Privacy Policy

Data we collect

• Account data — email address, display name, and handle when you register.
• Content you publish — campaign titles, descriptions, frame images you upload, and photos you choose to post to a public gallery.
• Usage events — campaign views, editor starts, downloads, and shares, recorded to show creators honest engagement numbers. An event stores only the campaign, the action type, a timestamp, and — for shares — which share button was used (for example WhatsApp or copy-link), plus your account id when you are signed in. We do not store IP addresses or device fingerprints with usage events.
• Page-view analytics — aggregate page-view counts via Vercel Web Analytics. It sets no cookies and does not track you across sites.
• Technical data — standard platform server logs (IP address, browser, timestamps) kept by our hosting providers for security and abuse prevention.

Your photos

Photo editing happens in your browser. A photo you edit is not uploaded to our servers unless you explicitly choose to publish it to a campaign gallery. Downloads are generated on your device.

How data is used

• To operate your account, campaigns, and galleries.
• To show creators their real campaign statistics.
• To prevent abuse, spam, and policy violations.
• We do not sell personal data. We do not use your content to train AI models.

Storage & processors

TwibbonX runs on Vercel (hosting) and Supabase (database, authentication, file storage). Frames and avatars you upload for publication are stored in public buckets — campaigns are public by design. Photos you edit are never uploaded (see above), and your account data is never placed in a public bucket.

Retention & deletion

• Deleting a campaign removes its database records, stored files, and its usage events.
• Posted a photo to a campaign gallery and want it gone? Email us the campaign link and we will remove the photo; deleting the campaign removes its whole gallery.
• To delete your account, email us (below). We complete account deletions within 30 days of verifying your request: your profile, campaigns, favorites, and uploads are removed; moderation-log entries about content decisions may be retained where legally required.
• Platform server logs are retained by our providers for a limited period and then rotated.

Content removal & takedowns

Every campaign page has a Report button; reports go to a moderation queue reviewed by a human, and every decision is recorded in an audit log. Rights-holders can also email support@twibbonx.com with a link to the content and the basis of the claim. We aim to review reports within 2 business days. See also our Content Guidelines.

Your rights

You may request access, correction, export, or deletion of your personal data at any time via support@twibbonx.com. We respond within 30 days.

Cookies

We use only the cookies needed to keep you signed in and to protect forms against forgery. Our analytics is cookieless, and there are no advertising or third-party tracking cookies.