PRIVACY POLICY

HOW YOUR DATA STAYS SAFE

This policy explains what data we handle, how we manage it, and your rights regarding privacy.

Table of Contents

Information We Collect

  • We use local storage and browser databases to save settings and app data in your browser. In the Image Converter and AI Image Upscaler, this includes file names, sizes, processing status and technical identifiers used to restore your file list, but not the images themselves. The converter restores recently saved file lists for up to 30 minutes, and the upscaler for up to two hours. Browser-stored data may remain until overwritten or cleared through your browser settings. It is not used for advertising or profiling.

  • We do not use advertising or analytics cookies. We use strictly necessary first-party cookies for security, sign-in and enforcing service limits. The Image Converter and AI Image Upscaler each use a temporary cookie to apply daily limits to visitors who are not signed in. These cookies expire at the next midnight in Norwegian time. The Signage Player demo also uses a necessary first-party session cookie to keep temporary screens and their uploaded media private to your browser. The cookie contains a random access credential; we store a hash of it on our servers. This cookie is configured to expire when the browser session ends. We also offer an optional Keep me signed in cookie that you can choose to enable.

  • When registering for an account, we collect your email address and password (which is securely hashed before storage). This data is used to create and verify your account, manage access and provide the account features you choose to use. We do not sell your data. Account-registration information is shared only with essential service providers needed to operate account features (for example for email delivery), and only under our instructions.

  • When you sign in, we create a server-side session record linked to your account. This may include random technical identifiers, browser and device information derived from your browser, and timestamps showing when the session was created, when it was last used and when it expires. We use this information only to provide secure account access, display your active sessions and allow you to revoke access from individual browsers or devices. Browser-only sessions expire after 24 minutes of inactivity, while sessions created using Keep me signed in may remain active for up to 30 days. Session records are deleted when they expire or are revoked, and are also removed following security-sensitive account changes such as a password reset, account transfer or account deletion. This processing is based on our legitimate interests in protecting accounts and the service.

  • Personal data submitted through the contact form is processed on our server and sent to our email inbox so that we can read and respond to your message. It is not stored in the website database and is retained in our mailbox only for as long as needed to handle the correspondence.

  • Images uploaded through the Image Converter and AI Image Upscaler are processed on our own servers and stored temporarily for processing and download. Uploads, processed images, ZIP archives and related processing records are removed during regular cleanup after approximately two hours of inactivity. Leaving the upscaler open or downloading files can extend this period. You can remove image files sooner through the app; related processing records are cleared by automatic cleanup. We do not send images to external AI providers or use them to train AI models, for advertising or for profiling.

  • Games in the Game Emulator run in your browser. When you choose a ROM from your device without uploading it to your account, the file is stored temporarily in your browser and is not uploaded to our servers. These temporary copies become eligible for removal after 24 hours and are removed when the app next checks that storage. Game saves, settings, controller choices and technical identifiers may remain in browser storage until overwritten or cleared. For account games, the browser also keeps saves and pending changes to support syncing and recovery.

  • When you upload a game to your Game Emulator library, we store its ROM file, game and category names, original filename, console type, file size, file identifiers and upload, update and last-opened timestamps on our own servers, linked to your account. We also store and sync game-save data, supported audio and video settings, and per-game controller presets. Save data can include progress and settings created by the game itself. This information is used to organize, download and play your private library and continue supported progress and settings across devices. Your library and saves are not published publicly through the app.

  • Uploaded Game Emulator games, associated saves and per-game preferences remain until you delete the game or your account. Deleting a game removes its library entry, associated account progress, retained save versions and per-game preferences. Deletion of its ROM and save files is attempted immediately; any remaining unused files follow the cleanup described below. We keep the latest account save and up to two earlier versions for syncing and recovery while a game remains in your library; older versions are removed as newer saves replace them. Unused files left by failed uploads, interrupted operations or unsuccessful file deletion are checked during daily cleanup after at least 24 hours without changes. Active operations, verification checks or technical failures can delay removal.

  • When you use the Signage Player while signed in, we store your screens, category names, configuration, media order, images, videos and processed playback versions on our servers, linked to your account. Processing also uses file names, file information, status and technical identifiers. This information is used to provide editing, publishing and playback. Saved screens and content remain until you remove them or delete your account. We do not send this media to external AI providers or use it to train AI models, for advertising or for profiling.

  • Removing media from a Signage Player draft does not remove it from the published version while that version still uses it. Copies saved in another screen remain until removed there too. Temporary processing files are removed after successful delivery. Leftover, unused media files are removed through scheduled cleanup, normally after at least 48 hours without changes and once no active processing or recovery needs them. Records of successfully completed processing jobs are normally removed during regular cleanup after seven days. Failed or interrupted jobs are checked before their files and records are removed; active processing, recovery or safety checks can delay cleanup.

  • When you use the Signage Player demo, we temporarily store your screen name, playback settings, media order, uploaded images and videos, processed versions and related technical records on our own servers so you can edit and preview a screen. This content is not saved to an account or published publicly. Reloading the demo editor starts a new screen and ends access to the previous one. Demo access otherwise expires after one hour of inactivity; using the editor or leaving Preview open and visible can extend this period. Expired screens and their media are removed during automatic cleanup. Active processing, interrupted operations or safety checks can delay deletion; related processing records follow the Signage Player cleanup periods described above. We do not send demo media to external AI providers or use it to train AI models, for advertising or for profiling.

  • When a TV opens the Signage Player page, we store a random device credential in its browser's local storage so it can reconnect. We also use a necessary first-party cookie to authorise media playback. This cookie expires after one year and is renewed during use; the local storage credential has no automatic expiry. On our servers, we store a hash of the credential, temporary pairing codes and connection timestamps. For paired TVs, we also store the TV name, pairing time and connection to your screen, allowing you to manage TVs and see when they last connected. Unpairing removes the TV name and screen connection. The independent technical device registration remains available for pairing again and currently has no automatic expiry.

  • If you make a Signage Player screen public, anyone with its link can view its published screen name and content without signing in. Making the screen private disables further access through the public link; making it public again reactivates the same link. Deleting the screen or account removes the link. These actions cannot remove copies that viewers have already received or saved.

  • If you join one of our game servers, we may store your in-game username and UUID to manage access (such as whitelisting) and to support normal server operation (such as saving player progress). Server logs may also include IP address and connection timestamps for security and troubleshooting. We do not use this data for advertising or profiling.

Protection Against Abuse

  • To keep the Image Converter and AI Image Upscaler available and prevent excessive use, we apply daily limits to guests and to regular accounts using the upscaler. We use coded identifiers based on your browser and IP address for guest limits, or your account for signed-in limits. The original identifiers are not stored in these usage records. Successful-image counts are deleted after seven days for the converter and normally around eight to nine days for the upscaler, during regular cleanup. Active upscaling jobs can delay deletion. Temporary records used to manage conversion limits are deleted within 24 hours; upscaler job records follow the image cleanup described above. This processing is based on our legitimate interests in protecting the service and maintaining its availability.

  • To protect security-sensitive parts of the website against repeated automated requests and password-guessing attempts, we apply rate limits based on the connecting IP address and the action being performed. This includes features such as account authentication, password-protected public Interactive Boards, Signage Player device registration and pairing, and Signage Player demo creation and uploads. We derive a pseudonymised identifier from the IP address using a secret keyed hash; the raw IP address is not stored in these rate-limit records. The records contain only technical rate-limit state and are automatically deleted after seven days. They are used solely for security and abuse prevention and are not used for advertising, analytics or profiling. This processing is based on our legitimate interests in protecting the website and its services.

  • To protect this website against spam and abuse, rejected contact-form submissions may be logged with the time of submission, rejection reason, message length, and pseudonymised hashes of the IP address and browser user agent. The submitted email address and message are not stored in these logs. This processing is based on our legitimate interests in protecting the website and its services, and the logs are automatically deleted after 30 days.

  • The quota records, rate-limit records and contact-form logs described above are used solely to protect the service. They are not used to build profiles.

  • Our website links to external sites, such as social media platforms. These sites operate under their own privacy policies and we recommend that you review them.

  • Game Emulator software is normally served from our website. If a required emulator component is unavailable there, the emulator may request it from the EmulatorJS content-delivery service. That service receives your IP address and the browser request information needed to deliver the component. The app does not upload your ROMs or game saves to that service.

Your Privacy Rights

  • You can manage or clear this website's browser-stored data, including local storage and browser databases, through your browser settings.

  • You can view and revoke active sessions from your account settings. Browser-only sessions expire after inactivity, and their cookie is configured to expire when the browser session ends. Signing out revokes the current session and clears any associated Keep me signed in cookie.

  • Resetting your preferences or clearing browser storage may remove your saved settings, file list, browser-stored Game Emulator saves or a TV's remembered Signage Player identity. Clearing browser storage can permanently remove game progress that has not synced to your account. It does not delete account-stored ROMs or saves, server-stored screens, uploaded media, device registrations or daily usage counts. Remove content through the relevant app or contact us to request deletion; only temporary or unused files are eligible for automatic cleanup.

  • You can remove images and videos from a Signage Player demo through the app. Clear media removes all media from the screen, while Reset also clears its configuration. Related processing and abuse-prevention records follow the retention periods described above.

  • You can rename, organize, download and delete games through your Game Emulator library. Deleting a game also removes its associated account saves, retained save versions and per-game preferences. Removing server-stored content does not automatically erase copies in your browsers or files you have downloaded; manage those copies on the relevant device.

  • You can delete your account from your profile settings. This removes your email address, sign-in credentials, Signage Player screens, public links, account-linked TV assignments and Game Emulator library, progress and preference records from the active service. Deletion of the account's Game Emulator ROM and save files is attempted immediately; any remaining unused files follow the cleanup described above. Associated Signage media files are removed through scheduled cleanup as described above. Independent technical TV registrations are not deleted with the account. Temporary images, processing records and abuse-prevention records follow the retention periods described above. Account deletion does not automatically erase separate server backups or copies retained on your devices.

  • If you've joined a game server and want to be removed from the whitelist, contact us.

This policy explains how personal data is handled when you use this website.If you have any questions, concerns or requests regarding your privacy, please contact us at hello@kheembo.dev. Effective as of October 28, 2026