Legal

Privacy Policy

Last updated: May 2026

9by16 ("we", "us", "our") operates the website 9by16.co. This policy explains what data we collect, why we collect it, and how it is used. We are committed to handling your data responsibly and in compliance with the UK GDPR and Data Protection Act 2018.

1. Data we collect

Account data

When you create an account, we store your name and email address, provided either directly or via your chosen sign-in provider (e.g. Google). We do not store passwords. You may also set a public profile handle, role, work type, country, and bio — this information is displayed publicly on your profile page.

Submission data

When you submit a post, we store the post URL, media type, author username, associated hashtags, and submission timestamp.

Usage data

We store records of posts you save, collections you create or follow, tags you follow, and profiles you follow. This data is used to personalise your experience. We do not use advertising cookies or third-party tracking scripts beyond analytics (see section 7).

Stored media

For approved video posts, we may store a copy of the video file in order to serve it reliably. The original content remains the property of its creator.

2. How we use your data

  • To create and maintain your account and session
  • To display your public profile, collections, and submissions
  • To personalise your feed based on tags and profiles you follow
  • To display submitted posts in the curated library
  • To allow administrators to review, tag, and moderate submissions

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Legal basis for processing

We process your data on the basis of contract (providing the service you signed up for), legitimate interests (operating the platform and preventing abuse), and where applicable your consent. You may withdraw consent at any time by deleting your account or requesting data deletion.

4. Data retention

Account data is retained while your account is active. Submission data and saved/follow records are retained as part of the platform unless you request deletion. You can delete your account at any time from your account settings, or request data deletion — see our Data Deletion page.

5. Third-party processors

To operate the service, we use trusted third-party infrastructure providers for hosting, database storage, transactional email, and authentication. These providers process data only as necessary to deliver the service and are bound by appropriate data processing agreements. We also integrate with Google for optional sign-in and with Meta for post embedding. Where content is embedded from third-party platforms, those platforms' own privacy policies apply.

6. Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. To exercise any of these rights, contact us at support@9by16.co.uk or delete your account directly from your account settings.

7. Cookies and analytics

We use a single session authentication cookie (HttpOnly, strictly necessary for the service to function) and Google Analytics to understand aggregate usage patterns. We do not use advertising cookies. Google Analytics data is anonymised and subject to Google's privacy policy.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related queries, contact us at support@9by16.co.uk.