Privacy

Who is responsible

Björkén Media AB, organisation number 559486-2194, Gamla Kyrkogatan 4, 261 31 Landskrona, Sweden, is the controller of your personal data on 0raw. Write to privacy@0raw.io with any question about it.

What we store

Your account

Username, password (as a hash we can't read back), your email if you gave one, your birth date if you gave it, and your Discord account's id if you sign in with Discord. Your profile picture and bio if you add them.

Your uploads

The files, their titles, descriptions, tags and albums. Where a photo was taken, and the camera's serial number and owner, are removed from every JPEG, PNG and WebP before it is stored.

What you do

Votes, favourites, comments, follows, blocks and mutes, reports, and the notices about you.

Sign in

One session for each browser you are signed in on, with the browser's name, so you stay signed in. No IP address.

Connection

Your IP address is used, not stored. To limit uploads without an account and to count votes from one connection once, we keep a keyed hash of your network that cannot be turned back into an address. The upload count is deleted after an hour; the hash on a vote stays with the vote.

Evidence

The one exception. When an upload matches known child sexual abuse material, we keep the file, the account, the IP address it came from and the times in a locked store for the police, for a year or as long as the law asks.

How uploads are checked

Every new upload is checked before anyone else can see it.

• Björkén Media AB accesses Shield by Project Arachnid (projectarachnid.ca), a program of the Canadian Centre for Child Protection Inc., to facilitate the detection and removal of child sexual abuse material and harmful-abusive material of children and survivors of child sexual abuse on its services.
• For that check the Canadian Centre for Child Protection, in Canada, receives each file. We keep its answer only where the law needs it: the evidence of a match.
• Google Cloud Vision, on its servers in the EU, gets a smaller copy of each image, never the original, and says how likely it is to show nudity. A likely nude is held for a person to look at.

Why, and on what basis

• To run your account and show your uploads the way you chose: our agreement with you.
• To keep 0raw safe: checking uploads, stopping spam and abuse, keeping the evidence the law asks for: our legitimate interest and our legal obligations.
• To send the emails you ask for, such as a password reset, and notices about your uploads: our agreement with you and our legal obligations.

Who else handles it

Cloudflare

Stores and delivers every file, and turns clips into a playable copy.

Vercel and Neon

Run the site and its database.

Resend

Sends email, from its EU region.

C3P

Checks uploads, in Canada, as described above.

Google

Cloud Vision checks images, in the EU.

Discord

Only if you sign in with Discord.

Where data leaves the EU, it is covered by an adequacy decision or the EU's standard contract clauses.

How long we keep it

• Your account and uploads: as long as the account exists, or until you delete them.
• A deleted upload: the file and its details are erased; only its id is kept, retired, so the link never shows anything else.
• A deleted account: everything personal is erased and its uploads deleted. Its username is kept, retired, so nobody else can take it.
• A data export: 7 days, then it is deleted.
• Evidence of child sexual abuse material: a year, or as long as the law asks.

Your rights

• Get a copy of everything: Settings, Data export.
• Correct it: your settings, or write to us.
• Erase it: Settings, Delete account.
• Object to what we do on legitimate interest: write to us.
• Complain to Integritetsskyddsmyndigheten (IMY), Sweden's data protection authority.

No tracking

0raw runs no ads and no analytics, and sells nothing about you. Emails carry no tracking pixel and their links are never rewritten. The cookies we use are on Cookies.

Under 18

Accounts are for 13 and older. Under 18 you always see posts marked Mature blurred.