1. What We Collect
Wondra collects only the data necessary to operate the platform:
- Account data: Email address and username, collected when you create an account.
- Profile data: Optional fields you choose to provide — display name, bio, country, primary role, social links, and avatar.
- Submission data: Video files, titles, AI model attribution, prompt metadata, and tags submitted through the platform.
- Activity data: Votes cast, films saved, submissions filed, and interactions with platform features.
- Payout information (prize winners only): If you win an Audience Award, we collect payout details (such as payment method and identifier) solely for the purpose of delivering the prize. This information is stored separately from your public profile and is never displayed publicly.
- Operational logs: Server-side logs including request metadata, error events, upload diagnostics, and session identifiers. These are used to maintain platform reliability and investigate issues. Logs are not linked to individual user profiles for marketing purposes.
- Watch and engagement data: Anonymized viewing behavior — including watch duration and completion rate — used to power the platform's ranking system. This data is aggregated at the video level and is not sold or shared.
2. How We Use Your Data
Data is used to:
- Operate and authenticate your account.
- Process and review content submissions.
- Power ranking, discovery, and curation features.
- Send transactional emails — submission confirmations, approval or rejection notices, and contest notifications. We may also send occasional platform announcements if you have opted in. You can opt out at any time.
- Maintain platform integrity, investigate abuse, and enforce these Terms.
- Improve the platform based on aggregate usage patterns.
We do not sell your personal data. We do not use it for advertising.
3. Authentication
Account creation and sign-in are handled by Supabase, which manages authentication tokens and session data. Email delivery for magic links and OTP codes is handled by Supabase's auth infrastructure. Wondra does not store your password. Your session is managed via secure, HTTP-only cookies. Supabase's privacy practices apply to authentication data and are governed by their own policies.
4. Third-Party Services
Wondra uses the following services to operate the platform:
- Supabase: Database, authentication, and server infrastructure.
- Vercel: Application hosting, edge delivery, and server-side rendering.
- Cloudinary: Video storage, transcoding, and delivery. Uploaded video files are stored on Cloudinary's infrastructure.
- Resend: Transactional email delivery. Used to send approval notifications and other platform emails to creators. Resend processes the recipient email address and message content necessary to deliver each email.
- Embedded video providers (e.g. YouTube, Vimeo): Used for certain curated editorial content. These providers may set their own cookies and collect data according to their own privacy policies.
Each of these services processes data under their own terms and privacy policies. We select services that apply reasonable data protection standards, but we cannot guarantee their practices.
5. Cookies
Wondra uses session cookies strictly necessary to authenticate your account and maintain your login state. We do not use first-party tracking or advertising cookies. Third-party embedded video players may set their own cookies when you interact with them, in accordance with their respective privacy policies.
6. Data Retention
Account and profile data is retained while your account is active. Submission records, including approved and rejected leads, are retained for platform integrity and moderation purposes even after content is removed from public view. Operational logs are retained for a limited period for debugging and security purposes and are then deleted or anonymized.
7. Data Deletion
To request deletion of your account and associated personal data, contact us at hello@wondracinema.com with the subject line "Data Deletion Request." We will process requests within a reasonable timeframe.
Please note the following limitations:
- Video files uploaded to Cloudinary may take additional time to be purged from their infrastructure.
- Content that has been publicly viewed or shared may persist in third-party caches or archives beyond our control.
- Aggregate, anonymized engagement data (e.g. watch counts on videos) may be retained even after personal data is deleted, as it is no longer linked to an individual.
- We may retain records required by law or for legitimate business purposes such as fraud prevention and abuse mitigation.
8. Security
Wondra implements reasonable technical and organizational measures to protect your data — including encrypted connections, server-side authentication, and access controls. However, no system is completely secure. We cannot guarantee that unauthorized access, data breaches, or hardware failures will never occur. In the event of a significant breach affecting your personal data, we will notify affected users as required by applicable law.
9. Children's Privacy
Wondra is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at hello@wondracinema.com and we will remove the account promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by an updated date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy. For material changes, we may notify registered users by email.
11. Contact
For privacy-related questions, data requests, or concerns, contact us at hello@wondracinema.com. Include "Privacy" in the subject line so we can route your request appropriately. We are a small team and will respond as promptly as we can.