Introduction
kamra ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our surf video sharing service.
Information We Collect
1. Account Information
- Username: Required for all users
- Email address: Collected when you sign in with Google
- Password: We use a shared password system - we don't store individual passwords
2. Content You Upload
- Surf videos: Videos you upload to share with the community
- Video metadata: File name, size, duration, upload date, surf spot location
- Device information: Device type and user agent (to enforce mobile-only uploads)
3. Usage Data
- Karma points: Your accumulated karma from uploads and fulfilled requests
- Video requests: Surf spots and karma rewards you've requested
- Authentication cookies: To keep you signed in (essential for service)
How We Use Your Information
- To provide our service: Enable video uploads, sharing, and karma system
- Authentication: Keep you signed in and secure your account
- Enforce upload limits: Prevent spam and ensure fair usage
- Match requests: Connect video uploads with community requests
Data Storage & Retention
- Videos: Automatically deleted after 12 hours
- Account data: Stored until you request deletion
- Database: Hosted on MongoDB Atlas (encrypted at rest)
- Video storage: Vercel Blob Storage (secure cloud storage)
Your Rights (GDPR)
Under GDPR and other privacy laws, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Deletion: Request deletion of your videos or entire account
- Right to Rectification: Correct inaccurate personal data
- Right to Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing of your personal data
To exercise any of these rights, contact us using the information below.
Data Sharing
We do not sell, rent, or share your personal information with third parties, except:
- Service providers: MongoDB (database), Vercel (hosting), Google (OAuth)
- Legal requirements: If required by law or to protect our rights
Cookies
We use essential cookies for authentication (NextAuth session cookies). These cookies are necessary for the service to function and do not require consent under GDPR.
Security
We implement appropriate security measures including HTTPS encryption, secure authentication, and encrypted database storage to protect your personal information.
Children's Privacy
Our service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy.
Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, contact us at:
Email: privacy@kamra.live (or use your domain)