Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Antifield LTD (“Antifield”, “we”, “our”, “us”) collects, uses, stores, and protects your personal data when you use our services and website. We are committed to protecting your privacy and handling your data in a transparent, lawful manner.

Antifield LTD

Company No. 15988228
Registered Address: 124 City Road, London, England, EC1V 2NX
ICO Registration No. ZB857511
Contact: marcel@antifield.com

Antifield LTD is the data controller responsible for your personal data under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. We are registered with the Information Commissioner’s Office (ICO) under registration number ZB857511.

1. Information We Collect

1.1 Information You Provide

Account information: When you create an account on any of our services, we may collect your name, email address, username, and password. Where sign-in is handled by a third-party provider such as Discord, we receive your account details from that provider rather than a password.
Communications: When you contact us via email or Discord, we collect the content of your messages and any information you choose to provide.
User content: Any data, text, files, images, or other materials you upload or create through our services.
Board content (unboard): The display name you choose in a room is shown to everyone else in that room and is attached to anything you place on the board. Drawings, comment pins, text, images, and embeds are stored per room so they can be replayed for anyone who joins later. Cursor chat messages and reactions are ephemeral and are not stored.
Voice messages (vmt): When you use vmt to transcribe a Discord voice message, the audio is processed to produce a transcript. The resulting transcript, and any translation of it, is cached against a checksum of the audio so the same message is never transcribed twice; these cache entries are not linked to you. Separately, we store your Discord user ID alongside the number of requests you have made and the total seconds of audio processed, so that usage quotas can be applied.
Payment information: If applicable, payment details are processed by third-party payment providers. We do not store your full payment card details.

1.2 Information Collected Automatically

Usage data: Pages visited, features used, actions taken within our services, timestamps, and referring URLs.
Device information: Browser type and version, operating system, device type, and screen resolution.
IP address: Your IP address, which may be used to derive approximate location (country/region level only) and to apply rate limits that protect our services from abuse. On unboard, your IP is used for rate limiting only and is not stored.
Etcht extension sightings: If you install the Etcht browser extension and opt in, we receive sightings of marked images you encounter - where and when a marked image was seen. Sightings are only collected with your opt-in; we do not crawl the web for them.
Cookies and similar technologies: See our Cookie Policy for details.

1.3 Information from Third Parties

Discord: If you interact with us via Discord, we may receive your Discord username and user ID.
GitHub: If you interact with our repositories, we may receive your GitHub username.

1.4 Information We Do Not Collect

unboard: unboard requires no account or sign-in. We do not track you across other sites through it, and we do not build a profile of you from your use of it.
vmt: We do not store the audio of voice messages you ask vmt to transcribe. Only the resulting text is cached, and it is keyed by a checksum of the audio rather than by your identity.

2. How We Use Your Information

We process your personal data only where we have a lawful basis to do so under Article 6 of the UK GDPR. Our lawful bases and purposes are:

Purpose	Lawful Basis
Providing and operating our services (Etcht, skowt.cc, unboard, vmt)	Performance of a contract
Creating and managing your account on our services	Performance of a contract
Responding to your enquiries and support requests	Legitimate interest
Sending service-related notifications (e.g., security alerts, updates)	Legitimate interest
Detecting, preventing, and addressing fraud, abuse, and security issues	Legitimate interest
Enforcing our Terms of Service and Acceptable Use policies	Legitimate interest
Improving and developing our services	Legitimate interest
Complying with legal obligations	Legal obligation

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

3. Data Storage and Security

All user data and storage is hosted within the European Union. We use industry-standard technical and organisational measures to protect your personal data, including:

Encryption of data in transit (TLS/SSL)
Encryption of data at rest where appropriate
Access controls limiting who can access personal data
Regular security assessments

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We do not sell your personal data. We may share your information only in the following circumstances:

Service providers: We may share data with third-party providers who help us operate our services (e.g., hosting, analytics, email delivery). These providers are contractually obligated to process your data only on our instructions and in accordance with applicable data protection law.
Speech and translation providers (vmt): Audio from voice messages you ask vmt to transcribe is sent to ElevenLabs for speech-to-text, and text you ask vmt to translate is sent to DeepL. These providers process the content only to return a transcript or translation to you.
Media providers (unboard): If you search for a GIF in unboard, your search term is sent to Klipy, and GIFs you place are served from Klipy’s network rather than stored by us. Spotify and YouTube embeds you place load directly from those providers when a board is viewed.
Analytics (skowt.cc): skowt.cc uses Google Analytics to measure how the site is used. This sets cookies in your browser and sends usage data, including your IP address, to Google.
Logging and monitoring: We use Better Stack to collect server logs and performance traces for our services, which include IP addresses and request details. Better Stack stores this data in the EU.
Legal requirements: We may disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.
With your consent: We may share information for any other purpose with your explicit consent.

5. International Data Transfers

Most user data is stored and processed within the United Kingdom and European Union. Some processing necessarily takes place elsewhere:

unboard runs on Cloudflare’s global network. A room’s data is held in the Cloudflare location closest to the person who created that room, which may be outside the UK or EU.
vmt sends voice message audio to ElevenLabs for transcription, which is processed in the United States.
skowt.cc uses Google Analytics, which processes usage data on Google’s infrastructure, including in the United States.

Where data is transferred outside the UK/EU, we rely on appropriate safeguards, such as:

UK International Data Transfer Agreement (IDTA)
EU Standard Contractual Clauses (SCCs) with the UK Addendum
Transfers to countries with an adequacy decision from the UK Secretary of State

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

Account data: Retained for as long as your account is active, and for a reasonable period afterwards for legal, regulatory, and administrative purposes.
Usage data: Retained in anonymised or aggregated form for analytics purposes.
Communications: Retained for as long as necessary to resolve your enquiry and for a reasonable period afterwards.
Board content (unboard): Retained for as long as the room exists. Rooms are designed to persist so you can return to them, so board content is kept indefinitely by default. A room that was never claimed and contains no content is deleted automatically after 7 days of inactivity.
Transcripts and translations (vmt): Cached indefinitely, so that the same voice message never has to be transcribed twice. These entries are keyed by a checksum of the audio and are not linked to your identity.
Usage records (vmt): Your Discord user ID and usage totals are retained for as long as we operate usage quotas on the service.

When data is no longer needed, it is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request that we correct any inaccurate or incomplete data.
Right to erasure: You may request that we delete your personal data, subject to certain exceptions (e.g., legal obligations).
Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
Right to data portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
Right to object: You may object to our processing of your data based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at marcel@antifield.com. We will respond within one month of receiving your request, as required by law. We may ask you to verify your identity before processing your request.

8. Children’s Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that data promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at marcel@antifield.com.

9. Cookies

We use cookies and similar technologies on our website. For full details on what cookies we use, why, and how to manage them, please see our Cookie Policy.

10. Third-Party Links and Services

Our services may contain links to third-party websites, services, or integrations (including Discord and GitHub). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through our services, via email, or by posting a prominent notice on our website. The “Last updated” date at the top of this policy indicates when it was last revised.

Your continued use of our services after any changes constitutes acceptance of the revised policy.

12. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first at marcel@antifield.com.

13. Contact

For any privacy-related questions or requests:

Email: marcel@antifield.com