Privacy Policy

What we collect

We collect account and sign-in details supplied by Google or Discord (such as name, email, profile image, provider identifier, and verification status); profile details you choose to add; videos, thumbnails, captions, comments, likes, follows, blocks, reports, bookmarks, and direct-message metadata and attachments.

We also collect technical and service data needed to operate and secure Smolish: session cookies, IP address and user-agent information, device and anti-fraud hashes, upload and playback events, security and rate-limit records, notification subscriptions, and application logs. We create recommendation and moderation signals from your activity and from public video content. Direct-message contents and media are end-to-end encrypted where that feature is available; we store encrypted ciphertext rather than the readable content.

Why we use it and our legal bases

Where the GDPR applies, we process data to provide the service and your account (contract), keep Smolish secure and prevent abuse, operate recommendations, measure performance, moderate content, and defend legal claims (legitimate interests), comply with legal obligations, and send push notifications when you enable them (consent). You may disable push notifications in Settings. Where consent is required, you may withdraw it without affecting prior processing.

Who receives data

We use service providers to run Smolish, including authentication providers (Google and, if enabled, Discord), Cloudflare storage and network services, our hosting/database providers, anonymously configured Plausible analytics hosted by Outpoot, push-notification delivery, and OpenRouter or model providers for video analysis and moderation. Providers process data only as needed to provide their services. Your public profile and public posts can be seen, indexed, embedded, and shared by others. We may disclose information where required by law or to protect people and the service.

International transfers

Our providers may process data outside your country. Where GDPR transfer rules apply, we use an adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses, as applicable to the provider and transfer.

Retention and deletion

We keep data only as long as needed for the purposes above, including security, dispute, and legal-retention needs. You can delete your account yourself in Account settings. Account deletion is handled directly in Settings and removes your profile and content from active systems, subject to limited backup, fraud-prevention, legal, and other records we must retain. Content copied, shared, or quoted by other users may remain outside your account.

Your choices and rights

Account settings let you control profile visibility, discovery, interactions, messages, notifications, and deletion. You can download the data associated with your account from Account settings in a machine-readable JSON file. The export does not bundle media files, which remain downloadable from Studio, and encrypted message records may require your local encryption keys to read.

Depending on where you live, you may have rights to access, correct, erase, restrict, object to, or port your personal data, and to complain to your local data-protection authority. Use the private [email protected] for requests that settings do not handle. We may need to verify your identity and may limit a request when law permits, including to protect other people’s rights.

Cookies and similar technologies

We use essential cookies for sign-in, security, and session management. We also use local storage for preferences such as theme and may use privacy-focused analytics to understand aggregate use of the service. Your browser lets you control cookies; blocking essential cookies can prevent sign-in or other features from working.

Children and changes

Smolish is not directed to children below the minimum age required in their country to consent to online services. Do not use Smolish if you do not meet that age. We may update this policy as the service or law changes; we will post the updated version and revise the effective date. Material changes may also be notified in the service.