Privacy Policy

Who this applies to

TakedownClock is used by (a) site owners and their staff, who hold accounts, and (b) requesters: people who file removal requests about imagery of themselves, or of someone they represent, without creating an account. This policy covers both groups.

What we collect

• Account information: your email address, a password (stored as a bcrypt hash, never in plain text), and an optional display name. If you sign in via Google, we also store the OAuth account record that NextAuth creates (provider, refresh and access tokens) so we can keep you signed in.
• Site information: the sites you register with us: name, public slug, domain, and plan.
• Removal request records: for each request filed on a site's report page: the requester's name and email, the links to content they supplied, their stated relationship to the person depicted, their signed good-faith statement (the typed name counts as the signature), any notes they add, and the timestamps of submission and deadline. We never receive or store the reported images themselves. The form has no upload function; requests carry links and statements only.
• Audit logs: a timestamped record of every request event and owner action: receipt, review, removal, denial and its reason, and plan changes. Audit logs exist so a site owner can show what came in, when, and what was done about it.
• Payment data (only if you subscribe to a paid plan): Stripe handles payment; we keep the subscription record (plan, status, Stripe customer and subscription ids, current period end). Card details never touch our servers.
• Cookies and session: NextAuth sets a session cookie (next-auth.session-token) that is HTTP-only, Secure, and SameSite. We do not use third-party analytics, marketing, or cross-site tracking cookies.

Request topics are sensitive by nature. We collect only what the intake process needs. Do not put documents, images, or extra personal details in the notes field of a request.

How we use it

To run the service: create your account, accept and route removal requests to the site owner, show requesters the status of their request when they present their tracking number and email together, track deadlines, generate audit-log exports for the site owner, and bill subscriptions. Requester email addresses are used for status lookup and request handling only. We do not sell personal data, we do not market to requesters, and we do not run ad networks against any of this data.

Who sees request data

The owner of the site a request was filed against (and staff on their account) sees the full request: links, name, email, relationship, statement, and notes. A requester checking status sees only the status, timestamps, and, for a denial, the reason the owner recorded. We do not publish requests, and no other site owner can see them.

Who we share it with (third parties)

We use the following service providers to run TakedownClock:

• Managed PostgreSQL host: our database host. Account data, request records, audit logs, and subscription records live in a Postgres database. Connection is over TLS.
• Stripe: if you subscribe to a paid plan, Stripe processes the payment. We send Stripe your email and an internal user and site id; you give Stripe your card details directly through their hosted checkout. We never see your card number.
• Google: only if you choose Google sign-in. Google verifies your identity and returns a basic profile (name, email) to us.
• Hosting platform: the web app runs on Vercel, which sees inbound HTTP requests in order to serve responses.

We do not otherwise sell, rent, or trade personal data, and we do not embed third-party analytics or advertising SDKs.

Data retention

• Request records and audit logs are retained while the site they belong to is registered, because they are the site owner's compliance record. If a site is removed or an account is closed, we delete its request records and audit logs within 30 days unless the owner first exports them, or unless we are required to keep a copy (for example, to resolve a dispute about the record itself).
• Account data is retained until you request deletion or we wind down the service.
• Subscription records are retained for tax and bookkeeping periods after cancellation.
• You can request deletion of your data at any time by emailing tryreasonate@gmail.com.

Your choices and rights

We do not currently have a self-service account-delete or data-export button. Site owners can export their full audit log as CSV from the dashboard at any time. To request access to, correction of, export of, or deletion of your data, email tryreasonate@gmail.com and we will handle it manually. Requesters: the site owner is the party who can act on your request and your data in it; we will forward data requests about a specific filing to that site owner. Depending on where you live (for example the EU, UK, or California) you may have additional rights under laws such as the GDPR or CCPA. The same email is how you exercise them.

Children

Accounts are for adults: you must be at least 18, or the age of majority in your jurisdiction, to register a site. The report form is not directed at children. If a request concerns imagery of a minor, it should be filed by the minor's parent, guardian, or authorized representative, and it should also be reported to the National Center for Missing and Exploited Children (NCMEC) CyberTipline. If you believe a child has provided us data improperly, contact us and we will remove it.

Security

We take reasonable steps to protect this data: passwords are bcrypt-hashed, the database connection uses TLS, owner-only pages and actions are gated server-side by account session, and a request's status is visible only to someone holding both its tracking number and the email it was filed with. We have not been independently audited (no SOC 2, no ISO 27001, no formal pen-test), and as a small operation we cannot guarantee absolute security. No method of storage or transmission on the internet is completely secure.

Changes

We may update this policy, for example as we add features, change subprocessors, or wire up a different email provider. When we do, we will change the "Last updated" date at the top of this page.

Contact

Operator: Reasonate LLC. Contact: tryreasonate@gmail.com.