Overview

Viewport lets you share files and text using short access codes. This Privacy Policy explains what personal data we process, why we process it, and your rights under the UK GDPR and EU GDPR.

Who We Are

Viewport is a UK-based service operated by the Viewport team (pre-incorporation) and is the controller of your personal data (the "Controller"). For privacy questions or to exercise your rights, contact info@viewport.live.

EU Representative

Because Viewport is established in the United Kingdom and offers services to individuals in the European Union, we have appointed an EU representative in accordance with Article 27 of the GDPR. Details will be provided here once an EU representative service is appointed. EU users may contact that representative regarding GDPR-related matters in addition to contacting us directly at the email above.

Data We Collect

• Account data: name, email address (if provided), and account or role settings.
• Content data: files and text you upload, plus related metadata (e.g. filename, file type).
• Access data: view counts, access timestamps, and a strictly necessary viewer ID cookie used to prevent duplicate or fraudulent views.
• Device & log data: basic technical and security logs (e.g. IP address, user agent, error logs).

How We Use Your Data

• Provide and operate the service (create access codes, store content, deliver downloads).
• Protect security and prevent abuse (PIN protection, access validation, fraud prevention).
• Maintain reliability and performance through limited operational analytics (not used for profiling or advertising).
• Respond to support requests and comply with legal obligations.

We implement appropriate technical and organizational security measures, including encryption in transit, access controls, and audit logging to protect personal data.

Legal Bases (UK & EU GDPR)

• Contract: to provide the service you request.
• Legitimate interests: to secure, operate, and improve the platform while minimising impact on privacy.
• Consent: where required for optional features or communications (you may withdraw consent at any time).

Cookies

Viewport uses a single strictly necessary, first-party viewer ID cookie to ensure accurate access counts and prevent abuse. This cookie is required for core functionality, persists for up to 30 days, and is not used for cross-site tracking, profiling, or advertising. Disabling this cookie may affect service functionality.

Sharing & Subprocessors

We do not sell personal data. We use trusted subprocessors to operate Viewport. Core infrastructure — file storage, databases, and authentication — is provided by Supabase. All subprocessors are contractually required to implement appropriate safeguards and process data only on our instructions. A current list of subprocessors is available upon request.

International Transfers

Your data may be processed outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect personal data.

Data Retention

Files and access codes are deleted when their view limits are reached or when you delete them. Security and operational logs are retained only as long as necessary for security, fraud prevention, and legal compliance — typically up to 90 days unless a longer period is required for investigations or legal obligations.

Your Rights

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• File a complaint with a supervisory authority.

To exercise these rights, contact info@viewport.live. We will respond to verified requests within one month, as required by applicable data protection law.

Children

Viewport is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.