The short version
- We collect what it takes to run SceneHunt: your email, the scripts you give us and the results we find, your usage, and whether you have a plan.
- We do not sell your data, use it for advertising, or use your scripts to train AI.
- Card payments are handled by our payment provider. We never see your card details.
- You can download or delete your data at any time from your account page.
Who we are
SceneHunt is run by Bashir Muhoozi. We decide how your personal data is used, which makes us its controller under UK data protection law. For anything in this policy, email bashirmubarak08@gmail.com.
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Your email, password, or Google sign-in | To create your account and keep it secure. Your password is stored securely and we cannot see it. | Contract |
| Scripts, voiceovers and projects | To find footage for them and save your work. | Contract |
| Your plan and billing status | To give you what you paid for, and keep the records tax law requires. | Contract, legal obligation |
| Your email, if you use SceneHunt without an account and ask for results by email | To send you those results. | Legitimate interests |
| Usage information: the pages you visit, your browser, the site that sent you here, and your IP address, kept in a form that does not reveal it | To apply free-trial limits, prevent abuse, and understand how people find SceneHunt. | Legitimate interests |
| Error reports | To fix things that break. | Legitimate interests |
We may email you about a project you started, for example when its results are ready. Every email has an unsubscribe link.
Who we share it with
Only the providers that help us run SceneHunt, and only for that purpose:
- hosting, storage and security providers;
- our payment provider;
- our email provider;
- AI and search providers, which receive your script, or searches based on it, to plan scenes and find footage;
- Google, if you choose to sign in with Google.
Please do not put information in a script that you would not want processed this way. Some of these providers are based outside the UK, including in the United States; where your data goes abroad, it is protected by the safeguards UK law requires. Ask us if you want the full list of providers.
How long we keep it
- Your account, projects and results: until you delete them or your account.
- Projects made without an account, and their results: 30 days after they were last used.
- Billing records: as long as tax law requires.
- Usage information: 12 months.
- An email given without an account: 30 days after we last used it.
- Error reports: 14 days.
If you unsubscribe, we keep your email address on a do-not-email list so that we can keep respecting it.
Your rights
You can ask for a copy of your data, or ask us to correct it, delete it, limit how we use it, or stop using it. You can also object to uses based on legitimate interests.
Signed in, you can download your data or delete your account from your account page, which removes it straight away. For anything else, email bashirmubarak08@gmail.com. We reply within a month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Other things to know
Cookies. We use what is needed to keep you signed in and to stop bots, plus Google's ad-measurement tag to see whether our ads lead to sign-ups. In the UK, EU and Switzerland that tag sets no advertising cookies. The full list is below.
Children. SceneHunt is not for children under 13. If you think a child has given us their data, email us and we will delete it.
Changes. If we change this policy we will update this page, and email account holders before any significant change.
Cookies and storage
We use browser storage for sign-in, your projects and choices you make. We do not use social media tracking cookies or Google Analytics. We do use the Google Ads tag, only to measure whether our ads lead to sign-ups and payments. In the UK, the EU and Switzerland it runs in Google's Consent Mode with advertising storage turned off, so it sets no advertising cookies there. Elsewhere Google may set its own conversion cookies. We never use it for personalised advertising or remarketing. Our first-party usage statistics and the option to turn them off, which also stops the Google Ads tag, are explained below.
| What | Why | How long |
|---|---|---|
ch_session cookie | Keeps you signed in. It cannot be read by scripts on the page. | 30 days, or until you sign out |
ch_google_oauth cookie | Protects the Google sign-in step, only if you use it. | 10 minutes |
| Your projects, in your browser's storage | So your projects open quickly and work if the connection drops. | Until you delete them or clear your browser |
| Unsubmitted script draft and review position | Lets you resume on this device, including search settings and scene filters. Account drafts are kept separate from guest drafts. | Drafts: until submitted, discarded or the account is deleted. Review position: until the project or account is deleted. Clearing browser storage removes both. |
| Display setting (compact view) | Remembers how you like results laid out. | Until you change it or clear your browser |
| Dismissed notices and a chosen plan | So a notice you closed stays closed, and the plan you picked carries through to checkout. | Until you close the tab |
| Google Ads tag (Google) | Measures whether our ads lead to sign-ups and payments. Sets no advertising cookies in the UK, EU and Switzerland. Not used for remarketing. Not loaded if you turn off statistics or use Global Privacy Control or Do Not Track. See how Google uses advertising data. | Set by Google, up to 90 days, outside the UK, EU and Switzerland |
| Cloudflare bot check (Turnstile) | Stops automated sign-ups and abuse. It is a security service, not tracking. | Set by Cloudflare for the check only |
Usage statistics. We count page visits and steps such as starting a search, viewing results, opening plans and completing checkout, to understand where the service needs improvement. These records contain the page, campaign label, project identifier, plan, timing and a daily code derived from the network address. We do not store the raw address, script text, password or payment details in these records. People sharing a network can share a code. We keep these usage records for 90 days and do not share them with advertising platforms. Campaign labels are remembered in this tab until it closes; no visitor identifier is stored in your browser.
We respect Global Privacy Control and Do Not Track. If you turn statistics off here, a preference cookie called sh_stats remembers that choice for a year, and the Google Ads tag is not loaded either. This does not affect your projects, sign-in or allowance. Our host also provides cookie-free page-view and performance statistics through Cloudflare Web Analytics.
YouTube previews. Clip previews play from YouTube, which may store information in your browser once a video plays, under Google's privacy policy. So the first time you open a YouTube clip we ask before loading anything from YouTube, and you can choose to open the clip on YouTube instead. If you allow previews, we remember that choice in your browser, and you can turn previews off again at any time with the "Turn off YouTube previews" link under the player. Previews use YouTube's privacy-enhanced mode either way.
Payments. Checkout happens on Stripe's own pages, which use cookies for payment security under Stripe's privacy policy.
Fonts are served from our own site, so viewing SceneHunt does not contact Google.