🔥 SmokeSignal

PRIVACY POLICY

Last updated August 11, 2026

This Privacy Notice for Misbau LLC ('we', 'us', or 'our') describes how and why we might access, collect, store, use, and/or share ('process') your information when you use SmokeSignal (the 'Services'), available at smokesignal.link.

SmokeSignal is a web service for sharing self-destructing video and image links. You upload a file, receive a link, and the link destroys itself after it is viewed once or after a short timer expires. SmokeSignal is deliberately designed to collect as little information as possible: there are no user accounts, no sign-up, and no requirement to provide your name or email address to use the Services.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions, contact us at privacy@misbau.com.

SUMMARY OF KEY POINTS

  • We do not require accounts or personal details. You can use SmokeSignal without telling us who you are.
  • Files you upload are temporary. They are stored privately and deleted automatically after they are viewed (for one-view links), when their timer expires, or after 24 hours at the latest — whichever comes first.
  • We collect minimal technical data. Our infrastructure providers automatically log technical information such as IP addresses for security and operations.
  • We do not sell your information. We share data only with the infrastructure providers needed to run the Services.

1. WHAT INFORMATION DO WE COLLECT?

Files you upload. When you use SmokeSignal, we temporarily process the video or image file you choose to upload. The contents of that file are determined entirely by you and may include personal information (for example, a video of yourself). Files are stored in a private storage bucket, are never made publicly listable, and are deleted automatically as described in Section 5.

Link metadata. For each link we store minimal technical metadata: a random link token, the file type and size, the self-destruct mode you chose, timestamps (created, viewed, expires), and — if you set a password — a cryptographic hash of that password (we cannot recover the password itself).

Information collected automatically. When you visit the Services, our hosting and infrastructure providers automatically collect certain technical information, such as your IP address, browser type and version, device characteristics, operating system, referring URLs, and timestamps. This log data is collected for security, abuse prevention, and operational purposes.

Information you send us directly. If you email us (for example, to report abuse), we receive your email address and the contents of your message.

We do not collect names, postal addresses, phone numbers, payment information, or account credentials, and we do not use advertising or analytics cookies at this time. If this changes, we will update this notice and, where required, request your consent.

2. HOW DO WE PROCESS YOUR INFORMATION?

  • To provide the Services — storing your file temporarily, generating the share link, serving the file to the link recipient, and deleting it on schedule.
  • To protect the Services — preventing abuse, enforcing upload limits, investigating reports of prohibited content, and keeping the Services secure.
  • To comply with law — responding to lawful requests from authorities where we are legally required to do so, including mandatory reporting obligations relating to child sexual abuse material.

3. WHAT LEGAL BASES DO WE RELY ON?

If you are located in the EU or UK, this section applies to you. We rely on the following legal bases under the GDPR and UK GDPR: performance of a contract (providing the sharing service you request), legitimate interests (securing and operating the Services, preventing abuse), and legal obligations (complying with applicable law). Where we rely on consent, you may withdraw it at any time by contacting us.

4. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

We share information only with service providers who process it on our behalf to run the Services:

  • Supabase — file storage and database infrastructure.
  • Vercel — website hosting and content delivery.
  • Cloudflare — domain and DNS services.

We may also disclose information where required by law, to enforce our Terms of Use, to protect the rights, property, or safety of any person, or in connection with a business transfer such as a merger or acquisition. We do not sell your personal information, and we have not sold or shared personal information for advertising purposes.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

Retention is the heart of SmokeSignal, so we are specific:

  • Uploaded files are deleted after the first view (one-view links), when the timer expires (timed links), or after a maximum of 24 hours from upload — whichever comes first. Deleted files are removed from our storage and cannot be recovered by us or by you.
  • Link metadata is deleted together with the file during our automated cleanup runs.
  • Infrastructure logs (such as IP addresses in server logs) are retained by our providers for their standard, limited retention periods for security and operational purposes.
  • Abuse reports and legal correspondence may be retained for as long as necessary to handle the report and comply with our legal obligations.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our Services use cloud infrastructure that may be located in the United States, the European Economic Area, the United Kingdom, and other locations where our providers operate. Regardless of your location, your information may be transferred to, stored in, and processed in these countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent lawful transfer mechanisms.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

Files are stored in a private storage bucket and are only accessible through short-lived, cryptographically signed URLs issued at view time. Link tokens are long random strings. Optional link passwords are stored only as salted cryptographic hashes. All traffic to and from the Services is encrypted in transit (HTTPS). However, no electronic transmission or storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorised third parties will never defeat our security. You share files at your own risk, and you should not use SmokeSignal for content whose disclosure would cause you serious harm.

8. DO WE COLLECT INFORMATION FROM MINORS?

The Services are intended for users who are at least 18 years old (or the equivalent age of majority in your jurisdiction). We do not knowingly collect information from or market to children. If you believe a person under 18 has used the Services, please contact us at privacy@misbau.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location (for example the EEA, UK, Switzerland, or certain US states), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Because SmokeSignal holds no accounts and deletes files automatically within 24 hours, in most cases the information we hold about you will already have been erased by the time we receive a request. To exercise any right, contact us at privacy@misbau.com; we will consider and act upon requests in accordance with applicable data protection laws. If you are in the EEA or UK and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection authority.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

We do not currently use tracking technologies for which a Do-Not-Track ('DNT') signal would be relevant, and we do not respond to DNT browser signals. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this notice.

11. DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated 'Last updated' date at the top of this notice. We encourage you to review this notice frequently.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at privacy@misbau.com or contact us by post at:

Misbau LLC
Sharjah Media City
P O Box 130130
Sharjah, Sharjah
United Arab Emirates