Privacy Policy

Last Updated: April 6, 2026

Welcome to Webb Warp. Your privacy matters. This Policy explains what information we collect, how we use it, and the choices you have.

By using the Site, you agree to the practices described below.

1. Information We Collect

a) Account Information (Google Sign-In)

When you sign in using Google One Tap or Google OAuth, we receive the following information from Google and store it in our database:

Name: Your display name as provided by your Google account. This is used solely within your Account Settings and is not publicly visible. It cannot be seen by other users, only by site moderators where necessary. This is distinct from your username (your chosen @handle), which is publicly visible - see Section 1b.
Email address: Used to identify your account. Not publicly visible.
Profile image: Your Google profile photo, used as your avatar on the site, for example displayed on your public profile and in the Account Settings modal. You will have the option to change this in a future update.
Google account ID: A unique identifier used to link your Google account to your Webb Warp account.

We want to be clear about what we do not access: we do not collect or store your Google password, and we do not have access to any other services, settings, or data linked to your Google account. Signing in with Google is simply a convenience, meaning you do not need to create a separate password for Webb Warp. We only receive the information listed above and nothing more.

We also store a session token in a secure, HTTP-only cookie to keep you signed in across visits. Sessions expire automatically and can be ended at any time by signing out.

b) Username

After signing in, you may choose a username (e.g. @yourname). Your username is publicly visible on the feed, on your Warps, and on your public profile. You may update or remove your username at any time in Account Settings.

c) Automatically Collected Usage Data

We use Google Analytics and Meta Pixel to understand how visitors interact with the Site. This may include:

Pages viewed and time spent on the site.
Interaction data such as clicks, scrolls, and tool usage.
Technical data including browser type, device type, and IP address for security and regional compliance purposes.

These tools are only activated with your consent if you are accessing the Site from the European Economic Area (EEA). See Section 10 for details.

d) IP Address

Your IP address may be collected and used in the following contexts:

Analytics and security: As part of standard web analytics and Cloudflare's traffic processing.
Content reports: When you submit a report about a Warp, your IP address is logged alongside the report. This is used solely to detect and prevent spam or coordinated abuse of the reporting system. IP addresses collected in this way are not used for any other purpose and are not shared externally.

e) Content and Creation Metadata

When you create, save, or edit a Warp, we collect and store the data necessary to generate your unique share link. This includes:

Warp data: Your audio, visual, and grid settings. Audio recordings made in Jam Mode are also stored upon save (see Section 4).
Timestamps: The date and time of every save or edit. Timestamps are publicly visible in the Evolution (version history) list on any shared Warp.
Time of day: The local time of day on the device used to create the Warp, as well as the time-of-day palette selected (which may differ if you used the Time Warp feature). This is used to generate the Warp title, which is publicly visible in the trending feed and in the share URL page title.
BPM, scene, and filter settings: Stored to generate Warp card titles and feed metadata.
OG image and audio preview: A thumbnail and short audio clip generated at save time for use in feed cards and social sharing previews.
Public or private status: Whether a Warp is publicly listed on the trending feed or restricted. See Section 3.

f) Newsletter Sign-Up

If you voluntarily enter your email address to sign up for updates via the About section of the site, we collect your email address and store it with our email provider, Resend. This is entirely optional and separate from your account. You can unsubscribe at any time by clicking the link at the bottom of any email we send.

2. Augmented Reality (AR) Features

This application includes an AR mode that uses your device camera to overlay digital content onto your physical environment.

No data collection: We do not record, store, transmit, or analyse any video or image data from your camera. All processing happens locally on your device.
Voluntary sharing only: We cannot see your surroundings or your AR session. Content is only shared if you explicitly do so, for example by tagging @webbwarp on social media.
Permissions: Your browser will request camera permission only for AR mode. You may revoke this at any time in your browser settings.

3. Public and Private Warps

New Warps are set to public by default. You can change this at any time from your My Warps page. In a future update, we will add the option to set a Warp as private before saving.

Public Warps may be visible in the trending feed or elsewhere on the site, and are associated with your username. The Warp thumbnail, audio preview, scene settings, and creation timestamp are visible to all visitors.
Private Warps are not listed on the feed and are not attributed to your username publicly. Private Warps are only accessible to you as the signed-in creator. Other users will not be able to access a Private Warp, even if they have the direct URL.
If a Warp was previously set to public, and during that time it appeared in the trending feed or its share URL was accessed by others, changing it to private will remove it from the feed going forward. However, if other users remixed it during that period, it may still appear within their Evolution lineage. In that context it will be attributed to Anonymous rather than to your username.

You can change the public or private status of any Warp you have created at any time from your My Warps page.

4. Jam Mode & Audio Privacy

Jam Mode allows you to record vocal or musical performances directly in the browser.

Microphone access is explicit: Your microphone is only active when you grant permission via your browser and manually start a recording.
Local-first processing: All audio processing and visualisation during a live session happens on your device. No audio is transmitted to our servers while you are recording.
Storage only upon save: Your recording is only uploaded to our secure cloud storage if you choose to Save/Share your Warp. If you close the session without saving, the audio is permanently discarded.
No behavioural analysis: We do not transcribe, analyse, or use your recordings for advertising, AI training, or behavioural profiling.

5. Email Communications

a) Types of Email We Send

Sign-in codes: One-time verification codes required to access your account. Always sent regardless of preferences, as they are necessary to operate the service.
Remix alerts: A notification when someone remixes one of your Warps. Sent as a single immediate email on first remix, then batched into a daily digest if further remixes occur that day. Enabled by default for all users.
Editorial pick notifications: A notification when one of your Warps is selected as an editorial pick by Dan Webb. Enabled by default for all users.
Weekly digest: A weekly summary of your Warp views and remix activity. Enabled by default for all users.
News and updates: Occasional updates about Webb Warp and its creator, Dan Webb, including new features, releases, and announcements. Default opt-in status depends on your region at signup - see Section 5b below.

You can enable or disable any of the above (except sign-in codes) at any time in Account Settings or by clicking the unsubscribe link in any email we send. The unsubscribe page allows you to manage all your email preferences without needing to log in.

b) Marketing Email Opt-In by Region

For news and update emails, your default status at the point of account creation depends on your location, as determined by your IP address at signup:

EEA, UK, Canada, Singapore, and Brazil: In regions subject to GDPR, UK GDPR, CASL, PDPA, or LGPD, news and update emails are disabled by default. You will not receive these unless you explicitly enable them in Account Settings.
All other regions: News and update emails are enabled by default at signup. You can opt out at any time via Account Settings or the unsubscribe link in any email.

If you believe your region was incorrectly detected at signup, you can update your preference at any time in Account Settings.

c) Email Delivery

All emails are delivered via Resend (resend.com), which acts as a data processor on our behalf. Your email address is shared with Resend solely for the purpose of sending these communications. See Section 8 for more detail.

6. How We Use Your Information

Account management: To identify you, maintain your session, and associate Warps with your account.
Service delivery: To save your creations, generate share URLs, display version history, and power the trending feed.
Communications: To send newsletters (if opted in) and account notifications (if not opted out).
Improving the platform: Anonymised analytics help us understand how people use Webb Warp and guide future development.
Marketing measurement: Meta Pixel is used to measure the effectiveness of advertising campaigns.
Abuse prevention: IP addresses from content reports are used solely to detect and prevent misuse of the reporting system.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Session management: A secure, HTTP-only cookie maintains your signed-in state.
Consent memory: We store your cookie consent preference locally on your device for up to 365 days so you are not prompted on every visit.
Analytics: Google Analytics uses cookies to track usage patterns. These are only set with your consent if you are in the EEA.
Advertising measurement: Meta Pixel uses cookies to measure campaign performance.

You can manage or disable cookies through your browser settings. Disabling cookies may affect sign-in and other features.

8. Third-Party Services

Google Analytics: Site traffic and usage analysis. Privacy Policy
Google OAuth: Sign-in authentication. Your use of Google sign-in is subject to Google's Terms of Service and Privacy Policy.
Meta (Facebook) Pixel: Advertising measurement and audience insights.
Resend: Email delivery for all platform emails including sign-in codes, notification emails, and news and update emails. Your email address and notification preferences are shared with Resend solely for delivery purposes. If you unsubscribe from news and update emails, this preference is synced to our Resend contact list. Privacy Policy
Cloudflare, Inc.: CDN, security, DDoS protection, and traffic routing. Cloudflare processes all traffic in accordance with their privacy policies. Privacy Policy

Each provider has their own privacy policy. We do not sell your data to any third party.

9. Data Sharing and Disclosure

We do not sell or trade your personal information. We may share data in the following limited circumstances:

With service providers (Google, Meta, Resend, Cloudflare) solely to operate and improve the Site, as described above.
When required by law, court order, or regulatory authority.
To protect the rights, safety, or property of Webb Warp, its users, or the public.

10. Security

We take reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), HTTP-only session cookies, and access controls on our database and storage infrastructure. No internet transmission is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on your location, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Correction: Update your username or account details in Account Settings.
Deletion: Delete your account and associated data at any time directly from Account Settings. On deletion, your account, session data, and personal information are permanently removed. Public Warps you have created are anonymised rather than deleted, meaning they are disassociated from your identity and attributed to Anonymous — this preserves the Evolution lineage for other users who have built on your work. If you are located in the EEA or UK and wish to exercise your right to erasure (Right to be Forgotten) including full deletion of your Warp content, you may request this via the Feedback form on the site or by contacting us at the email in Section 20. We will action valid erasure requests within 30 days.
Withdraw consent: Withdraw your cookie consent at any time by clearing your browser's local storage for webbwarp.com. You will be prompted again on your next visit.
Unsubscribe: Opt out of any non-essential email at any time via the unsubscribe link included in every email, or manage all preferences in Account Settings. The unsubscribe link does not require you to be logged in and takes immediate effect.

To exercise any of these rights, contact us at privacy@webbwarp.com.

12. GDPR Compliance (EEA Users)

If you are accessing the Site from the European Economic Area (EEA), we detect this automatically and display a consent banner before activating any non-essential tracking. Your consent choice is stored locally on your device for up to 365 days.

Our legal bases for processing are:

Consent: Google Analytics and Meta Pixel are only activated with your explicit consent.
Legitimate interest: Account data (name, email, session token) is processed to provide and maintain the service, prevent abuse, and ensure platform security. We have assessed that this processing does not override your privacy rights given the limited scope of data collected and the transparency of this policy.
Legitimate interest: Anonymised usage data and IP-based abuse detection are carried out to maintain the security and integrity of the platform.
Legitimate interest: Remix alerts, editorial pick notifications, and weekly digest emails are sent on the basis of legitimate interest in keeping you informed about activity directly related to content you have created on the platform. You may opt out of any of these at any time in Account Settings.
Consent / legitimate interest: News and update emails are handled according to your region at signup, as described in Section 5b. For users in regions requiring explicit consent (EEA, UK, Canada, Singapore, and Brazil), these emails are only sent where you have opted in. For all other regions, they are enabled by default with a straightforward opt-out available at all times.

Regarding cookies specifically: the session cookie used to keep you signed in is strictly necessary for the service to function and is therefore exempt from consent requirements under the ePrivacy Directive. It is set only when you actively sign in and does not track you across other sites. All other non-essential cookies (analytics, advertising) require your consent and are not set until you accept via the consent banner.

We act as the Data Controller for personal information collected on this Site. Data may be transferred to servers outside the EEA, including Singapore and the United States, with appropriate safeguards in place.

13. Minors

We do not knowingly collect personal information from anyone under 18 years of age. By using the Site, you confirm that you are at least 18 years old.

14. California Privacy Rights (CCPA/CPRA)

The California Consumer Privacy Act (CCPA) formally applies to for-profit businesses exceeding specific thresholds, including annual gross revenue over $26,625,000 or processing data from 100,000 or more California residents per year. Webb Warp does not currently meet these thresholds and is not legally obligated to comply with CCPA at this time.

That said, we believe in transparency and are committed to handling your data responsibly regardless of jurisdiction. If you are a California resident and wish to request access to, or deletion of, personal information we hold about you, or to opt out of the sharing of your data with Google or Meta for advertising purposes, please contact us at the email below and we will honour your request in good faith. We will review and update our position as the platform grows.

15. Canadian Privacy Rights (PIPEDA)

If you are accessing the Site from Canada, we collect, use, and disclose your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access personal information we hold about you, to challenge its accuracy, and to withdraw consent to our use of non-essential cookies at any time by contacting us below.

16. Singapore PDPA

As this platform is governed by the laws of Singapore, we are committed to handling personal data in accordance with the Personal Data Protection Act 2012 (PDPA), administered by the Personal Data Protection Commission (PDPC). If you have concerns about how your personal data is handled that are not resolved by contacting us directly, you may refer the matter to the PDPC at pdpc.gov.sg.

17. Do-Not-Track

There is currently no uniform standard for responding to Do-Not-Track (DNT) signals, and we do not respond to them automatically. California residents may also use a Global Privacy Control (GPC) signal; we do not currently action GPC signals automatically. California residents wishing to opt out should contact us directly.

18. Public Profiles

We are building public creator profiles at webbwarp.com/u/@username. When launched, your public profile will display your username (your chosen @handle), your profile image, and your public Warps. Your Google display name (see Section 1a) will never be publicly displayed.

We will update this policy when profiles are live. If you do not wish to have a public profile, you can remove your username in Account Settings at any time.

19. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Singapore.

20. Contact

For questions about this Policy or to exercise your privacy rights, please contact:

privacy@webbwarp.com