SODIUM.COLLAB · PRIVACY

Privacy Policy

Effective: September 23, 2026Version: 2026-09-23
This Policy explains what Sodium collects, why we use it, when we share it, and the choices available to you. It applies to Sodium accounts, websites, workspaces, and related services that link to this Policy.

1. Information you provide

2. Information collected automatically

We receive technical information needed to run and protect the service, such as IP address or network-derived location, browser and device details, request times, pages or API actions, error information, authentication events, and security or moderation signals. We may use cookies, session storage, local storage, and similar technologies to keep you signed in, remember preferences, cache project data, and secure requests. You can control some browser storage, but disabling it may prevent the studio from working.

3. How we use information

We use information to create and authenticate accounts; verify email addresses; save, sync, render, and share projects you direct us to share; provide collaboration, messaging, profiles, sample banks, and Spotlight; respond to support; detect fraud, abuse, infringement, and security incidents; troubleshoot and improve the service; measure reliability; comply with law; and protect users and our rights.

We do not sell personal information. We do not use private projects or private rooms in promotional campaigns unless you separately grant the Spotlight promotional permission described in the Terms. Public profiles, public rooms, published sample banks, and Spotlight entries are visible to the audiences selected in the product.

4. When information is shared

We share information with the people and audiences you choose through collaboration and publication features. We share the minimum necessary with vendors that help us operate Sodium, such as hosting, database/storage, email delivery, authentication, security, analytics, and support providers. For example, Brevo may process recipient email addresses and message content to deliver verification messages, and Google or another identity provider may process information when you choose provider sign-in. If you use the GIF picker, your search terms and GIF viewing or selection activity are sent directly to GIPHY for search, media delivery, and SDK analytics; GIPHY may also receive your IP address and browser information. See GIPHY's Privacy Policy. Vendors must handle information according to their contracts and applicable law.

Google AdSense is used to serve and measure advertising. Google and its ad technology partners may use cookies or similar technologies to select ads, measure campaign performance, and limit repeated ads. Loading the AdSense tag may send a request to Google even when no ad is visibly displayed, and cookies may be set if the browser accepts them. Learn more in How AdSense uses cookies; visitors can manage Google ad personalization in Google Ads Settings.

We may disclose information to comply with valid legal process, enforce agreements, investigate abuse or security incidents, protect rights and safety, or support a merger, financing, reorganization, or transfer of service assets. We may publish aggregated or de-identified information that cannot reasonably identify you.

5. Retention and deletion

We keep information while your account or the relevant feature is active, and longer when needed for security, backups, fraud prevention, disputes, legal obligations, or legitimate records. You can delete content through available product controls and may request account deletion by contacting sodiumcollab@gmail.com. Deletion may not immediately remove encrypted backups, moderation records, legal records, or copies other users already received or remixed. We use reasonable processes to remove or de-identify information when it is no longer needed.

6. Security

We use reasonable administrative, technical, and organizational safeguards, including password hashing, session controls, access checks, and transport security where supported. No service can guarantee absolute security. Use a unique password, protect recovery codes, and contact us promptly if you suspect unauthorized access.

7. Your choices and rights

You can review or update available account and profile information in Account Settings, manage what you publish, unpublish Spotlight entries, disconnect supported sign-in methods where available, and request access, correction, deletion, or an explanation of processing by contacting us. Depending on where you live, you may have additional rights such as data portability, restriction, objection, or appeal of a decision. We may need to verify your identity before completing a request, and some information must be retained or cannot be removed because of another person’s rights or legal requirements.

8. Children and international processing

Sodium is not directed to children who cannot legally consent to the service in their location. Do not create an account if you are not eligible. Our providers or systems may process information in countries other than where you live; we use safeguards required by applicable law for those transfers.

9. Changes and contact

We may update this Policy when the service, providers, or legal requirements change. We will post the current version with a new effective date, describe material changes where reasonably practicable, and request renewed consent where required. The version and acceptance time associated with your account help us determine which notice you accepted.

Privacy questions and rights requests: sodiumcollab@gmail.com. The current version is always available at /privacy.html.