Skip to privacy notice
NetVista STUDIO

YOUR INFORMATION / YOUR CHOICES

Privacy, in plain sight.

What we save, why we save it, and what you can do about it. This notice covers the NetVista Studio website, account and downloads, and NetVista Watch at video.netvistastudio.com.

Last updated

  • Your NetVista account is shared by Editor and Watch. Watch history is private to your account.
  • Signing in to the website does not upload your local editing projects or source media.
  • Optional analytics is off unless you allow it. Refusing it does not limit your account, downloads or films.
  • You can request a copy of your information, ask for a correction, or delete your account.

01 / Who to contact

NetVista Studio is responsible for deciding how the personal information described in this notice is used to provide its websites and account services. For privacy questions and requests, contact [email protected].

This notice explains NetVista’s practices, not every independent website you may visit through a link. The separate News advertising notice describes the advertising setup prepared for our News hub.

02 / What we collect

Your account

When you create or use an account, we process your email address, account identifier, optional display name, password authentication information, and session and sign-in records. Passwords go to our authentication provider, Supabase, over HTTPS. The page does not put your password in a URL or save the password in browser storage.

Your email and a password are needed for password-based account access. Your display name is optional. Without an account you can browse public pages; the website’s download page and Watch catalogue require sign-in. App release files on GitHub remain publicly downloadable.

Watch progress and My List

Watch saves a compact record for each film you interact with: your account ID, the film ID, playback position, duration, whether you finished it, whether it is in My List, and last-watched and update times. This lets you resume on another signed-in device. That progress table does not contain your raw video, an event-by-event playback log, IP address or device location. Hosting and authentication providers may separately process connection and security logs.

Applications and messages

If you use the creative Applications form, we receive your name, email, area of work, optional portfolio link and message through Formspree. If you email us, we receive your email address and the information in your message. Please avoid including sensitive information or private project files unless needed for a specific enquiry.

Page delivery and optional analytics

Visiting a website sends connection information such as your IP address, browser details, request time and requested resource to the services delivering it. If you allow optional analytics on an eligible page, Microsoft Clarity can also receive page interactions, device/browser information, identifiers and session-recording information. See browser storage and analytics for your choices.

03 / Why we use it

For UK and EEA users, the grounds below explain why we process the information. A privacy notice is information about these uses, not a request to agree to every use.

PurposeInformation involvedGround
Provide the account, account-only access, password recovery and your requested Watch featuresAccount details, authentication/session information and saved film progressPerformance of the service you request, including steps to provide that service
Protect the service, investigate errors and prevent misuseRelevant request, authentication, error and security informationLegitimate interests in keeping the service reliable and protecting accounts, balanced against your rights
Respond to your enquiry or creative applicationYour message and contact/application detailsSteps requested before a potential collaboration, where applicable; otherwise legitimate interests in answering enquiries and assessing voluntary applications
Understand page usability using optional analyticsClarity interaction and session-recording informationYour consent, which you can withdraw
Handle a privacy request or comply with a binding legal requirementInformation relevant to that request or requirementLegal obligation where applicable

We do not use your Watch history to make solely automated decisions with legal or similarly significant effects. The current free account and Watch plan do not collect payment-card information. Any future paid plans or advertising changes need their own clear information before they are introduced.

04 / Where things are saved

On the account service

Supabase hosts authentication and the saved Watch progress database. Watch updates your progress while playing and at events such as pause and closing the player. A final page-close save is best effort: a connection failure or immediately closing the browser can mean the latest few seconds are not saved.

Your progress is associated with your signed-in account, not a public profile. My List and Continue Watching are separate choices. Unticking a film in Continue Watching hides it from that row but keeps its resume point and My List choice. Starting a deliberate new playback session can add it to Continue Watching again.

On your browser or device

The browser stores authentication tokens so the account can stay signed in. The main site and Watch use separate browser-storage areas because they are different web origins, even though the same account works on both. Signing out on one browser is different from deleting the account.

Signing in to this website does not itself upload your local editing projects, photos, video source files, models or exports. Files you save in the native apps stay where you save them unless you deliberately use a sharing or external-service feature. Those features, downloads, optional model downloads and operating-system storage can involve separate services and permissions.

05 / Browser storage & analytics

Browser storage includes cookies and localStorage. Necessary account storage supports the signed-in service you request; optional analytics is separate. You can use account and Watch features without allowing Clarity.

StoragePurposeHow long / control
Supabase authentication storage, including sb-tsitgxafmtzjgtmiczsq-auth-token and a temporary code-verifier entryMaintain and refresh your signed-in session and complete account callbacksUntil sign-out, session expiry/revocation, or removal through browser site-data controls; temporary callback material is cleared as the flow completes
netvista-watch-reset-afterRemember the local Watch password-reset request cooldownA timestamp is used for 10 minutes; the stored entry may remain until replaced or cleared
netvista-privacy-choice-v1Remember whether you allowed optional analytics on this browser and originChoice expires after 180 days, or you can change it at any time
Clarity _clck and _clsk cookies, only after opt-inAssociate page visits and session recordings for analyticsProvider-managed lifetimes; withdrawal asks Clarity to deny analytics storage and removes the first-party cookies accessible to this site

On pages where Clarity is offered, its script is not requested until you explicitly allow analytics and the choice can be saved. We send analytics-storage permission only; advertising-storage permission remains denied. When your browser sends Global Privacy Control, optional analytics stays off. If browser storage is unavailable, we do not start analytics.

Use Privacy choices on pages offering these controls to accept or reject optional analytics. Reject optional and Accept analytics have equal prominence. You can withdraw later; if Clarity is already running, the page reloads after saving the withdrawal to stop that loaded script. Your account session is not cleared by this privacy control.

Choices are per browser and web origin: manage them separately on the main site and Watch, and on other devices. Withdrawal stops future optional collection; it does not automatically erase information already received by a provider. Contact us for help with that information. We cannot directly remove cookies set on Microsoft’s own domains; use your browser’s cookie controls for those. See Microsoft’s cookie explanation and Microsoft’s privacy statement.

Advertising is not active in this beta

The News-only Google AdSense placement remains disabled while approval and consent checks are pending. No advertising is currently served through that placement or Watch’s planned “Free plan with ads”. If News advertising is activated, its own advertising notice and consent settings apply. Accepting Clarity analytics here does not give consent to future advertising.

06 / Providers & international transfers

We use specialist services to run the website. Information needed to perform their role may be processed by:

  • Supabase for accounts, authentication and Watch progress. Our primary project is configured in us-west-1, United States. This is not an EU-only data-storage service. See its Data Processing Addendum and data-residency and transfer explanation.
  • Cloudflare for hosting, delivery and website security. Its global network processes connection and request information. See Cloudflare’s privacy policy.
  • Formspree for submitting the Applications form. See Formspree’s privacy policy.
  • Microsoft Clarity for optional analytics only after your opt-in, as described above.
  • Google Fonts and jsDelivr for remote website fonts and browser-code delivery. Loading these resources sends normal request information to their providers. See Google Fonts’ privacy explanation and jsDelivr’s privacy policy.
  • GitHub when you download an app release or follow a development link. See GitHub’s privacy statement.
  • The film delivery service at clip-kingdom-play.lovable.app when you play a film. The player requests the stream directly from that external host, which receives connection information needed to deliver the film.
  • Authentication email delivery providers when you request an account or password-recovery email, and the email services involved when you contact us.

These services can process information outside your home country, including the United States. Provider agreements describe relevant safeguards, which may include standard contractual clauses or other applicable transfer mechanisms. The Supabase links above distinguish primary regional hosting from other processing and explain its contractual safeguards. You can contact us to ask about the arrangements relevant to your information or request a copy of applicable safeguards.

We do not sell account or Watch-progress records. A provider’s separate privacy notice does not replace NetVista’s responsibility for the information it processes on our behalf. Providers may also handle some connection or service information for their own purposes, as explained in their notices.

07 / How long it stays

Account details and saved Watch records are retained to provide your account and requested saved-viewing features until you delete them, delete the account, or we have another reason to remove them. There is currently no automatic age-based expiry for a Watch progress row.

For support messages and applications, the retention decision depends on handling your enquiry, any ongoing collaboration, and a need to resolve a dispute or meet a legal requirement. Request a review or deletion if information is no longer needed. Relevant security records may be retained to investigate misuse or meet legal obligations, rather than being used as viewing-history records.

Copies may remain for a limited period in providers’ backups or operational/security logs according to the relevant service’s configuration and retention schedule. Deleting a live account is not a promise that every backup copy disappears immediately. Backup copies should not be used for ordinary account operation after deletion; if a restoration is needed, the deletion must be reapplied. Contact us if you need details about the records or retention arrangements relevant to your request.

Browser storage follows the controls described above. Local editing project files, exports and downloads are not deleted from your device by deleting a website account.

08 / Your information, your rights

Depending on the law and circumstances, you can ask to access your personal information, correct it, erase it, restrict its use, or receive a portable copy of information you provided. You may also withdraw consent where we rely on it, without affecting the lawfulness of earlier processing.

You can object to processing based on legitimate interests. Tell us your situation so we can consider it. If information is used for direct marketing, you can object to that use at any time.

Email [email protected] with your request and the account email involved. Do not send your password. We may need proportionate information to verify your identity before disclosing or deleting account information. We normally respond within one month; applicable law can allow additional time or an exception, which we will explain.

You can raise a concern with your local data-protection authority. UK users can contact the Information Commissioner’s Office; EEA users can find their authority through the European Data Protection Board’s member list. You do not have to contact us first to exercise a right to complain.

Contact us about your information

09 / Deleting your account

Open Your account, sign in, and use Delete account. Review the warning and complete the confirmation. Deletion affects the shared NetVista account used by Editor and Watch, not only the site where you started.

After a successful deletion, the authentication account and its associated saved Watch records are removed from the live service. You lose account access, My List and resume positions. The deletion page must confirm success; an error message means you should not assume the request finished. You can contact us if the control is unavailable or you need help with a privacy request.

Signing out is not deletion. Unticking Continue Watching is not deletion of the resume record. Deleting the account does not erase files already downloaded to a device, your local editing projects, an email conversation, or all independent records a provider may lawfully retain. For those separate records, use the relevant controls or contact us. Backup and legal-retention qualifications are described above.

10 / Children & changes

The account and creative services are not directed at children. We do not knowingly collect a child’s personal information without an appropriate lawful basis and any required parental authorisation. If you believe a child has provided information that should not be held, please contact us so we can review and remove it where appropriate.

We update this notice when the service or data practices change. The date at the top shows the latest version. Material new optional uses, including new advertising or analytics purposes, need clear information and any required fresh choice before they start.