Privacy notice

Klicova (klicova.com) is an independent project: an online thumbnail editor for content creators. This notice explains in detail what data we process, for what purpose, with whom it is shared, how long it is kept and what rights you have. It complements the Terms and conditions and the cookie policy.

The principle that guides this notice

Klicova processes the least amount of data possible to operate each feature. The central example: your images and designs never touch our servers — all of the editor’s work (including background removal) happens inside your browser.

What data we process, feature by feature

• Account (required for the editor and boards): email address, name and profile photo depending on your sign-in method (email/password or Google), managed with Firebase Authentication. Alongside your account we store the date of acceptance of the terms, as proof of your consent, and the date of your last sign-in.
• Channel profile: the channel name and logo you set up to personalize your previews. It is the only data of yours that may be shown publicly (it signs your posts on the boards).
• Community boards: the text you post, internally associated with your account (identifier and email) for moderation and to sign it with your channel name. Your email is never published.
• Moderation records: the reports about posts (the flagged post, the reason if given, the reporting account if it had a session, the date) and the automatic content filter’s flags. They are used exclusively to review and moderate.
• Anti-abuse security: your IP address is used transiently for posting rate limits (it lives in the server’s memory and is not stored in a database), and when you post a reCAPTCHA token is generated which Google evaluates to distinguish people from bots.
• Technical preferences: session (NextAuth/Firebase cookies), light/dark theme (theme cookie) and language. Complete inventory in the cookie policy.
• Usage and advertising: Google services (analytics and ads) may collect device identifiers and browsing data (see the advertising section).
• Product analytics: Mixpanel records actions inside Klicova (creating an account, downloading a thumbnail, pages visited) linked to your user identifier and email, without IP or location, to understand and improve the product.
• Error diagnostics: if something fails while signing in, paying or in the editor, Sentry receives a technical report (what failed, where in the code, browser and your user identifier), without your email, your images or your payment data, so we can fix it.

What we do NOT do with your data

• Your images do not leave your device. The images you upload to the editor and the thumbnails you create are processed in your browser; on the free plan they are not uploaded to or stored on our servers, and no one else can see them.
• We do not sell your personal data.
• We do not publish your email or your account data anywhere on the site.
• We do not store your IP in a database nor build our own behavioral profiles.

What we use the data for

• Providing the service (editor, templates, export, boards).
• Maintaining your session, your profile and your preferences.
• Security and anti-abuse: preventing spam and automation (reCAPTCHA, rate limits, automatic filters) and moderating the boards, including handling reports.
• Evidencing consent (proof of acceptance of the terms).
• Measuring aggregate usage to improve the product.
• Showing advertising (Google AdSense) exclusively in the labeled spaces.
• Complying with legal obligations where applicable.

Security measures

• Access to the boards database happens only from our server with service credentials; the browser never writes to it directly.
• Posting requires a verified session + reCAPTCHA + rate limits + content filters, in that order.
• Moderation actions (removing posts) are restricted to administrator accounts verified on the server.
• Authentication and encryption in transit (HTTPS) run on Google Firebase infrastructure.

Advertising (Google AdSense)

Klicova is funded by Google AdSense ads, shown only in spaces clearly labeled as “Ad” (gallery and editor; never on the boards, registration, profile or legal pages). Google and its partners may use cookies (such as the DoubleClick cookie) to show ads based on your visits to this and other sites and to measure their performance. How Google uses that information: policies.google.com/technologies/partner-sites. Ad personalization: adssettings.google.com. Where the law requires it, we will ask for consent before using advertising cookies.

Anti-bot protection (reCAPTCHA)

The boards are protected by Google reCAPTCHA Enterprise, which analyzes browser signals to distinguish people from bots without asking you to solve puzzles, only at the moment of posting. Google’s Privacy Policy and Terms of Service apply.

Payments (Stripe)

When you subscribe, your payment details (card number, expiry date, security code) are received and processed directly by Stripe (Stripe Payments Company / Stripe, Inc.), our processor for charges, under its own privacy policy. Klicova does not receive or store that data. What Klicova does store, tied to your account, is: your Stripe customer identifier, your subscription status (active, payment pending, cancelled), the chosen cycle and the start and renewal dates. This information is kept while your account exists and, afterwards, for as long as applicable tax and accounting obligations require. Stripe may process your data outside Mexico under its own international transfer safeguards.

Who we share data with

Only with the providers that make Klicova work, in accordance with their own policies: Google Firebase (authentication, database and hosting), Stripe (payment and subscription processing), Google AdSense (advertising), reCAPTCHA Enterprise (anti-abuse), Google Analytics (aggregate metrics), Mixpanel (product analytics) and Sentry (error diagnostics). We could also disclose information if a competent authority legally requires it. There are no other recipients.

Retention and deletion

• Your account and profile data are kept while the account exists. You can request its deletion at any time, and with it the associated data is deleted.
• Board posts may be removed by moderation or at your request (write to us indicating the post).
• Moderation records are kept for as long as they are necessary to manage the boards.
• The IP used for rate limits is transient: it lives in the server’s memory and is not persisted.
• The pending template preference (if you choose a template before registering) lives only in your browser and expires in 1 hour.

Your rights (ARCO)

You can request access, rectification, cancellation or objection regarding your personal data by writing to cylantekhq@gmail.com. We will handle your request within the timeframes set by Mexican law (LFPDPPP). To verify your identity we may ask you to write from the email associated with your account.

Minors

The service requires being at least 13 years old to create an account. If you are a minor in your country, use it with the consent of your mother, father or guardian. We do not knowingly collect data from children under 13; if we detect such an account, we will delete it.

Changes to this notice

We may update this notice; the “last updated” date will always reflect the version in force. Relevant changes will be announced on the site.