and removal requests are supplied by the people submitting them. Public channel, video and comment information used for moderation comes from YouTube.

5. Abuse prevention, report counting and automatic listing

To limit requests, the service processes time-limited IP-based identifiers generated using a secret service key. Report counting uses a separate pseudonymous identifier for each IPv4 address or IPv6 /64 network. The raw IP address is not stored in the application tables for this purpose; technical hosting logs are separate. These pseudonymous identifiers group reports by network source.

The operator may optionally enable automatic channel listing after a configured number of distinct network sources. This feature is off by default. It evaluates reports from distinct network sources. Moderators decide removal requests. Automatic listings are marked and can be revoked. Manual review can be requested below the video or by contacting us.

The legal basis is Article 6(1)(f) GDPR: preventing duplicate reports and abusive requests, and administering the list. Report-count identifiers are deleted after 90 days. Request-limit identifiers expire after 15 minutes or one hour, depending on their purpose.

6. Moderation and retention

Unresolved reports are removed after 180 days. Private explanations and evidence URLs are removed from application tables 180 days after a decision. Rejected and revoked cases are removed no later than after 365 days. Records of moderation decisions and settings changes are retained for up to 365 days. Public IDs and public decision notes for listed entries are retained while the listing remains active. Expired application data is cleaned up during subsequent use of the service. Legal retention duties or the necessary preservation of evidence for specific legal claims may justify exceptions in individual cases.

Administrator sign-in uses a session cookie and server-side session data. Sessions last up to 12 hours, or 30 days with “Remember me”, and are revoked on sign-out. This processing supports secure administration under Article 6(1)(f) GDPR. The cookie is necessary for the requested sign-in service (section 25(2), no. 2 TDDDG).

7. YouTube data and external thumbnails

If configured on the server, the service retrieves public information through the YouTube Data API for moderation: channel image and name, subscriber count where available, up to three recent uploads, and samples of public viewer comments with displayed author names. Requests are sent from the server to Google and concern the channel or video under review. Information is cached for up to one hour; expired cache entries are cleaned up during subsequent use.

When additional information is opened in the moderation interface, thumbnails are loaded directly from YouTube/Google image servers. Google receives information including your IP address. The interactive extension preview uses local example illustrations only.

The purpose is accountable review of reports under Article 6(1)(f) GDPR. The recipient is Google; for users in the EEA, generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by affiliates and in third countries, particularly the United States, is possible. Details of Google's processing and transfer mechanisms are available in Google Privacy Policy and its Google’s information about international data transfers. YouTube's YouTube Terms of Service apply to YouTube.

Moderators can inspect keyword matches in sampled viewer comments.

8. Contact and external links

If you contact us by email, we process your contact information and message to handle your enquiry under Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR for contractual enquiries. Information is deleted after the matter is resolved once it is no longer needed to handle the enquiry, meet legal duties or address specific legal claims.

The website uses local styles and system fonts. External links are opened only when clicked; their operators are responsible for processing on the destination sites.

9. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). Where processing relies on legitimate interests, you may object on grounds relating to your particular situation under Article 21 GDPR. Any consent you have given may be withdrawn with future effect. You may also lodge a complaint with a data protection supervisory authority, particularly where you live, work, or believe an infringement occurred (Article 77 GDPR).

For enquiries and corrections to listings, contact impressum [at] remlinger [punkt] net. A case reference or the relevant channel/video link helps identify the matter. Information that we cannot associate with you cannot reliably be located using a name alone. Submitting a report is optional. Channel reports require the selected channel and a video or channel link. Removal requests also require an explanation.