Privacy Policy

Overview

This policy covers all Ekly products and services, including the Ekly website, all tools available on ekly.app, and any Ekly browser extensions.

The short version: we only collect what we need to run the service. We do not sell your data. We do not share it with advertisers. Your content belongs to you.

This policy is written to comply with Australian privacy law (Privacy Act 1988) and Canada's PIPEDA.

Information we collect

When you create an account:

Your name and email address
Your password, stored securely in a way that means we cannot read it
Your timezone, so we can display times correctly

When you use Ekly tools:

Content you create or upload, such as short links, screenshots, and screen recordings
Basic details about that content, such as the file name, size, and when it was created
When someone clicks a link or views something you have shared, we record the country, device type, and browser. We never record exact locations or identifiable personal details of your visitors

When you use the service generally:

Basic activity logs so we can diagnose problems and keep the service running
Your login session, so you stay signed in between visits

How we use your information

To provide and run all Ekly tools and features
To store and serve content you upload so you and your recipients can access it
To show you analytics on your links and shared content
To send you emails we need to send, such as confirming your account or resetting your password
To send a weekly summary of your activity if you have active links
To detect and prevent misuse of the service
To meet our legal obligations

We do not use your data for advertising. We do not build profiles to sell. We do not share your data with third parties for their own purposes.

Browser extension

This section explains how Ekly browser extensions handle your data. It applies to Ekly Capture and any future Ekly extensions.

When you sign in to an Ekly extension:

We sign you in using your Google account. This connects to your existing Ekly account, or creates a new one if you do not have one yet
Your name and email are stored as part of your Ekly account, the same as signing up on the website
A sign-in token is saved locally in your browser so you stay logged in. It is only accessible to the Ekly extension and nothing else on your device
You can only be signed in on one browser at a time. If you want to sign in on another browser, you need to sign out of the first one
Your session expires automatically after 90 days if you have not used it

When you take a screenshot or record your screen:

Your screen is captured locally on your device. Nothing is sent anywhere until you choose what to do with it
If you save to your device, the file is saved directly to your downloads folder. We never see it
If you save to cloud, the file is uploaded to your Ekly account and stored securely on our servers
If your recording includes your camera, both your screen and camera are combined on your device before anything is uploaded. We do not receive separate camera footage
Your microphone is only used when you choose to record with audio. It is not active at any other time

When you save something to the cloud:

Your file is stored securely and linked to your account
By default, everything you save is private. Only you can see it
If you create a share link, anyone with that link can view the file. The link uses a random address that cannot be guessed
You can delete anything you have saved at any time from your Ekly dashboard. Deleting removes the file permanently

What the extension does not do:

It does not record or capture anything in the background without you starting it
It does not read or collect the content of websites you visit
It does not track your browsing activity
It does not access your camera or microphone unless you are actively recording

How long we keep your data

Your account information is kept until you close your account
Content you upload, such as captures and recordings, is kept until you delete it or close your account
Analytics data is kept for 2 years and then automatically deleted
Your login session on the website expires after 30 days of not using it
Your extension login expires after 90 days of not using it

Cookies

We do not use tracking cookies or advertising cookies. We do not show a cookie consent banner because we do not place any cookies on pages that your link visitors see.

We use one cookie on the Ekly dashboard to keep you signed in while you are using the site. This cookie is only used for that purpose and does not follow you around the web.

Ekly browser extensions do not use cookies at all. Your sign-in is stored locally inside the extension only.

Third party services

We use a small number of external services to keep Ekly running. These providers may handle your data as part of delivering the service:

A content delivery and security provider that protects the service from attacks
A cloud storage provider where your uploaded files are stored
A server hosting provider based in Australia
An email delivery provider for sending you account emails
An error monitoring service that helps us fix bugs -- this does not include any personal information

We only share with these providers what is needed to run the service. None of them receive your data for their own marketing or advertising purposes.

Your rights

Under Australian and Canadian privacy law you have the right to:

See what personal information we hold about you
Ask us to correct anything that is wrong
Ask us to delete your account and everything associated with it
Download a copy of your data from your account settings
Withdraw consent for any optional data use

You can do most of this directly from your account settings page. For anything else, contact us at the address below.

Keeping your data safe

All data is sent over an encrypted connection
Passwords are stored in a way that means we cannot read them
Sign-in tokens and keys are never stored in a readable form
Visitor IP addresses are anonymised before we store them and cannot be reversed
Files you upload are checked for safety before being stored
Our database is only accessible to our application servers, not the public internet
We review our security practices regularly

Changes to this policy

If we make significant changes to this policy, we will let you know by email. Small updates will be noted with a new date at the top of this page. Continuing to use Ekly after changes means you accept the updated policy.