Privacy Policy

Who we are

checkbs ("we", "us") operates the website at checkbs.com, a tool that checks how legitimate a money-making claim in a short video is. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the data controller for the personal data described below.

You can reach us about privacy at checkbs@proton.me.

What we collect, and why

We keep data collection to the minimum needed to run the service.

• Account data. If you create an account, we store your email address and, depending on how you sign in, a password (hashed) or a Google sign-in identifier. Legal basis: performance of our contract with you.
• Links you submit and the resulting verdict.When you check a video, we process the video's public content (caption, transcript, on-screen text) to produce a verdict. Signed-in users get a short history of their own recent checks. Legal basis: performance of our contract with you.
• Technical and security data. We process your IP address and a session identifier to apply rate limits, enforce free-tier usage caps, and block abuse and bots. Legal basis: our legitimate interest in keeping the service available and affordable.

Cookies

We use only strictly necessary cookies: a session cookie we set to recognise your browser for usage limits, the cookies Supabase sets to keep you signed in, and the cookie Cloudflare Turnstile uses for its bot check. We do not use advertising or analytics cookies, and we do not track you across other websites. Because these cookies are strictly necessary, no consent banner is required.

Who we share data with

We do not sell your personal data, and we never have. We share data only with the service providers (sub-processors) that make checkbs work, each acting on our instructions:

• Hosting: Fly.io (application servers, located in Frankfurt, Germany).
• Authentication: Supabase (accounts and sign-in).
• Data store: Upstash (rate limits, usage caps, and your check history).
• Bot protection: Cloudflare (Turnstile).
• Video analysis pipeline: to read and assess a video you submit, its content is processed by Apify (retrieving the post), Groq (speech-to-text), Google (reading on-screen text), DeepSeek (the analysis model), and Tavily (web search to ground the verdict in real sources).

International data transfers

Our servers are in the EU. Some of the providers above process data outside the EU and UK, including in the United States and, in the case of DeepSeek (the analysis model), China. Where we transfer personal data outside the EU or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses where they apply.

We want to be direct about one point: the content of a video you submit is sent to DeepSeek, whose processing takes place in China, a country without an EU adequacy decision. Submit only public video links, and avoid checking content that contains your own sensitive personal information. If you would prefer your submissions not be processed this way, do not submit them.

How long we keep it

• Account data: until you delete your account.
• Your check history: a rolling list of your most recent checks, or until you delete your account.
• Rate-limit and usage-cap counters: a rolling window of roughly two days, then they expire automatically.
• Cached verdicts: stored by video, not linked to you, for up to 30 days so popular videos return instantly without re-analysis.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, or California's CCPA/CPRA), you have rights over your personal data, including the right to access it, correct it, delete it, port it, and object to or restrict certain processing. We do not sell or share your personal data for cross-context behavioural advertising.

You can delete your account and associated data yourself at any time from your account page. For any other request, email checkbs@proton.me. If you are in the EU or UK and believe we have mishandled your data, you also have the right to complain to your local data protection authority.

Children

checkbs is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to create an account. We do not knowingly collect data from children below that age.

Changes to this policy

We may update this policy as the product changes. When we do, we will update the date at the top, and for significant changes we will make a clearer notice.