Legal
Privacy Policy
This page is maintained by Slick Media to explain, in plain English, what we collect and why. It is our own statement of practice, not an independent certification.
Last updated 30 July 2026
Who we are
Slick Media operates this software discovery platform. We are the data controller for personal data processed through it. To reach our data protection contact, use the contact form and choose “Privacy & data protection” — requests raised there are routed to the right person and tracked.
What we collect
- Account data — name, email address and password credentials handled by our authentication provider, plus your saved lists, collections and alert preferences.
- Offer and code activity — which offers you view, unlock or redeem, and the codes issued to you. This is required to give you a code, to prevent one person draining a limited pool, and to reconcile redemptions with partners.
- IP address and approximate location — captured when you unlock or reveal a code. We use it to validate that a request is genuine, to prevent scraping and abuse, and to serve region-correct offers (for example Google Workspace codes and region-specific partner discounts). Approximate location means country/region level, derived from the IP address — we do not use GPS data.
- Messages you send us — the content of contact and feedback submissions.
- Measurement data — see “Analytics and cookies” below.
Why we can use it (legal bases)
- Contract — creating your account, issuing codes and running the member features you asked for.
- Legitimate interests — securing the platform, preventing fraud and code abuse, and keeping partner reporting accurate.
- Consent — optional analytics cookies and any marketing emails you opt into. You can withdraw consent at any time.
Analytics and cookies
We use Google Analytics and Google Search Console to understand how the platform is found and used. Analytics cookies only load if you accept them; until then measurement storage stays denied. Essential cookies — sign-in sessions, security and abuse prevention — are always active because the platform cannot function without them.
Search Console reports on aggregated search performance and does not set cookies on this site. Full cookie details.
Sharing
We share data only with the providers that make the platform work: our hosting and database provider, our authentication and transactional email providers, and Google for analytics and, where a partner programme requires it, code assignment records. We keep personal data out of partner-facing spreadsheets and reporting — partners receive redemption events, not your name or email address. We never sell personal data.
Retention
Account data is kept while your account is open and deleted on request. Code redemption records, including the IP address and approximate location captured at the time, are retained for up to 24 months for fraud prevention and partner reconciliation, then deleted or anonymised. Contact messages are kept for up to 24 months.
Your rights
If you are in the UK or EEA you can request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can also withdraw consent for analytics at any time. Raise any of these through the contact form under “Privacy & data protection” — we aim to respond within 30 days. If you are not satisfied you may complain to the UK Information Commissioner’s Office or your local supervisory authority.
Security
Access to member data is restricted by role, sensitive code data is protected by row-level database policies, and code reveals are rate-limited and logged. No system is perfectly secure, but we design for least privilege. To report a vulnerability, use the contact form and choose “Security report”.
Changes
We will update this page when our practices change and revise the date above. Material changes affecting members will be notified in-product or by email.