Privacy Policy
Last updated 5 October 2026
Ithola (“we”, “us”) runs a video platform at https://www.ithola.com. This policy explains what we collect, why, who else handles it, and the choices you have. You can watch without an account; most of what is below applies only if you sign in.
1. What we collect
If you sign in with Google
- Your name, profile picture and email address, from your Google account. We ask Google for nothing beyond this basic profile and email. We never see your Google password.
- What you do while signed in: videos you watch and how far, likes, comments, categories you choose as interests, and videos you mark “Not interested”.
If you do not sign in
- A random identifier stored in your browser, used to count views once, remember an anonymous like, and attach a guest comment to your browser rather than to you. It is not linked to your name or email.
- Your IP address, used briefly to limit how many guest comments one address can post (spam control). We do not use it to identify you.
If you are an approved publisher
- The videos, titles, descriptions, thumbnails and tags you upload.
Like most services, our hosting providers keep standard technical logs (IP address, browser type, pages requested) for security and reliability.
2. How we use it
- To run the service: play videos, count views, show likes and comments, and let publishers manage their videos.
- To personalise your feed. When you are signed in, what you watch, like, comment on and say you are interested in decides which videos we suggest. Likes and comments from people who are not signed in are shown as totals but are never used to build a profile or recommend anything.
- To keep the platform safe: moderation, rate limits, and stopping spam and abuse.
- To understand how the service performs, in aggregate.
We do not sell your personal information, and we do not use it for advertising.
3. What other people can see
- A signed-in comment shows your name and profile picture. A guest comment shows only “Anonymous”.
- Your email address is never shown to other users and is never returned by our public interfaces.
- Your watch history, interests and “Not interested” choices are private to you.
4. Who handles your data
We use a small number of service providers who process data on our behalf:
- Google — sign-in (Google OAuth).
- Supabase — authentication, our database and image storage.
- Cloudflare — video storage, encoding and delivery, and DNS.
- Vercel and Render — hosting for the website and the server.
These providers may process data in countries other than your own. We share information elsewhere only if the law requires it, or to protect the safety of people or the service.
5. Cookies and local storage
- Sign-in cookies keep you signed in. They are strictly necessary.
- Browser storage remembers your light/dark choice, your anonymous identifier, and whether you dismissed a sign-in suggestion.
We do not use advertising or cross-site tracking cookies.
6. How long we keep it
Account data, watch history, likes, comments and interests are kept while your account exists. Records of which videos were shown to a viewer are deleted after 90 days. Guest comments and anonymous likes stay until the video or comment is removed. When you delete your account we delete or de-identify your personal data, except what we must keep to meet legal obligations or resolve disputes.
7. Your choices
- Edit your interests at any time from the For You page.
- Edit your own signed-in comment for a short time after posting, and delete it.
- Ask us for a copy of your data, to correct it, or to delete your account and its data, by emailing diamondhanson6@gmail.com.
- Clear your browser storage to reset your anonymous identifier.
- Revoke Ithola’s access in your Google Account at myaccount.google.com/permissions.
Depending on where you live (for example the EU, UK or California) you may have further legal rights over your data; we will honour them on request.
8. Children
Ithola is not directed at children under 13, and you must be old enough to have a Google account to sign in. If you believe a child has given us personal information, email us and we will delete it.
9. Security
Access to data is controlled on our servers, connections are encrypted, and our database refuses direct access from browsers. No system is perfectly secure, so we cannot promise absolute security.
10. Changes and contact
If we change this policy in a meaningful way we will update the date above and, for significant changes, say so on the site. Questions or requests: diamondhanson6@gmail.com.