Privacy Policy
Draft, to be reviewed by a lawyer. Not in force. Last updated: [Date].
This policy explains what personal data [Business name] ("we", "us") collects when you use Egyptian Ad Archive at egyptianadarchive.com (the "Archive"), why, and what you can do about it.
Contact for privacy questions: [Contact email]. Address: [Postal address, Egypt].
1. Short version
- We collect only what we need to run your account, take payment, stop account sharing and improve the Archive.
- We do not sell your data and we do not show ads.
- Card details go straight to the payment provider. We never see your full card number.
- Our analytics do not use advertising cookies and do not follow you around the web.
- Films play through YouTube and Vimeo, which have their own privacy rules.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address; name and profile picture if you sign in with Google | To create your account and sign you in |
| Plan and payment | Plan, price, country, payment status, invoices. For payments through WhatsApp: sender name or number, transfer reference and the payment screenshot | To give you the plan you paid for, keep tax and accounting records |
| Devices and sign-ins | Device token, a device fingerprint (browser and screen details), IP address, rough location (city and country from the IP), sign-in times | To keep each paid account to one person and two devices, set your country price, and protect the account |
| Use of the Archive | Searches, films opened, boards, likes, filters, daily limits | To run the features you use, enforce plan limits, spot account sharing and improve the Archive |
| Things you send | Credits, corrections, removal requests, film suggestions, problem reports and ideas (with an optional screenshot, the page address, the film and your browser), support emails, proof links | To review and publish them, fix problems, and reply to you |
We do not ask for sensitive data such as religion, health or political views. Please do not send it in messages or reports.
3. Credits that name people
The Archive lists people who worked on films (directors, DOPs, editors and other crew) because that is part of the public record of each film. This information comes from public sources, from the people themselves, and from users. If you are named and want a credit corrected or removed, use "Suggest a correction" on the film or profile page, or write to [Contact email].
4. Who we share data with
We use trusted service providers to run the Archive. They may only use your data to provide their service to us.
| Provider | What it does | Data it handles |
|---|---|---|
| Supabase | Sign-in and database | Account, use, submissions. Stored in region |
| Cloudflare | Hosting, security and bot protection | IP address, technical request data |
| Lemon Squeezy | Seller of record for payments in USD | Name, email, country, payment details. They act under their own privacy policy as the seller |
| InstaPay / phone cash (Egypt, through WhatsApp) | Payments without a card | Name or number, transfer reference, payment screenshot |
| Sign-in with Google (only if you choose it) | Your Google account email and name | |
| Resend | Account and receipt emails | Email address |
| Google Gemini API | Helps tag films (scenes, tone, credits) | Film information only, never your personal data |
| Cloudflare Web Analytics | Privacy-friendly visit counts | Pages visited, without cookies that identify you |
We may also share data if the law requires it, to protect our rights or users, or as part of a sale or transfer of the Archive (you would be told first).
5. YouTube and Vimeo
When you play a film, it plays in YouTube's or Vimeo's own player. From that moment YouTube (Google) or Vimeo can collect data and set cookies under their own policies: https://policies.google.com/privacy, https://vimeo.com/privacy. Where possible we load the player only when you press Play, using YouTube's privacy-enhanced mode.
6. Cookies and local storage
We use only what the Archive needs to work: staying signed in, your device token, your settings (such as sort order) and boards saved in your browser. We do not use advertising or tracking cookies.
7. Where your data is kept
Our providers may store data outside Egypt, for example in the EU and the US. When data leaves Egypt, we rely on the safeguards the law requires.
8. How long we keep it
| Data | How long |
|---|---|
| Account and use | While your account is open. Deleted within 30 days after you delete the account |
| Device and sign-in records | 12 months |
| Payment and invoice records | As long as tax law requires, usually 5 years |
| Submissions that were published | Kept as part of the Archive record, without your contact details |
| Support emails | 2 years |
| Payment screenshots | Deleted 90 days after the payment is approved or rejected |
| Problem report screenshots | Deleted 90 days after the report is closed (fixed or won't fix) |
9. Your rights
You can ask us to:
- show you the data we hold about you, and give you a copy;
- correct it;
- delete it, or your whole account;
- stop using it for a purpose you object to;
- stop sending you emails that are not about your account (every such email has an unsubscribe link).
Write to [Contact email]. We reply within 30 days. If you are not happy with our answer, you can complain to Egypt's Personal Data Protection Center, or to the data protection authority where you live.
10. Security
Data is sent over encrypted connections and stored with access limits. Only the owner of the Archive can see account and payment records. No system is perfectly safe. If a breach affects your data, we will tell you and the authorities as the law requires.
11. Children
The Archive is not meant for children under 16. We do not knowingly collect their data. If you think a child has an account, write to us and we will delete it.
12. Changes
If we change this policy in an important way, we will tell you by email or on the site before the change applies.