O

Privacy Policy

Last updated: January 20, 2026

1. Introduction

Originly ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and profile details when you create an account
  • Creator Profile: Username, display name, bio, and avatar if you become a creator
  • Uploaded Content: Files, resources, and metadata you upload to the platform
  • Communications: Messages or reports you send to us

2.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, and interactions with content
  • Device Information: Browser type, operating system, and device identifiers
  • IP Address: We collect and hash IP addresses for security purposes and download tracking (see Section 5)
  • Cookies: Session cookies for authentication and functionality

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Originly platform
  • Process your account registration and authentication
  • Enable creator features and resource sharing
  • Send important notifications about your account or uploads
  • Respond to your inquiries, reports, or support requests
  • Detect and prevent fraud, abuse, and security threats
  • Comply with legal obligations
  • Improve our services based on usage patterns

4. Legal Basis for Processing

We process your data based on:

  • Contract Performance: To provide our services as agreed in our Terms of Service
  • Legitimate Interests: To improve our platform, ensure security, and prevent abuse
  • Legal Obligations: To comply with applicable laws and respond to legal requests
  • Consent: Where you have explicitly agreed to specific data processing

5. Download Tracking & IP Hashing

We track downloads for rate limiting and abuse prevention. When you download a resource:

  • Your IP address is one-way hashed using a secure algorithm (SHA-256 with salting)
  • The original IP address is never stored in plain text
  • The hash cannot be reversed to reveal your actual IP address
  • This allows us to enforce download limits and detect abuse without identifying individuals

Download audit logs are retained for a limited period to investigate abuse or respond to legal requests, after which they are automatically deleted.

6. Third-Party Services

We use the following third-party services:

  • Cloud Storage: Your uploaded files are stored on secure cloud storage (Backblaze B2)
  • Image Processing: Thumbnail images may be processed through ImageKit for optimization
  • Authentication: We use OAuth providers (like GitHub and Google) if you choose to sign in with those services

These services have their own privacy policies. We recommend reviewing them.

7. Data Sharing

We do not sell your personal information to third parties. We may share your data:

  • With your consent: When you explicitly agree to share information
  • Service Providers: With trusted partners who help us operate the platform (under strict confidentiality agreements)
  • Legal Requirements: When required by law, court order, or to protect rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

8. Data Security

We implement appropriate security measures including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing
  • Access controls and authentication
  • Regular security audits
  • Rate limiting to prevent abuse

However, no internet transmission is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal requirements)
  • Portability: Request your data in a portable format
  • Objection: Object to certain processing of your data

To exercise these rights, contact us at privacy@originly.dev.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

  • Account Data: Retained until you delete your account
  • Uploaded Content: Retained until you delete it or we remove it for policy violations
  • Download Logs: Retained for 90 days for abuse detection
  • Legal Holds: Data may be retained longer if required for legal proceedings

11. Children's Privacy

Originly is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it promptly.

12. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform. Your continued use of Originly after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

Email: privacy@originly.dev