privacy

what we hold

• Your email address. It is how you sign in and the only way we can reach you. If you sign in with Google or Apple we receive the email address and name that provider gives us, and nothing else.
• Your page. Your handle, display name, bio, niches, links, the videos you add and the numbers on them, and any image you upload. Once you publish, all of it is public — that is the entire point of the product — and it is served to anyone with the link.
• Billing records. Stripe holds your card. We store the customer and subscription identifiers it gives us, what plan you are on and whether it is paid. We never see or store card numbers.
• Platform connections. If you connect YouTube, we keep the access and refresh tokens that connection issues, encrypted at rest, and use them for one thing: reading the public view, like and comment counts on the videos you chose. We do not post as you and we cannot read anything you have not published.
• Counts. How many times your page was viewed and how many times each of your links was clicked. See below.

analytics, and why there is no cookie banner

There is no banner because there is nothing to consent to. We set no analytics cookies, use no third-party analytics service, and there is no advertising or tracking pixel anywhere on the site.

To tell two views apart without identifying anybody, the visitor’s IP address and browser user-agent are combined into a one-way hash. The key for that hash is derived fresh from the UTC date, so the moment the day rolls over, yesterday’s hashes cannot be matched to today’s — by us or by anyone who obtained the database. The raw IP address exists only as a variable while the request is being handled. It is never written to a column, a log or a query string.

If a browser sends DNT: 1 or Sec-GPC: 1, the request is discarded before any of that happens and the visit is not counted at all.

who else processes it

Only what the product cannot run without, and each one for a single named job:

• Supabase — the database, sign-in, and the storage your images sit in.
• Vercel — hosting. It sees the requests that reach the site.
• Stripe — payments, and the card details we deliberately never touch.
• Resend — the emails we send you: sign-in links and handle-expiry warnings.
• Google — only if you connect YouTube, and only for the counts on the videos you chose.

We do not sell your data, we do not share it for advertising, and we do not hand it to anyone not on this list except where the law requires it.

how long it is kept

• Your page, for as long as your account exists. If you stop paying, the page is paused rather than deleted — the address keeps working, the content is hidden, and nothing is thrown away.
• An unpublished handle, for 30 days. Claim one and never publish, and it goes back in the pool so someone else can have it. We email you twice before that happens.
• Counts, as daily totals. The hashes behind them stop being correlatable the day after they are written.

what you can ask for

A copy of everything we hold about you, a correction, or deletion of your account and its contents. Email hello@ugc.name and we will do it. You do not need to give a reason, and asking will not affect your account while we are working on it.

If you are in the UK or the EU, you also have the right to complain to your national data protection authority.

changes

If this page changes in a way that affects what we collect or who we share it with, we will email you before it takes effect. Smaller corrections get a new date at the top and nothing else.