Privacy

Section 1 — Who controls your data

§ 1.1 Data controller: Alexander Duggleby, MSc. (sole proprietorship), trading as SimpleVideo.

Address: Marxergasse 24/2, 1030 Vienna, Austria.

Section 2 — What we process

§ 2.1 We process the data needed to provide SimpleVideo and keep the service secure and supportable.

§ 2.2 Website data: the public website is mostly static, but standard server, CDN, and privacy-friendly website analytics logs may record technical request data such as IP address, user agent, request path, referrer, page URL, and timestamp.

§ 2.2a Server and security logs: our servers log every request to SimpleVideo services, including the website, the app with its API and playback requests, our short-link domain, and our error-monitoring service. Each entry records the IP address, date and time, requested host and path (with query parameters removed), request method, response status, size and duration, referrer (with query parameters removed), user agent, and TLS connection details. We use these logs to detect and investigate attacks and abuse and to keep the service secure. The legal basis is our legitimate interest in IT security (Art. 6(1)(f) GDPR). We delete these logs automatically after 30 days, unless we need specific entries to investigate a particular security incident.

§ 2.3 Account and organisation data: we store account identity, organisation membership, billing-related account state, invite records, and settings while the account exists or until that data is deleted as part of account removal.

§ 2.4 Video and playback data: we process uploaded videos, video metadata, player settings, delivery requests, and related operational records so videos can be uploaded, managed, embedded, and played back. For customer-facing analytics and streaming limits, we reduce IP-anonymised delivery logs to aggregate estimates by video, time interval, organisation, and coarse country. We do not persist raw delivery-log rows, IP addresses, user agents, request IDs, referrers, or viewer identifiers for this purpose.

§ 2.4a Call-to-action interactions: when a customer places calls to action on a video and a viewer actively clicks one, we count that click as a daily aggregate total per call to action. These counts contain no viewer identifiers, no cookies, and no location data, and nothing is counted from passive viewing.

§ 2.4b Retired lead forms: until November 2026, customers could add lead forms to videos, and details that viewers entered there were relayed by email to the customer. We have retired this feature. We no longer collect names, email addresses, or messages through videos, and we have deleted all lead-form data we held, including pending submissions and relay messages. Copies remain only in our backups until they expire under the standard backup retention.

§ 2.5 Support data: when you contact us, we process the information in your email and the related service history needed to reply and resolve the issue.

§ 2.6 We do not sell personal data.

Section 3 — Cookies and tracking

§ 3.1 We use only the cookies and browser storage needed for authentication, session security, core app functionality, and technically required security protections. This includes the Bunny Shield security cookie when abuse protection is active on a SimpleVideo-managed domain.

§ 3.2 We do not use advertising trackers on the launch website. The anonymous video player does not set advertising or analytics cookies and does not send a SimpleVideo viewer analytics beacon. Server-side aggregate delivery analytics, operational logging, privacy-friendly website analytics, and service telemetry may be used to understand aggregate usage, apply streaming limits, monitor availability, detect abuse, and troubleshoot failures. Security protections on SimpleVideo-managed domains may still set the technically required cookie described above.

Section 4 — Where data is processed

§ 4.1 SimpleVideo is built as a European-hosted service. Account, application, and support data are intended to be handled from European infrastructure.

§ 4.2 Public video playback is delivered through our video provider and CDN path, so playback requests and cached media delivery may involve infrastructure outside the core app stack depending on viewer location.

§ 4.3 Main service providers currently include:

Section 5 — How long we keep data

§ 5.1 We keep personal data only as long as needed to operate the service, meet legal obligations, or resolve support and security issues.

• Account and organisation data: until account deletion or lawful retention requirements apply.
• Uploaded videos and related metadata: until deleted by the customer or removed with the account.
• Server and security logs (§ 2.2a): 30 days, then deleted automatically, unless needed to investigate a specific security incident.
• Other operational logs: only for a limited period needed for security, debugging, and abuse prevention.
• Data from retired lead forms: deleted when the feature was retired in November 2026; it remains only in backups until they expire under standard backup retention.
• Support correspondence: retained as part of normal business records unless deletion is required or legally possible.

Section 6 — Your rights

§ 6.1 If you are in the EEA, you can request access, correction, deletion, restriction, or portability of your personal data, and you can object to certain processing where applicable.

§ 6.2 You can also file a complaint with your local data protection authority.

Section 7 — Contact

§ 7.1 For privacy requests or questions, contact hello@simplevideo.eu.

Last updated: 2026-11-09.