Privacy Policy

What we collect

Account data: email address, display name, and a hashed password. We never store passwords in plain text.

API usage logs: request paths, status codes, timestamps, and API key identifiers — used to show you your own usage and to operate the service.

Jobs: the URLs you submit for resolve/search/download, kept so you can retrieve results. Delete your account to remove them permanently.

What we never do

We do not sell your data. We do not use your data for advertising. We do not place tracking cookies or ad pixels. Secrets (API keys, signing secrets) are stored hashed and shown only once.

Cookies

One functional cookie keeps you signed in (umedia_session). No third-party cookies.

Retention

Usage logs are kept for operational purposes (typically 90 days). Account deletion removes your sessions, keys, jobs, produced files, webhooks, and logs immediately.

Your rights

Access, correct, export, or delete your data from Account Settings, or email privacy@umedia.local. Deletion requires re-authentication and is irreversible.

Security

TLS everywhere, scrypt password hashing, hashed sessions and API keys, per-user data isolation, signed webhooks, and rate limiting. Report vulnerabilities to security@umedia.local.