Legal
Privacy policy.
Last updated:
Uideo collects only what it needs to run a free library of design talks. We don't sell your data and we don't show ads. We count visits with Ahrefs Web Analytics, which sets no cookies and doesn't follow you across sites. Our fonts and other scripts are served from our own servers, so browsing Uideo sends your IP address only to Ahrefs for that count, to Google on the sign-in page, and to the video players you choose to load.
Who we are
Uideo (uideo.net) is run by an independent private operator, who is the “controller” of your personal data under the EU and UK General Data Protection Regulation (GDPR). In this policy, “Uideo”, “we” and “us” mean the operator of Uideo. “You” means anyone who visits the site or has an account.
For anything about your data, email [email protected].
What we collect and why
You can browse and watch talks without an account. We collect the following only when it applies to you.
Your account
You sign in with your Google account. We store your email address, the account identifier Google returns and whether Google has verified your email. If you add them, we also store a username, location, links and an avatar. We use this to create your account, sign you in and show your profile.
Sign-in and security
For each signed-in session we store the IP address and browser user agent, and on your account the time and IP address of your current and previous sign-in and a sign-in count. We use this to keep your account secure, spot abuse and let you stay signed in.
What you do on Uideo
We store the talks you like, save to Watch Later, mark as watched or add to playlists, and the speakers and conferences you follow. We use this to build your feed, lists and recommendations, and, in aggregate, to rank talks. Your lists are private to you.
Uideo doesn't send newsletters, digests or notifications. We use your email address to identify your account, and we write to you only to reply to a message you sent us.
Analytics
We use Ahrefs Web Analytics to see which pages and talks people visit and where they come from. On each page view, a script from Ahrefs sends it the page address and title, the page that linked to it, your browser language and screen size, and the address of any link you click. As with any request, Ahrefs also receives your IP address and browser user agent. The script sets no cookies, stores nothing on your device and doesn't link your visits to your account or to other sites. We see only aggregated reports. Blocking analytics.ahrefs.com in your browser or with a content blocker stops it.
Server logs
Like most websites, our server records each request: IP address, time, page requested and browser user agent. We use these logs to run, debug and protect the service, and we keep them for a short period only.
Messages you send us
If you email us, we keep the message and your address to reply and to keep a record of the conversation.
We do not collect payment details, precise location, or special categories of data such as health or political views, and we do not make decisions about you by automated means that have legal or similarly significant effects.
Legal bases (EU and UK)
- Contract: to provide your account, lists and feed.
- Legitimate interests: to keep the service secure, prevent abuse, debug it, rank talks using aggregate activity, and measure visits with cookieless analytics. You can object at any time.
- Consent: to load embedded video players. You can withdraw consent at any time in cookie settings. Withdrawal doesn't affect what happened before.
- Legal obligation: when the law requires us to keep or disclose data.
International transfers
Some providers, including Google, Vimeo and Ahrefs, process data in the United States and other countries outside the EU and UK. Where that happens, transfers rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.
How long we keep data
- Account data and activity: as long as your account exists. When you ask us to delete your account, we delete it within 30 days, except where the law requires us to keep something.
- Sessions: until you sign out or the session is removed.
- Sign-in IP addresses: replaced at each sign-in.
- Server logs: a short period, then deleted or rotated.
- Backups: deleted data can persist in backups for a limited time until they are overwritten.
Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy, including in a portable format;
- correct data that is wrong or incomplete;
- delete your data and your account;
- restrict or object to how we use your data, including analytics;
- withdraw your consent for embedded players.
Email [email protected]. We'll respond within one month, and may ask you to confirm your identity first, usually by replying from your account's email address. We won't treat you differently for using these rights. You can clear your Watched and Watch Later lists yourself on those pages.
EU and UK residents
You also have the right to complain to the data protection authority where you live or work. We'd appreciate the chance to resolve your concern first.
US residents
Residents of California, Colorado, Connecticut, Virginia and other US states with privacy laws have the rights to know, access, correct and delete their personal information, and to opt out of its sale, sharing for targeted advertising and profiling. Uideo does not sell or share personal information and does not profile users in ways that produce legal or similar effects, so there is nothing to opt out of. An authorised agent may make a request for you with your written permission. If we decline a request, you can appeal by replying to our decision.
Categories collected in the last 12 months, as described above: identifiers (email, account ID, IP address), internet activity (pages requested, likes, lists, follows), and approximate location if you type one in your profile. Sources: you, your browser and Google sign-in. None were sold or shared.
Do Not Track and Global Privacy Control. Because we don't track you across sites or sell data, these signals don't change how Uideo behaves. Embedded players still need your choice in cookie settings.
Children
Uideo is not directed at children. You must be at least 16 to create an account. We don't knowingly collect data from anyone under 16; if you believe a child has given us data, email us and we will delete it.
Security
All traffic is encrypted with HTTPS. Session cookies are signed and not readable by scripts, access to production systems is limited, and we don't handle passwords: Google checks them when you sign in. No system is perfectly secure; if a breach affects your data, we'll notify you and the authorities as the law requires.
Changes and contact
We may update this policy as Uideo changes or the law requires. We'll change the date at the top, and for significant changes we'll announce them on the site before they take effect. Earlier versions are available on request.
Questions, requests or complaints: [email protected].
Adapted from the Basecamp open-source policies / CC BY 4.0.