Privacy Policy
This Privacy Policy explains how itzcrih.it and its associated services collect, use, store, and protect your information. By using any service under this domain, you acknowledge and accept the practices described below.
Information we collect
We collect information in two ways: information you provide directly, and information automatically collected through your use of the services.
Information you provide
- Discord OAuth: If you choose to log in via Discord, we receive your Discord User ID, username, avatar URL, and (if authorized) your email address. We never receive your Discord password.
- Uploads: Files you upload to video.itzcrih.it or method.itzcrih.it, including video files, thumbnails, and associated metadata.
- Shop purchases: If you purchase products via shop.itzcrih.it, the payment processor (Payhip) may share order confirmation data. We do not store full payment card details.
- Communications: Information you provide when contacting us for support, abuse reports, or DMCA requests.
Automatically collected information
When you interact with any itzCrih service, we automatically collect:
Video Uploads & Processing
When you upload a video to itzStream or itzCrih Method, the file undergoes automated processing:
- Metadata extraction: We read technical details such as codec, bitrate, resolution, frame rate, duration, and container format to process and serve the video correctly.
- Transcoding: Temporary encoded files may be created for optimization. These are stored only long enough to serve the video.
- Original file retention: Original uploaded files are automatically deleted approximately 5 minutes after upload completion.
- Patched/encoded files: Processed versions are also automatically deleted after 5 minutes to free storage and allow users sufficient time to download their content.
- Scans: Automated scans are performed for abuse detection and malware prevention. No manual review occurs unless triggered by abuse reports or security alerts.
Discord Login
The Discord OAuth 2.0 integration is optional. When you log in via Discord:
- We receive your Discord User ID, username, and avatar.
- If you grant permission, we also receive your email address.
- An OAuth token is used temporarily to verify your identity. It is not stored permanently.
- We never receive or request your Discord password.
- Login data is used to identify you across services and to moderate abuse (e.g., bans, blacklists).
Analytics
We use Google Analytics to understand how visitors interact with our services. This helps us improve user experience and identify technical issues.
Google Analytics collects:
- Pages visited and duration of visits
- Browser, device, and operating system
- Referral sources (where you came from)
- Aggregated geographic data (country level)
We have configured Google Analytics to use IP anonymization where possible. Data is processed according to Google's Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on.
Cookies
Cookies are small text files stored on your device. We use cookies for:
- Session management: To maintain your login state and preferences.
- Rate limiting: To prevent abuse and ensure fair usage.
- Analytics: Google Analytics uses first-party cookies for aggregate tracking.
You can control or disable cookies in your browser settings. However, disabling cookies may impact some functionality of the services.
How we use your information
We use the collected information for the following purposes:
- Service delivery: To process uploads, serve videos, generate thumbnails, and provide requested features.
- Security & abuse prevention: To detect, investigate, and prevent spam, malware, DDoS attacks, fraud, and Terms of Service violations.
- Debugging & maintenance: To troubleshoot issues, improve performance, and ensure platform reliability.
- Administrative notifications: To send important service updates or respond to support requests.
- Statistics: To analyze aggregate usage patterns and make informed decisions about infrastructure.
Data Retention
We retain different types of data for specific periods:
Sharing your information
We do not sell your personal data. We share information only:
- With third-party service providers necessary to operate our services (e.g., Cloudflare, IONOS, Google Analytics, Discord, Payhip).
- When required by law, regulation, or legal process (e.g., court orders, law enforcement requests).
- To enforce our Terms of Service, protect the rights and safety of our users, or respond to abuse reports.
- With your explicit consent when applicable.
Third-party services
Our services rely on several third-party platforms and tools:
- IONOS: VPS hosting provider. Handles server infrastructure and network-level data.
- Cloudflare: CDN, DDoS protection, and WAF. Processes IP addresses, HTTP requests, and security data.
- Google Analytics: Website analytics. Processes usage data as described above.
- Discord: OAuth authentication and community server. Processes login data.
- Payhip: Shop product delivery and payment processing. Processes order and payment data.
- Better Stack: Service status monitoring and uptime tracking.
Your rights (GDPR / EU)
Depending on your jurisdiction (particularly under GDPR if you are in the EU/EEA), you may have the right to:
- Access: The personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Deletion: Request erasure of your data (subject to legal retention requirements).
- Restriction/Objection: Restrict or object to certain processing activities.
- Data portability: Receive your data in a structured format.
Children's privacy
Our services are not directed to children under the age of 13 (or applicable local age). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it promptly.
International transfers
Our servers are located in Germany (IONOS). However, third-party services (e.g., Cloudflare, Google Analytics) may process data internationally. By using our services, you acknowledge that your data may be transferred and processed outside of your country of residence.
Security
We implement reasonable technical and organizational measures to protect your data, including:
- HTTPS/TLS encryption for all data in transit.
- Rate limiting to prevent abuse and brute-force attacks.
- Automated scans for malware and malicious content.
- IP blacklisting and bans to block abusive actors.
- Regular updates and security patches on server infrastructure.
Changes to this Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in practices, technology, or legal requirements. The "Last updated" date at the top reflects the latest revision.
Contact
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, you can reach us at:
For copyright or DMCA inquiries, please use: dmca@itzcrih.it
itzCrih