Privacy Policy

This Privacy Policy explains what information Tokokino processes, why it is processed, and the choices available to you when using the website, editor, sharing features, and related services.

Tokokino is an open-source project. Data practices can differ between self-hosted deployments and any official hosted service.

Account and identity data: when you sign in, Tokokino may process information provided by your authentication provider, such as name, email address, profile identifier, and avatar.

Shared content data: if you create a public share link, the rendered exported image and related share metadata are stored so the link can be accessed.

Operational data: Tokokino may process technical information required for service reliability and abuse prevention, such as request timestamps, user agent data, IP-derived logs, and error diagnostics.

Editor content is local by default. Screenshots and styling work remain in your browser unless you explicitly upload or share them through a server-backed feature.

To authenticate users, maintain sessions, and secure accounts.

To store and deliver shared images when you request public sharing.

To operate, maintain, debug, protect, and improve the service.

To comply with legal obligations and enforce platform safety requirements.

Depending on your location, Tokokino processes data under one or more legal bases: performance of a contract (to provide requested features), legitimate interests (security and service reliability), consent (where required), and legal obligations.

Tokokino does not sell your personal data.

Data may be shared with infrastructure providers that support core functionality, including hosting, authentication, and object storage, only as needed to operate the service.

Public share links are accessible to anyone who has the URL. You are responsible for deciding what content you publish through share links.

Data may be disclosed when required by applicable law, legal process, or to protect users, rights, or the service.

Account-related information is retained while your account is active and for a limited period afterward where needed for security, compliance, or dispute resolution.

Shared image records are retained until deleted by you, removed by maintainers for policy reasons, or otherwise removed through normal data lifecycle management.

Short-term logs and diagnostic records are retained only as long as reasonably necessary for operational and security needs.

You may choose not to use sign-in or sharing features if you prefer to keep all editing fully local.

Where applicable law grants privacy rights, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent for specific processing activities.

To submit a privacy request, contact Tokokino using the methods listed in the Terms page and include enough detail to verify and process your request.

Tokokino uses reasonable technical and organizational safeguards to protect personal information. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

Tokokino services and providers may process data in multiple countries. Where required, reasonable safeguards are used for cross-border processing in line with applicable law.

Tokokino is not intended for children under the minimum age required by applicable law. If you believe a child has provided personal information without proper authorization, contact the project so appropriate action can be taken.

This Privacy Policy may be updated from time to time. Material changes will be reflected by updating the effective date and posting the revised policy.

For privacy questions or requests, contact the project through github.com/shivabhattacharjee/tokokino or email hello@theshiva.xyz.