1. What We Collect
Wondra collects only the data necessary to operate the platform:
- Account data: Email address and username, collected when you create an account.
- Profile data: Optional fields you choose to provide — display name, bio, country, primary role, social links, and avatar. This information is shown publicly on your creator profile page at
wondracinema.com/u/<username> so other visitors can see who made the films. - Referral attribution: If you arrived through a referral link, we record the referring username on your profile so the platform can credit the referrer toward founding-member status. This is used for internal attribution only and is not displayed publicly.
- Submission data: Video files, titles, AI model attribution, prompt metadata, and tags submitted through the platform.
- Activity data: Votes cast, films saved, submissions filed, and interactions with platform features.
- Payout information (prize winners only): If you win an Audience Award, we collect payout details (such as payment method and identifier) solely for the purpose of delivering the prize. This information is stored separately from your public profile and is never displayed publicly.
- Operational logs: Server-side logs including request metadata, error events, upload diagnostics, and session identifiers. These are used to maintain platform reliability and investigate issues. Operational logs do not contain passwords or authentication tokens, and where session identifiers appear they are anonymous, rotating values that are not tied to individual user accounts. Logs are not linked to individual user profiles for marketing purposes.
- Watch and engagement data: For signed-in members we record anonymized viewing behavior — including watch duration, completion rate, and playback events — to power the platform's ranking system. For signed-out visitors, we may also collect lightweight session and playback signals (such as which films were opened or started) through a rotating session identifier; these signals are not tied to an account and full watch-session records are not maintained for signed-out viewers. None of this data is sold or shared.
- Reports and moderation records: When a film is reported through the in-app Report button or by email, Wondra collects the report itself — including the reporter's account or contact information (when available), the reported content, the reason and any notes, timestamps, and internal moderation notes generated during review. These records are used to evaluate the report, communicate with the parties involved, and maintain platform trust and safety.
2. How We Use Your Data
Data is used to:
- Operate and authenticate your account.
- Process and review content submissions.
- Power ranking, discovery, and curation features.
- Send transactional emails — submission confirmations, approval or rejection notices, and contest notifications. We may also send periodic platform announcements or curated drops, typically once or twice a week, if you have opted in. You can opt out at any time.
- Maintain platform integrity, investigate abuse, and enforce these Terms.
- Improve the platform based on aggregate usage patterns.
We do not sell your personal data. We do not use it for advertising.
3. Authentication
Account creation and sign-in are handled by Supabase, which manages authentication tokens and session data. Email delivery for magic links and OTP codes is handled by Supabase's auth infrastructure. Wondra does not store your password. Your session is managed via secure, HTTP-only cookies. Supabase's privacy practices apply to authentication data and are governed by their own policies.
4. Third-Party Services
Wondra uses the following services to operate the platform:
- Supabase: Database, authentication, and server infrastructure.
- Vercel: Application hosting, edge delivery, and server-side rendering.
- Vercel Analytics: Product analytics. Vercel Analytics collects aggregated, cookieless pageview and custom-event telemetry — such as which films are viewed and which buttons are interacted with — to help us understand how the platform is used. It does not use third-party tracking cookies and does not build a cross-site advertising profile.
- Bunny Stream: Primary video hosting, transcoding, and delivery for films uploaded directly to Wondra. Uploaded files are transferred from your browser to Bunny Stream's infrastructure for storage and playback.
- Cloudinary: Legacy video storage, transcoding, and delivery for older uploads still hosted on Cloudinary infrastructure.
- Resend: Transactional email delivery. Used to send approval notifications and other platform emails to creators. Resend processes the recipient email address and message content necessary to deliver each email.
- Embedded video providers (e.g. YouTube, Vimeo): Used for certain curated editorial content. These providers may set their own cookies and collect data according to their own privacy policies.
Each of these services processes data under their own terms and privacy policies. We select services that apply reasonable data protection standards, but we cannot guarantee their practices.
5. Cookies & Browser Storage
Wondra uses session cookies strictly necessary to authenticate your account and maintain your login state. We do not use first-party advertising cookies and do not run cross-site advertising trackers. Vercel Analytics, described in Section 4, is configured to operate without tracking cookies. Third-party embedded video players (such as YouTube or Vimeo) may set their own cookies when you interact with them, in accordance with their respective privacy policies.
We also use limited browser storage (such as localStorage and sessionStorage) for operational purposes — for example, to bridge your marketing-opt-in choice between the sign-up form and the onboarding step, to attribute referrals from referral links you arrived through, to remember whether you have dismissed the welcome modal, and to avoid showing you the same recommendation twice within a single browsing session. These items are stored on your device only, are not shared with third parties, and are not used for cross-site advertising or third-party tracking.
6. Data Retention
Account and profile data is retained while your account is active. Submission records, including approved and rejected leads, are retained for platform integrity and moderation purposes even after content is removed from public view. Reports and moderation records — including the underlying report, communications with the parties involved, and internal review notes — may be retained for trust and safety, dispute resolution, legal compliance, and abuse prevention, even after the related content or accounts are removed. Operational logs are retained for a limited period for debugging and security purposes and are then deleted or anonymized.
7. Data Deletion
To request deletion of your account and associated personal data, contact us at hello@wondracinema.com with the subject line "Data Deletion Request." We will process requests within a reasonable timeframe.
Please note the following limitations:
- Video files stored on Bunny Stream or Cloudinary may take additional time to be purged from those providers' infrastructure.
- Content that has been publicly viewed or shared may persist in third-party caches or archives beyond our control.
- Aggregate, anonymized engagement data (e.g. watch counts on videos) may be retained even after personal data is deleted, as it is no longer linked to an individual.
- We may retain records required by law or for legitimate business purposes such as fraud prevention and abuse mitigation.
8. Security
Wondra implements reasonable technical and organizational measures to protect your data — including encrypted connections, server-side authentication, and access controls. However, no system is completely secure. We cannot guarantee that unauthorized access, data breaches, or hardware failures will never occur. In the event of a significant breach affecting your personal data, we will notify affected users as required by applicable law.
9. Children's Privacy
Wondra is not intended for users under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at hello@wondracinema.com and we will remove the account promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by an updated date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the updated policy. For material changes, we may notify registered users by email.
11. Contact
For privacy-related questions, data requests, or concerns, contact us at hello@wondracinema.com. Include "Privacy" in the subject line so we can route your request appropriately. We are a small team and will respond as promptly as we can.