Privacy Policy

What we collect

• Your account. Your email address and password. Passwords are stored hashed by our authentication provider; we never see them. If you sign in with Google, Google shares your name, email address and profile picture with us. We use the email address to identify your account, and show the profile picture beside your name on your published work, where it is public.
• Your profile. A display name, which starts as the part of your email address before the @ and which you can change in Settings. It is public.
• What you publish. The images and videos you upload, the notes you write with them, the prompt words they answer, and when you published them. Published work is public: anyone can see it without an account, and search engines can index it.
• Reports. If you report a post, we keep the reason you give, linked to your account. Reports are never shown publicly.
• Technical data. Cookies that keep you signed in, and the standard request logs our hosting provider keeps, such as IP address and browser type. When you sign up or sign in, Cloudflare Turnstile checks signals from your browser to tell people from automated bots.

What we do with it

We use this information to run Viskit: to sign you in, deal you prompts, show your work in the gallery, send the email that confirms your address, keep out spam and abuse, and answer you when you write to us. We do not sell your information, show advertising, or use analytics or tracking cookies.

Who else handles it

Viskit relies on a few service providers, each handling only what its job needs:

• Supabase, which stores the database, accounts and uploaded files.
• Vercel, which hosts the site.
• Cloudflare, for the Turnstile bot check.
• Google, if you choose to sign in with Google.
• Our email provider, which delivers account emails.

We may also disclose information when the law requires it, or to protect Viskit and the people who use it.

Keeping and deleting it

We keep your information for as long as you have an account. You can delete your account at any time in Settings. Your profile and everything you published are hidden from everyone straight away. For 30 days you can still restore the account by signing in; after that we permanently delete your account, profile, prompts and reports, and every post you published, including the image and video files themselves. Copies may take a short time to clear from our providers' backups.

Your choices

You can change your display name in Settings, and delete your account there. To ask for a copy of your information, a correction, or its deletion, or to ask anything else about your data, email support@oneslash.io. Depending on where you live, you may have further rights under laws such as the GDPR or the CCPA, and we will honour them.

Children

Viskit is not meant for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, email us and we will delete it.

Changes

If we change this policy, we will update the date at the top. If the change is significant, we will tell you by email or on the site before it takes effect.