Squeakit

Privacy Policy

Last updated: November 14, 2026

This page explains what Squeakit stores about you, why, and what you can do about it. Squeakit has no ads, no analytics and no tracking.

Who is responsible

Marco
Wien, Österreich
Email: conatct.dyplay@gmail.com

What Squeakit stores

  • Your account: email address, username, display name, your password (only as a secure hash, never readable), and whatever you add to your profile: bio, location, website, profile photo and banner.
  • What you post and do: squeaks and replies, photos, GIFs and videos, reels and their comments, likes, resqueaks and reposts, bookmarks, who you follow, favorite GIFs and your notifications.
  • Reels: a video you post as a reel is converted on our own server with FFmpeg (no outside service is involved) into a smaller video and a cover picture. The file you uploaded is deleted once that's done.
  • View counts: how many times each squeak and reel has been seen, and how often a reel was watched to the end. Squeakit doesn't save who saw what. So that each person counts only once an hour, the server keeps a scrambled code made from your account or IP address in memory for an hour (never written to disk).
  • Sign-up and password resets: your email address and a scrambled version of the code we email you, for up to an hour.
  • Technical data: to deliver pages, the server processes your IP address and browser details. To stop abuse, IP addresses are counted in memory for up to an hour (never written to disk). Server logs with IP addresses and pages requested are kept for at most 14 days to keep the service secure.

Why, and on what legal basis

  • To run your account and show your posts: this is the service you signed up for (Art. 6 (1) (b) GDPR).
  • To keep Squeakit safe from spam, bots and attacks, to handle reports, and to keep suspended accounts from coming back: our legitimate interest in a working, safe service (Art. 6 (1) (f) GDPR).
  • To show how often a squeak or reel has been seen: our legitimate interest in letting people see how far their posts reach (Art. 6 (1) (f) GDPR).
  • To put together your For you tab and the Reels page from who you follow and what you like, resqueak, repost, comment on and post: this is part of the service (Art. 6 (1) (b) GDPR). The order is worked out when you open them and kept in memory for up to half an hour so scrolling stays in order. No profile of you is saved, and the Following tab shows squeaks without this ranking, newest first.
  • Where the law requires us to keep or share data (Art. 6 (1) (c) GDPR).

What others can see

Profiles and squeaks are public: anyone can see them, also without an account. Your email address and password are never shown. Bookmarks and the squeaks you liked are only visible to you. A view count is just a number: nobody, not even the author, can see who viewed a squeak.

Cookies and storage on your device

Squeakit only uses cookies it needs to work, which the law allows without asking first (§ 165 (3) TKG 2021): one that keeps you signed in (up to 30 days), and short-lived ones (up to an hour) while you sign up or reset your password. Your browser also remembers your video sound settings (muted, volume). There are no tracking or advertising cookies, so there's no cookie banner.

Services Squeakit uses

Email: Resend

Sign-up and password reset codes are sent through Resend (Resend, Inc., USA), which receives your email address and the email. Data may be processed in the USA; this is covered by a data processing agreement with the EU Standard Contractual Clauses.

GIFs: KLIPY

GIF search is provided by KLIPY (klipy.com). When you open the GIF picker, your browser connects to KLIPY directly, which receives your IP address, your searches and an anonymous ID (not your name or email). GIFs posted on Squeakit also load from KLIPY's servers when you view them.

Bot protection: Cloudflare Turnstile

If the sign-up and password reset forms show a check from Cloudflare, Cloudflare (Cloudflare, Inc., USA) receives your IP address and browser details to tell people from bots. Cloudflare is certified under the EU-US Data Privacy Framework.

Hosting

Squeakit, its database and all uploaded media run on servers we operate ourselves. They aren't shared with other companies.

How long data is kept

  • Your account and posts: until you delete them or ask us to delete your account.
  • A deleted squeak is removed; only an empty placeholder stays, so replies to it still make sense.
  • An account suspended for breaking the rules: its squeaks, files, likes and follows are removed right away. Its email address and username are kept so they can't be used to sign up again.
  • Sign-up and reset data: up to an hour. Server logs: up to 14 days.

Your rights

You can ask for a copy of your data (Art. 15 GDPR), have it corrected (Art. 16), deleted (Art. 17), restricted (Art. 18) or handed over in a portable format (Art. 20), and you can object to processing based on legitimate interest (Art. 21). To delete your account or use any of these rights, email us from the address on your account. You can also complain to a data protection supervisory authority (Art. 77 GDPR). In Austria, that's the Datenschutzbehörde (Barichgasse 40-42, 1030 Wien, dsb.gv.at); you can also turn to the authority in the EU country where you live.

Age

Squeakit is for people aged 16 and older.

Changes

If this policy changes, the new version will be posted here with a new date. For bigger changes, we'll let you know in the app.