1. Who is responsible for your data
Wacdum is the data controller for the personal data described here. For privacy questions or to exercise any right below, email privacy@wacdum.com.
2. What we collect
Information you give us
- Account details: your full name, email address, and a hashed password. We never store your password in a readable form.
- Your captures: the screenshots and recordings you choose to upload, plus their titles, file size, and format.
- Custom domains: any domain you connect, and the DNS records needed to verify it.
- Branding: an optional favicon and display preferences.
- Correspondence: messages you send our support address.
Information we collect automatically
- View analytics: when someone opens a share link we record a timestamp and a coarse country derived from the request. We do not store the full IP address of viewers, and we do not build profiles of them.
- Operational logs: request metadata and error traces needed to keep the service healthy and secure. Retained for up to 30 days.
- Session cookie: a single cookie that keeps you signed in. See our Cookie Policy.
What we do not collect
- We do not run third-party advertising or cross-site tracking pixels.
- We do not scan the contents of your captures to build advertising profiles.
- We do not ask for or store payment card numbers. Our payment processor handles those directly.
3. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and run your account | Name, email, password hash | Performance of a contract |
| Store and serve your captures | Captures, titles, metadata | Performance of a contract |
| Show you view counts | Timestamp, coarse country | Legitimate interest (a core product feature) |
| Verify your email, reset a password | Email address, one-time code | Performance of a contract |
| Prevent abuse, keep the service secure | Operational logs | Legitimate interest / legal obligation |
| Billing and tax records | Plan, invoices | Contract / legal obligation |
| Product email you opted into | Email address | Consent (withdraw any time) |
4. Who we share it with
We do not sell your personal data and we do not share it for advertising. We do use a small set of vendors to run the service, each contractually bound to process data only on our instructions. The current list, with what each one handles and where, is on our Subprocessors page.
We may also disclose data where we are legally required to, or to protect the rights and safety of our users. Where we receive a lawful request for your data we will notify you unless we are prohibited from doing so.
5. International transfers
Our vendors may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with encryption in transit.
6. How long we keep it
- Captures: until you delete them, or a self-destruct expiry passes.
- Account data: while your account is open, then 30 days after deletion so an accidental closure can be undone.
- View analytics: kept in aggregate for the life of the capture.
- Operational logs: up to 30 days.
- Billing and tax records: as long as tax law requires, typically 6 to 7 years.
7. Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your data (you can do this yourself from settings);
- restrict or object to a particular use;
- export your data in a portable format;
- withdraw consent where consent was the basis.
Email privacy@wacdum.com and we will respond within 30 days. We will not charge you or degrade your service for exercising these rights. If you are unhappy with our response you may complain to your local data protection authority.
If you are in California, we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use sensitive personal information for inferring characteristics.
8. Security
Data is encrypted in transit with TLS and at rest by our storage providers. Passwords are hashed. Access to production systems is limited to those who need it. More detail, and how to report a vulnerability, is on our Security page.
9. Children
Wacdum is not intended for children under 16. We do not knowingly collect their data; if you believe a child has created an account, contact privacy@wacdum.com and we will remove it.
10. Changes
If we make a material change to this policy we will email account holders before it takes effect. The “last updated” date above always reflects the current version.