Privacy Policy
What we collect
- Account details: your email address and username.
- Your password: stored only as a bcrypt hash. We never see or store the password itself.
- Agreement record: the date you accepted the terms and confirmed you are 18 or older, and which version you accepted.
- Activity: the clips you like, the comments you write, and when.
- Server logs: ordinary web request logs, kept briefly for debugging.
We do not ask for your real name, date of birth, address, phone number, or any payment details. There is nothing to pay for.
What we do not do
- We do not sell or rent your data.
- We do not run advertising or third-party analytics trackers.
- We do not build advertising profiles.
Cookies and local storage
We do not use tracking cookies. When you sign in, your session token is kept in your browser's local storage so you stay signed in. Signing out removes it. That is the only thing we store on your device.
Who else touches your data
We rely on a small number of providers to run the service:
- DigitalOcean — hosting and the database.
- Resend — sending email, if and when we send any.
- Namecheap — domain and DNS.
These providers process data on our behalf in order to run the service. We do not share your data with anyone else except where we are legally required to.
Where your data lives
Our servers and database are hosted in the United States. If you are accessing the service from elsewhere, your data is transferred there.
How long we keep it
Account data is kept while your account exists. Ask us to delete it and we remove your account, likes, and comments. Deletion is permanent; we cannot restore an account afterwards.
Your choices
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email [email protected] from the address on the account and we will action it.
Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA. We will honour those requests regardless of where you are.
Children
This service is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a child has created an account, email us and we will delete it.
Security
Passwords are hashed with bcrypt. Traffic is served over HTTPS, and the connection between the application and its database is encrypted and certificate-verified. No system is perfectly secure, and we cannot guarantee absolute security.
Changes
If we change this policy, the version identifier at the top changes. Material changes will be announced on the site.