What is stored
Project submissions, waitlist signups, and newsletter records are stored in Cloudflare D1. Owned media and application cache files are stored in separate Cloudflare R2 buckets. Raw IP addresses are not written to D1; a one-way hash may be used for abuse prevention.
Forms and email
Turnstile and rate limiting protect public forms. Submitting a project does not publish it. Waitlist consent and newsletter consent are separate. Newsletter email is enabled only when confirmation and unsubscribe delivery are ready.
Analytics and administration
Production may use Cloudflare Web Analytics. GA4 is optional and stays disabled unless explicitly configured. Email addresses and free-text submissions are never sent to analytics. Administrative routes are protected by Cloudflare Access and an additional signed-token check.
Accounts and community experiences
When email sign-in is available, we store your verified email and a private sign-in session. Community experiences use a nickname you explicitly provide, not your email or its prefix. Your approved experience, date of use, setup, limitations, affiliation disclosure and any public reference link are visible to visitors.
New experiences and edits are reviewed before publication. Earlier approved wording remains visible while an edit is reviewed. You can withdraw an experience from public view in My experiences. Withdrawal is not deletion: submitted revisions and reports remain in D1 for review and abuse handling. Contact us to request a copy or deletion; backups expire according to the backup retention schedule.
Reports are private to the review process. Review actions are recorded for accountability. We do not send experience text, report text, emails or private session information to analytics. Do not include other people’s personal information in a contribution.
Retention and deletion
Rejected project submissions may be removed after 12 months. Waitlist records remain until the related research decision ends or deletion is requested. Newsletter records remain until unsubscribe or deletion. Administrative audit records are retained for 24 months. Media is removed when its rights or editorial use no longer supports retention.
To request access or deletion, email support@videoruntime.app.