Privacy Policy
Last updated: July 28, 2026
grab is designed to minimize data collection. Operational monitoring is aggregated and does not retain media URLs, filenames, raw IP addresses or exact coordinates.
1. Controller and contact
grab / Skym determines the purposes of operational processing described below. Privacy requests can be sent to contact@skym.pro.
2. Data processed
The service processes the submitted URL for the duration of the requested operation. Monitoring records aggregate operation type, source platform, success or error category, duration, output size, selected format and features, browser family, device category, referrer domain, Vercel execution region and approximate country, region and city inferred from the public IP.
3. Visitor measurement
For abuse prevention and a daily unique-visitor estimate, the public IP may be transformed immediately into a one-way HMAC identifier that rotates every day. Neither the raw IP nor the resulting identifier is displayed in the dashboard or linked across days.
4. Purposes and legal basis
Processing supports service delivery, security, rate limiting, incident diagnosis, capacity planning and aggregated audience measurement. Operational security and service improvement rely on the publisher’s legitimate interests, subject to users’ rights and expectations.
5. Retention
Aggregated monitoring data expires after 30 days. Temporary media and subtitle files are removed immediately after transfer or failure. Local preferences and optional history remain on the user’s device until cleared. Hosting-provider logs may follow the provider’s own retention periods.
6. Providers
Vercel hosts the application and supplies approximate IP-derived geography; Upstash stores aggregated monitoring data; Cloudflare validates Turnstile challenges when enabled. Vercel Analytics may collect privacy-oriented audience statistics. These providers process data under their respective terms and safeguards.
7. Location accuracy
IP-derived location is approximate and can be wrong, especially when using mobile networks, VPNs or proxies. grab does not request GPS access and does not store latitude or longitude.
8. Your rights
Depending on applicable law, you may request information, access, correction, deletion, restriction or object to processing by contacting contact@skym.pro. Because monitoring is aggregated and raw identifiers are not retained, it may be impossible to associate an aggregate with a particular person.
9. Security and transfers
Access to the dashboard is protected by an administrator token. Secrets remain server-side. Providers may process data in several countries under their contractual and legal transfer mechanisms.
10. Changes
This policy may be updated to reflect technical, provider or legal changes. The publication date above identifies the current version.