Legal
Privacy Policy
Last updated: July 2026
9by16 ("we", "us", "our") operates the website 9by16.co. This policy explains what data we collect, why we collect it, and how it is used. We are committed to handling your data responsibly and in compliance with the UK GDPR and Data Protection Act 2018.
1. Data we collect
Account data
When you create an account, we store your name and email address, provided either directly or via your chosen sign-in provider (e.g. Google). We do not store passwords. You may also set a public profile handle, role, work type, country, and bio — this information is displayed publicly on your profile page.
Submission data
When you submit a post, we store the post URL, media type, author username, associated hashtags, and submission timestamp.
Usage data
We store records of posts you save, collections you create or follow, tags you follow, and profiles you follow. This data is used to personalise your experience. We do not use advertising cookies or third-party tracking scripts beyond analytics (see section 7).
Stored media
For approved video posts, we may store a copy of the video file in order to serve it reliably. The original content remains the property of its creator.
2. How we use your data
- To create and maintain your account and session
- To display your public profile, collections, and submissions
- To personalise your feed based on tags and profiles you follow
- To display submitted posts in the curated library
- To allow administrators to review, tag, and moderate submissions
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Legal basis for processing
We process your data on the basis of contract (providing the service you signed up for), legitimate interests (operating the platform and preventing abuse), and where applicable your consent. You may withdraw consent at any time by deleting your account or requesting data deletion.
4. Data retention
Account data is retained while your account is active. Submission data and saved/follow records are retained as part of the platform unless you request deletion. You can delete your account at any time from your account settings, or request data deletion — see our Data Deletion page.
5. Third-party processors
To operate the service, we use trusted third-party infrastructure providers for hosting, database storage, transactional email, and authentication. These providers process data only as necessary to deliver the service and are bound by appropriate data processing agreements. We also integrate with Google for optional sign-in and with Meta for post embedding. Where content is embedded from third-party platforms, those platforms' own privacy policies apply.
6. Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. To exercise any of these rights, contact us at support@9by16.co.uk or delete your account directly from your account settings.
7. Cookies and analytics
We use a small number of first-party cookies that the service needs in order to work, and — only with your consent — Google Analytics. We do not use advertising cookies, and we do not sell or share data with advertisers.
Strictly necessary (no consent required)
A session cookie that keeps you signed in (HttpOnly), a short-lived cookie recording that you have finished setting up your profile, and — if you arrived through an invite or a specific sign-up route — a cookie noting which one, so we can credit the referral. These are removed or expire once they have served their purpose. Your light or dark theme preference is kept in your browser's local storage rather than a cookie.
Analytics (consent required)
Google Analytics sets cookies to measure aggregate usage — which pages are visited and how the site is used overall. Analytics storage is disabled by default and nothing is measured unless you accept. You can change your choice at any time using the Cookieslink in the footer. Google Analytics is subject to Google's own privacy policy.
8. Browser extension
The 9by16 browser extension lets you save Instagram and TikTok posts to your 9by16 account and browse what you have already saved. It is optional and functions only while you are signed in.
What it accesses
On Instagram and TikTok, the extension reads the address of the post you are viewing so it can be saved, and adds a 9by16 button to the page. When you open the extension from the toolbar on any other site, it reads that tab's address only to determine whether it contains a saveable post. It does not read page content, form inputs, or passwords, and it does not collect your browsing history.
What it sends us
Only what you choose to save: the post URL, any hashtags you add, and the collection you pick. This is stored against your account exactly as described in sections 1 and 2.
What it stores locally
The extension keeps a small amount of data in your browser's local extension storage to remember an in-progress sign-in. It is never transmitted to third parties and is removed when you sign in or after fifteen minutes.
Authentication
The extension signs in using your existing 9by16 session cookie. It never handles or stores your password, and it does not use advertising or tracking scripts.
We do not sell or transfer data collected by the extension to third parties, do not use it for purposes unrelated to saving and organising posts, and do not use it to determine creditworthiness or for lending purposes.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related queries, contact us at support@9by16.co.uk.