Privacy policy

Sitr is built so that there is very little about you to collect. Your videos and photos are covered on your own device and are never sent to us — not to be processed, not to be checked, not briefly. This page is about the small amount of information that does exist, and it is specific on purpose.

The short version: we hold your email address, whether you have paid, a count of how many files you have covered, and — only if you choose to link a social account — an encrypted token that lets you post to it. We never hold your media.

Your videos and photos

They stay on your device. The face detection and the covering both run inside your browser, on your own processor, using code your browser downloaded once. There is no upload step, no queue, no temporary copy on a server and no human review. When you close the tab, the file is gone from Sitr entirely, because it was never anywhere else.

This is a property of how the software is built rather than a promise about how we behave, which is the distinction worth caring about. A policy can be changed. An architecture that has nowhere to put your file cannot be quietly reinterpreted.

What we collect if you make an account

Email address

So you can sign in and so we can reach you about your account. Sign-in is handled by Supabase, our database and authentication provider.

Whether you have paid

Which plan you are on and when it began or ends, so the software knows what to let you do.

A count of files covered

A number and the date of the most recent one. Not the files, not their names, not anything about what was in them — a counter, used to apply the free limit.

How you first arrived

The referring site, any campaign tags in the link, the page you landed on, and your browser’s timezone and language. Recorded once, on your first visit, and never overwritten. There is no server in the covering pipeline to read an IP address from, so we do not have one, and we do not geolocate you.

Payment

Payments are processed by Stripe. Your card details are entered on Stripe’s systems and never pass through ours — we receive a confirmation that a payment succeeded, the amount, and an identifier we can use to look the payment up if you ask us about it. Stripe’s own privacy policy governs what they hold.

Linked social accounts

Linking a TikTok, YouTube, Instagram or Facebook account is entirely optional, and nothing about the covering requires it. If you do link one, here is exactly what that means.

We never see or store your password for any platform. You are sent to the platform’s own sign-in page, you approve a specific and limited set of permissions there, and the platform hands us back an access token — a key that lets us do those specific things on your behalf, and nothing else.

• The tokens are encrypted before they are written down, with a key that is held separately from the database. Somebody who obtained a copy of the database alone could not use them.
• The permissions are the narrow ones. On YouTube, for example, we ask to upload to your channel and to read your channel name so we can show you which account you linked. We do not ask to read your videos, delete anything, or touch your comments.
• We record what happened to a post — which platform, whether it succeeded, the link to it if the platform gives us one, and how long your caption was. Not the caption itself.
• You can unlink at any time from your account page, which deletes the token. You can also revoke our access from inside TikTok, Google or Meta’s own settings, which works even if we no longer exist.

What we do not do

• No advertising, ever, and no advertising trackers or pixels anywhere on the site.
• No third-party analytics. There is no Google Analytics, no Meta pixel and no session recorder on this site.
• We do not sell or share your information with anyone for their own purposes. The only companies that touch any of it are the ones named on this page, doing the job they are named for.
• No cookies for tracking. The only thing stored in your browser is what keeps you signed in and what remembers your settings on this device.

How long it is kept

Your account information is kept while your account exists. Delete your account and it goes, along with your linked accounts, your usage counter and your posting history. Records of payments are kept longer, because tax and accounting rules require it.

Your rights over it

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it, and we will do it. Depending on where you live you may have these rights by law — under the UK and EU GDPR, or under California law, among others — and we apply them to everyone regardless of where they live, because operating two standards would be more work than doing it properly once.

Children

Sitr is not intended for children under 13, and accounts are not knowingly created for them. If you believe a child has made an account, tell us and we will remove it.

Changes to this page

If this changes, the date at the top changes with it. A change that materially affects what we collect or what we do with it will be told to account holders by email rather than left to be discovered.

Contact

Questions about any of this, or a request about your own data, can be sent to the address on our account page. A person reads it.