Privacy Policy

Who We Are

Mediacrater scans video and image ads for policy violations across platforms including Meta, TikTok, YouTube, Pinterest, and X, via our Chrome extension or web app. We are operated as Mediacrater and can be reached at [email protected].

What Data We Collect

We collect only what is necessary to operate the service. Below is a complete list of the data we collect, why we collect it, and how it is stored.

Account Data

• Email address — collected at registration to identify your account and communicate with you about your service. Stored securely via Supabase.
• Token balance — the number of scan tokens available on your account. Updated after each scan and each purchase. Stored via Supabase.
• Purchase records — when you make a purchase, we store the session ID, number of tokens purchased, and purchase amount. This is used to credit your account correctly and to support refund requests. Stored via Supabase.
• Scan metadata — when you run a scan, we log the timestamp, tokens consumed, platform selected, content type (video or image), and analysis duration. No ad content, video files, or images are stored as part of this metadata. This data is used solely to diagnose technical issues and to evaluate refund requests. Stored via Supabase.
• File name — if your plan includes Scan History, we also store the original file name of your upload (e.g. "summer_sale_ad.mp4") so you can identify it in your History page. Not stored if your plan does not include Scan History.
• Queue metadata — Our queuing system is designed to allocate our limited server resources appropriately so everyone gets a chance to scan their ads. When you run a scan and you're placed in our queuing system, we generate a queue ID and your scan metadata is logged with it. This includes your plan, user ID, scan type, content type, status, timestamps, how long you waited in queue and payload size.
• Password — your password is encrypted using Supabase's authentication system. We cannot view, access, or modify your password at any time.
• Authentication tokens — session tokens used to keep you logged in are stored locally on your device (via Chrome's secure storage API in the extension, or your browser's local storage on the web app). They are never transmitted to or stored on our servers beyond what Supabase requires for session management.

Device and abuse-prevention data

We collect the following when you create an account on mediacrater.com, so we can keep the free plan fair. We do not use this data for advertising, and we do not track you on other websites. The Chrome extension does not collect this data.

• IP address and approximate location — IP address, country, city, and network provider, collected at account creation. Used only to prevent abuse of the free plan. Approximate location is derived from the IP address; it is not a street address.
• Device cookie — a first-party identifier stored in your browser so we can tell when several free accounts are created from the same device. It is not your login session and is not cleared when you sign out. See our Cookie Policy.
• Browser and device information — browser name and version, operating system, timezone, and a technical identifier derived from those details. Used only to enforce the free plan across accounts.

Payment Data

• Credit card and billing information — all payment processing is handled exclusively by Stripe. We never receive, store, or have access to your card details. Stripe is PCI-DSS compliant and maintains its own security standards.
• Purchase and transaction records — retained for 6 years from the end of the tax year in which the transaction occurred, as required by the Canada Revenue Agency for tax and accounting compliance. This applies even if you delete your account.

Creative Assets (video and image files)

• Video and image files — files you submit for scanning are transmitted to our servers solely for policy analysis. The full file is permanently and automatically deleted the moment your scan results are returned — we do not retain your original video or image.
• Scan History thumbnails (paid plans only) — if your plan includes Scan History, we additionally generate and retain a small, heavily compressed, low-resolution thumbnail — derived from your uploaded image, or the first frame of your video — solely so you can visually identify past scans in your History page. This thumbnail is intentionally too low-quality for any practical reuse of your creative. It is stored via Supabase Storage, deleted if you delete the associated scan, and is not generated or retained at all if your plan does not include Scan History. We do not use your creative assets, or any thumbnail derived from them, for any purpose beyond what is outlined in this Privacy Policy.

How We Use Your Data

• To authenticate you and maintain your account session
• To scan your ad content and return a policy compliance report
• To manage your token balance accurately across purchases and scans
• To process payments and evaluate refund requests
• To diagnose technical issues using anonymised scan metadata
• To improve Mediacrater's accuracy and features over time
• To respond to support requests sent to our email
• To display scan history accurately for paying users
• To prevent abuse of the free plan and keep it available for people who need it

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Data is shared only with the third-party service providers listed below, and only to the extent necessary to operate the service.

Third-Party Services

We use the following third-party services to operate Mediacrater:

• Supabase — user authentication, account data storage, database management, and — for paid plans with Scan History enabled — storage of compressed scan thumbnails as described above.
• Stripe — payment processing. Stripe handles all credit card and billing data. We do not store payment details.
• Cloud infrastructure provider — server hosting and processing infrastructure.
• Vercel — website hosting and infrastructure for mediacrater.com.
• Vercel Analytics — anonymous usage analytics for our website. No personally identifiable information is collected.
• Network intelligence provider — we may send an IP address to a network intelligence service to derive approximate location (country and city) and connection type (for example, residential or data center). Used only for free-plan enforcement. We do not receive a street address.

Each provider maintains their own privacy policies and security standards.

Data Retention

• Creative assets (full files) — deleted immediately and automatically after scan results are delivered.
• Scan History thumbnails — retained only for accounts on a plan that includes Scan History, for as long as the associated scan record exists. Not generated or retained on plans without Scan History.
• Account data — retained for as long as your account is active.
• Scan metadata — retained for as long as your account is active and used solely for diagnostics and refund evaluation.
• Purchase records — retained for as long as your account is active for billing and refund purposes.
• Device and abuse-prevention data — retained for as long as your account is active, and deleted when you delete your account.

You may request deletion of your account and all associated data at any time by emailing us.

Your Rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent at any time by closing your account
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at [email protected].

We will action all valid deletion requests within a reasonable timeframe. We reserve the right to decline requests that are manifestly unfounded, repetitive, or made in bad faith, in accordance with applicable data protection law.

Cookies and Local Storage

Our Chrome extension uses only essential local storage required for authentication and session management, via Chrome's secure storage API — no advertising, tracking, or analytical cookies. Our web app uses a small number of cookies described in our Cookie Policy, including a required device cookie used to enforce the free plan, and one optional affiliate-tracking cookie that only activates if you accept it.

Changes to This Policy

If we make material changes to this policy, we will update the effective date above and, where appropriate, notify you by email. Continued use of Mediacrater after changes constitutes acceptance of the updated policy.