Privacy Policy

1. Introduction

Squids (squids.gg) ("we", "us", "our") is a gaming clip sharing platform. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Squids is the data controller for the personal data processed through this service. You can contact us at support@squids.gg for any privacy-related inquiries.

3. Data We Collect

Account Data

Email address (provided directly or via Discord)
Display name and user handle
Avatar image (from Discord or uploaded)
Discord user ID (if you sign in with Discord)

Content Data

Video clips you upload
Comments and community posts
Community membership information

Usage Data

Pages visited and features used (via Vercel Analytics, which is cookie-free)
Device type and browser information
IP address (for security and abuse prevention)

4. How We Use Your Data

We process your personal data for the following purposes:

Providing the Service — account creation, authentication, video hosting, community features
Communication — responding to support requests and sending service-related notices
Security — preventing abuse, fraud detection, and protecting the integrity of the Service
Improvement — understanding how the Service is used to improve features and performance

Our legal basis for processing is your consent (provided at sign-up), the performance of our contract with you (Terms of Service), and our legitimate interests in operating and improving the Service.

5. Third-Party Services

We use the following third-party services to operate Squids:

Supabase (authentication) — processes your email address and authentication tokens. Data is stored in the EU.

Discord (OAuth sign-in) — if you sign in with Discord, we receive your Discord user ID, username, email, and avatar. See Discord's Privacy Policy.

Bunny.net (video hosting and CDN) — processes and delivers your uploaded video clips. Videos may be distributed globally via their CDN network.

Amazon Web Services (cloud infrastructure) — our backend services and temporary file storage run in the EU (London, eu-west-2).

MongoDB Atlas (database) — stores your account data, community data, and content metadata. Hosted in the EU.

Sentry (error tracking and performance monitoring) — captures error reports and performance data to help us maintain service reliability. May process IP addresses and browser information. See Sentry's Privacy Policy.

Vercel (frontend hosting and analytics) — hosts our website and provides privacy-friendly, cookie-free analytics. See Vercel's Privacy Policy.

6. Cookies

Squids uses only essential cookies required for authentication and session management. We do not use advertising cookies or third-party tracking cookies. Our analytics provider (Vercel Analytics) does not use cookies.

7. Data Retention

Account data — retained for as long as your account is active. Deleted upon account deletion request.
Uploaded content — retained until you delete it or your account is terminated. Video files are removed from our storage and CDN.
Comments — soft-deleted (content removed but record retained for thread integrity). Fully purged upon account deletion.
Usage data — aggregated analytics data is retained indefinitely but cannot be used to identify individual users.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data. These rights also extend to users in the European Economic Area under the EU GDPR:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your personal data
Portability — request your data in a machine-readable format
Restriction — request that we limit how we process your data
Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at support@squids.gg. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. International Transfers

Our primary infrastructure is located in the EU (London, eu-west-2). Video content may be distributed globally via Bunny.net's CDN to provide fast playback. Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Children's Privacy

Squids is not intended for anyone under the age of 16. We do not knowingly collect personal data from anyone under 16. If we become aware that we have collected data from a person under 16, we will take steps to delete that data promptly.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit, access controls limiting who can access personal data, and regular review of our security practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach, as required by UK GDPR. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Any content moderation decisions are made or reviewed by humans.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@squids.gg.