Gifbox Supplement
Read together with the shared Privacy Policy. This supplement only covers what is specific to Gifbox; everything else (your GDPR rights, the data controller, law-enforcement disclosure, children’s privacy, storage location, the change process and contact details) is in the shared policy.
Effective for Gifbox: 30 Jun 2026
About Gifbox
Gifbox is a platform for uploading, hosting, sharing and discovering GIFs. It also offers a developer API.
How you sign in
Gifbox uses passwordless magic-link sign-in. We do not collect or store a password, and we do not require a username. When you sign in, we email you a one-time link that expires after a short period.
What we collect on Gifbox
- Account Information: We collect your e-mail address and whether it has been verified. We do not collect a password or username.
- Your Content: To provide the service, we store the GIFs you upload together with their metadata — titles, descriptions, tags, and technical details of the uploaded file (original filename, file type and size) and the media variants we generate from it.
- Content disclosures: Where you indicate that an upload is AI-generated, we store that disclosure alongside the post.
- Sessions: For each active session we store a device description (user-agent) and session activity timestamps.
- Abuse Prevention & view counting: To protect the service and to count how many times a GIF has been viewed, we process your IP address and device description (user-agent). For view counting these are combined and hashed with a rotating salt so that we can de-duplicate and rate-limit views without retaining your raw IP address. We also derive an approximate country from your connection.
- Developer API: If you create an API key, we store the key in hashed form along with usage information (which endpoints were called and how many times) so we can operate, secure and rate-limit the API.
Service providers for Gifbox
In addition to the providers listed in the shared policy, Gifbox uses:
- Scaleway, provides us with transactional email delivery (used to send magic-link sign-in emails).
- Backblaze, provides us with cloud services to store media at scale.
- Hetzner, provides us with cloud services to run Gifbox.
Changes to service providers and processing regions
We may add, replace or change operational service providers, their subprocessors or processing regions without advance notice to you where reasonably necessary to operate, secure, scale or improve the existing functions described in this policy. For Gifbox, these functions include hosting and infrastructure, media storage and delivery, transactional email, security and abuse prevention, and API infrastructure.
We will update the named provider list above promptly after a change. This exception concerns advance notice to users only; it does not limit any contractual or legal duties concerning processors, subprocessors or international transfers.
We will give advance notice in accordance with the shared Privacy Policy if a change introduces a new processing purpose, materially different categories of personal data or recipients, or a material reduction in your rights or the safeguards used for international transfers.