Privacy policy (draft)

Draft for legal review. Replace the bracketed placeholders and have this text checked against the Law of Georgia on Personal Data Protection (and the GDPR, if you serve EU users) before publishing.

Controller: [legal name], [address], [tax ID]. Contact: [email].

What we process

• Account data: email address, name (optional), language, sign-in methods (Google, Telegram, passkeys, password stored only as a hash), devices you sign in from.
• Camera configuration: camera names and addresses. Camera passwords and stream keys are stored encrypted or only as a hash, and are never shown again.
• Video: live video passes through our media server and is not recorded. If you turn on timelapse, we store the still images and timelapse videos of that camera.
• Usage and security logs: sign-ins, failed sign-in attempts, IP addresses, and actions in your account (audit log).
• Payments: handled by Telegram (Telegram Stars). We receive the payment ID, amount and status; no card data.
• Telegram: if you connect Telegram, we store your Telegram user ID, chat ID and username to send messages.

Why

To provide the service you signed up for (contract), to keep it secure (legitimate interest), and to meet accounting obligations (legal obligation).

How long

• Timelapse images and videos: per your plan (shown in the camera's timelapse settings). Videos are deleted only after a warning.
• Exported videos: 7 days.
• After a subscription ends: data is kept for the retention period (default 30 days) and deleted after warnings.
• Deleted files are kept in a trash area for 7 days, then removed permanently.
• Encrypted database backups: 7 daily, 4 weekly, 3 monthly.
• Invoices and payment records: as long as accounting law requires.

Cookies

We use only strictly necessary cookies: the sign-in session (rt), CSRF protection (csrf), device recognition (did) and a short-lived Google sign-in state (g_state). Your language and player settings are stored in your browser. No analytics or advertising cookies, so no cookie banner is needed.

Your rights

You can download your data at any time (Settings → Your data → Download). The account owner can delete the whole account (with a 7-day period to change your mind); other users can delete their own user. You can also ask us to correct your data, and you can complain to the Personal Data Protection Service of Georgia.

Processors

Hosting: [hosting provider, country]. Storage of timelapse files and backups: [storage provider, country]. Email: [email provider]. Messaging and payments: Telegram.