Privacy Policy
Last updated: 9 June 2026
This Privacy Policy explains how Holotable ("we", "us") handles information in connection with the Holotable web application (the "Service"). Holotable is built to be privacy-protective: your camera is processed entirely on your device and is never sent to us.
1. The short version
- Your camera video is processed on your device, in your browser. We never receive, record, store, or transmit it.
- There is no account, and we do not collect your name, email, or other identifying details through the Service.
- We use privacy-friendly, cookie-less analytics that measure aggregate usage without identifying you.
2. Information processed
- Camera and hand data. When you start the experience, your browser asks your permission to use your camera. The video is analysed locally by on-device machine-learning code to track your hand. This happens entirely in your browser; the video and any derived hand data are not uploaded to us and are discarded as you use the app.
- Usage analytics. We use Vercel Web Analytics, which is cookie-less and collects aggregated, anonymous information such as page views, referrers, approximate region, device and browser type, and performance metrics. It is designed not to identify individual users and does not track you across other sites.
- Technical/server data. Our hosting provider (Vercel) processes standard request data (such as IP address and request metadata) to deliver and secure the Service.
- Content delivery. To run the hand-tracking, your browser downloads machine-learning code and a model from content-delivery networks operated by jsDelivr and Google. As with any web resource, those providers may receive your IP address and request information when serving those files. Your camera data is not part of these requests.
We do not knowingly collect special-category or sensitive personal information, and we do not sell or share personal information for cross-context behavioural advertising.
3. How we use information
We use the limited information above to operate, maintain, secure, debug, and improve the Service, and to understand aggregate usage. We do not build profiles of you or advertise to you.
4. Legal bases (where GDPR / UK GDPR applies)
We rely on your consent (given through your browser's camera permission) for camera access, and on our legitimate interests in operating, securing, and improving the Service for anonymous analytics and server logs.
5. Sharing
We share information only with service providers that help us run the Service: Vercel (hosting and analytics), and jsDelivr and Google (delivery of the machine-learning code and model). We do not sell your personal information. We may disclose information if required by law or to protect our rights, safety, or the integrity of the Service.
6. Retention
We do not store your camera data or any account information. Aggregate analytics are retained by our provider in anonymised form, and server logs are retained by our host for a limited period for security and operations.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, to object, to data portability, and to withdraw consent (you can revoke camera access at any time in your browser). Because we hold little or no information that identifies you, we may be unable to link a request to you, but we will respond to valid requests as the law requires. California residents have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of "sale"/"sharing" (we do neither). To exercise a right, contact pohsuchenwork@gmail.com.
8. Children
The Service is not directed to children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will take appropriate steps.
9. International transfers
Our providers (including Vercel and Google) may process information in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers.
10. Security
The Service is served over HTTPS with a strict content-security policy, and your camera is processed on-device rather than uploaded. No method of transmission or processing is completely secure, and we cannot guarantee absolute security.
11. Changes
We may update this Policy. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.