1. Information we handle
Account information includes your authentication provider identifier, email address and account details needed to sign you in. Clerk manages authentication. If you choose Google sign-in, Clerk receives the basic identity information you authorize, such as your name, email address and profile image. We do not request access to your Gmail messages, Google Drive files, contacts or calendar for sign-in.
Information you provide includes your profile name, handle, creative roles, city, biography, skills, profile picture, films, discovery clips, posters and film credits. We also store messages you send, reports and support requests, and your responses to credit invitations.
When you use discovery features, we may store account-linked preferences and interactions such as likes, saves, more/less feedback and meaningful watch events. Our infrastructure providers process technical information such as IP addresses, browser information, request times and error logs to deliver and secure the service.
2. How information is used
We use information to authenticate accounts, show profiles and films, deliver messages, manage uploads and storage limits, provide search and recommendations, respond to requests and maintain service security. We also use reports and limited audit records to investigate abuse, manage takedowns and enforce our terms.
Search uses text and machine-generated numerical representations of film and profile descriptions. Recommendations use preferences and relevant interactions. These representations support discovery; private message contents are not used to train recommendation models. Google sign-in information is used for account access and identity, not advertising or training AI models.
3. Public and private information
Completed public profiles, published films, discovery clips, posters and visible film credits can be viewed by people who are not signed in and may be indexed by search engines. Do not put private contact information or confidential material in public fields. Other people may copy material they can view.
Drafts, private conversations, personal recommendation preferences and reports are not public browsing content. Messages are accessible to the conversation participants through the application; they are not end-to-end encrypted. Access by the operator or service providers is limited to operating the service, responding to support or safety issues, or meeting legal obligations.
4. Service providers and disclosures
We use Clerk for authentication, Supabase for the database, realtime features and server-side operations, and Cloudflare for media storage and delivery and website infrastructure. These providers process information needed to perform their services, and processing may occur outside your country. Each provider also has its own applicable privacy terms.
If you play an embedded YouTube or Vimeo film, your browser connects to that provider, which may receive your IP address, device information and playback activity and apply its own cookies and privacy policy. Information is also disclosed when you choose to publish content or message another user, or when reasonably necessary to meet a legal obligation or protect people and the service.
We do not sell personal information or use Google user data for advertising. Our use of information received through Google sign-in is limited to the purposes described in this policy and subject to the applicable Google API Services User Data Policy.
5. Cookies and browser storage
Arcenray and Clerk use cookies or equivalent session storage to maintain sign-in and security. Browser storage can also retain interface preferences and non-secret upload checkpoints so an interrupted upload can resume. Removing browser storage may sign you out or remove local resume information. External players may use their own storage when loaded.
6. Retention and account deletion
We retain account information and content while needed to provide the service and for the security, support and legal purposes described here. Retention depends on the type of record, whether an account or content has been deleted, outstanding reports and applicable obligations; not all information disappears immediately when an account is closed.
You can request account deletion through account settings or contact us. The deletion process removes your public profile and films from browsing and queues removal of associated media and authentication records. Removal may take additional time because of processing retries, cached copies and backups. A minimal revoked-identity record may be retained to prevent an old session from recreating a deleted account. Limited safety, request and legal records may be retained where necessary. Copies independently saved by others are outside our control.
7. Your choices and requests
You can edit your profile, manage published work and change available discovery preferences in the application. Contact office.arcenray@gmail.com to request access to, correction, export or deletion of your information, raise a privacy concern or ask about a pending deletion. We may need to verify your identity before acting on a request. Rights and exceptions depend on the laws that apply to you.
You can also remove Arcenray's Google connection through your Google Account settings. Revoking that connection does not by itself delete your Arcenray profile or previously published content; use our account-deletion process for that.
8. Security and updates
We use access controls, authenticated operations and other safeguards to protect information. No internet service can guarantee absolute security. Do not share passwords or verification codes, and contact us if you suspect unauthorized access. If you are not legally able to consent to the processing needed for an account, contact us before creating one.
We may update this policy as the service changes. We will show the updated date and provide additional notice or request consent where required. Contact the operator at office.arcenray@gmail.com with questions about this policy.