📑 Quick Navigation
🛡️ Our Core Privacy Promise
Your freedom of expression is protected through comprehensive privacy controls.
We never sell personally identifiable information. Your identity is protected through advanced anonymization.
You own your content; you grant us a limited license to host and display it as described in our Terms of Service.
Company: Cellophane AI Ltd.
Contact: privacy@cellophane.ai
⚡ Privacy Quick Facts
- ✔ We aim to anonymize personal data within ~90 days, subject to technical and legal constraints
- ✔ 4 privacy layers: Public, Private, Friends, Influencer
- ✔ Complete control over content visibility
- ✔ Industry-standard AES-256 encryption
- ✔ Data deletion available upon request
- ✔ We do not perform cross-site tracking without explicit consent and as permitted by law
- ✔ Uncensored expression (within legal limits)
- ✔ Opt-out from AI training available
🎨 Cellophane™ Privacy Layers
You control exactly who sees your cellophanes through our color-coded visibility system:
What We Collect
Account Information:
- Email address (for authentication)
- Username & display name
- Password (encrypted with bcrypt)
- Avatar preference (Dicebear style selection)
- Profile settings and preferences
Your Cellophanes (Content):
- Text comments and annotations
- Media uploads (images, videos, voice notes)
- Reactions and emoji responses
- Drawing markups and highlights
- Visibility settings for each cellophane
- URL and position on the webpage
- Timestamps and edit history
Social Interactions:
- Following/follower relationships
- Group memberships
- Shared cellophanes and viral loops
- Comments on other users' cellophanes
- Reaction history
Technical Information:
- Browser type and version
- Extension version
- General location (country/region via IP)
- Device type (desktop/mobile)
- Screen resolution for proper overlay positioning
- Error logs for debugging
- Performance metrics (load times, etc.)
AI & Data Processing
AI-Powered Features
Cellophane™ uses AI to enhance your experience while protecting your privacy:
Current AI Features:
- Smart content recommendations
- Sentiment analysis for trending topics
- Auto-moderation of harmful content
- Language translation services
- Future: AI Avatar Guides for interactive help
How We Protect Your Privacy:
- We remove personal identifiers and apply privacy-preserving techniques before AI processing, wherever feasible
- Content aggregated with thousands of other users
- We aim to achieve meaningful k-anonymity; actual levels depend on context
- We may apply privacy-preserving techniques (e.g., aggregation or noise)
- No usernames, emails, or IPs in datasets
- Periodic reviews of anonymization effectiveness
Opt-Out Available: Email ai-optout@cellophane.ai to exclude your content from AI training.
How We Use Your Information
| Purpose | What We Use | Legal Basis (GDPR) |
|---|---|---|
| Provide overlay service | Account data, cellophanes | Contract performance |
| Social features | Profile, interactions | Contract performance |
| Content moderation | Cellophanes, reports | Legitimate interest |
| Service improvement | Anonymized usage data | Legitimate interest |
| AI development | Anonymized content | Legitimate interest |
| Viral features | Shared content, links | User consent |
| Legal compliance | Required records | Legal obligation |
Content Moderation & Freedom
Our Approach to Uncensored Expression
Cellophane™ was built to enable free expression on the web. We believe in minimal moderation:
As a general rule, we remove content only when it:
- Violates applicable laws (CSAM, terrorism, etc.)
- Contains direct threats of violence
- Shares private personal information (doxxing)
- Infringes on intellectual property rights
- Is commercial spam or malware
As a general rule we do not remove content for these reasons, subject to law and community policy:
- Political opinions or controversial views
- Criticism of public figures or companies
- Adult content (with appropriate visibility settings)
- Strong language or unpopular opinions
- Disagreements or debates
User Controls: You can block users, filter content types, and control what you see without affecting others' freedom to express.
Who We Share With
We share data only in these limited circumstances:
- With your consent: When you make cellophanes public or share them
- Service providers: Supabase (database), Cloudflare (CDN), AWS (hosting) - under data processing agreements and confidentiality obligations
- Legal requirements: Only when required by valid court order or legal process
- Safety: To prevent imminent harm or illegal activities
- Anonymized datasets: Aggregated, de-identified data for research (opt-out available)
- Business transfers: If Cellophane™ is acquired (users will be notified)
International Data Transfers: We may transfer your data internationally using Standard Contractual Clauses (SCCs) approved by the European Commission and UK International Data Transfer Agreement (IDTA) where applicable.
Security Measures
- ✅ Industry-standard AES-256 encryption for data at rest
- ✅ TLS 1.3 for all data in transit
- ✅ bcrypt password hashing (cost factor 12)
- ✅ Row-level security in Supabase
- ✅ Periodic security reviews
- ✅ Isolated systems for different data types
- ✅ Security monitoring and alerts
- ✅ Automatic backups with encryption
- ✅ Two-factor authentication available
- ✅ Regular security training for all team members
Your Privacy Rights
You Have Full Control:
- Access: View all data we have about you via settings panel
- Download: Export your cellophanes in JSON/CSV format
- Delete: We delete data within a reasonable time, subject to law, technical limits and backups
- Correct: Edit any cellophane or profile information
- Portability: Transfer your content to other services
- Opt-out: Exclude from AI training and analytics
- Object: Challenge any data processing decision
- Restrict: Limit how we process your data
How to exercise rights: Use in-app settings or email privacy@cellophane.ai
Response time: We aim to respond within 30 days; identity verification may be required
Do Not Track (DNT) & Global Privacy Control (GPC): We currently do not respond to Do Not Track (DNT) signals. We honor Global Privacy Control (GPC) signals where supported.
Future: Blockchain & Decentralization
We're planning to integrate Web3 technologies for even greater privacy and ownership:
- Blockchain Verification: Immutable proof of content ownership
- Decentralized Storage: IPFS integration for censorship resistance
- NFT Cellophanes: Mint your content as NFTs
- Token Governance: Community-driven moderation decisions
- Zero-Knowledge Proofs: Verify identity without revealing it
These features are in development and will be opt-in when available.
Data Retention
| Data Type | Retention Period | Why |
|---|---|---|
| Active account data | As long as needed and as required by law | Service provision |
| Deleted cellophanes | Typically 30 days (trash folder) | Recovery option |
| Public cellophanes cache | Generally 7 days after deletion | CDN propagation |
| Moderation records | Generally 2 years | Appeals/legal |
| Anonymized data | Indefinite | Service improvement |
| Security logs | Typically 90 days | Security monitoring |
| Billing records | As required by law | Tax requirements |
Cookies & Local Storage
Children
We do not knowingly collect personal data from children under 13. If you are in the EEA, users aged 13–15 require parental/guardian consent to use the Service; at 16+ no such consent is required. In the UK and other regions, the minimum age is 13. If we learn that we have collected personal data contrary to these rules, we will delete it within a reasonable time. Parents or guardians may contact privacy@cellophane.ai to request restriction or deletion of a child's data.
International Users
EU/UK Users (GDPR):
- Right to access, rectification, and erasure
- Right to data portability
- Right to object to processing
- Right to restrict processing
- Right to withdraw consent
- Right to lodge complaints with supervisory authorities
- Data Protection Contact: dpo@cellophane.ai
California Users (CCPA/CPRA):
- Right to know what personal information we collect
- Right to delete personal information
- Right to opt-out of sale (we don't sell data)
- Right to non-discrimination
- Right to correct inaccurate information
- Right to limit use of sensitive personal information
Policy Updates
When we update this policy:
- We'll notify you via email and in-app notification
- We will provide advance notice where required or appropriate
- We may provide a change log from time to time
- Continued use after notice period constitutes acceptance
Contact Us
For privacy questions or to exercise your rights:
- Privacy Team: privacy@cellophane.ai
- Data Protection Contact: dpo@cellophane.ai
- Security Issues: security@cellophane.ai
- Opt-Out Requests: optout@cellophane.ai
- General Support: support@cellophane.ai
- Response Time: We aim to respond within 30 days
Parents/guardians can exercise these rights on behalf of children by contacting privacy@cellophane.ai.
Your privacy enables your freedom.
Cellophane™ exists to help you share your voice on the web—responsibly and in line with our Terms and this Policy.
We're building the transparent layer of the internet where privacy and expression coexist.