Privacy policy

Last updated 13 October 2026

We collect as little as we can. No advertising, no third-party advertising pixels, no selling of data. We use only privacy-friendly, aggregate analytics (Edgemetry, our own cookie-free statistics, and Cloudflare Web Analytics; neither sets a cookie or follows you from site to site) to see how the site performs.

Responsible for your data: Nils Van Brabant, Belgium (contact: contact form). You must be at least 16 years old to create an account.

What we store

• Account: your email address, your name and your Google sign-in identifier. There is no password: Google handles the sign-in and we never see your Google password. Your public name starts as your first name and the initial of your last name, and you can change it in your profile.
• Profile (optional, public): username, photo, short description, country and links to your own networks.
• Content: the photos, videos and descriptions you upload, the sequences you create, and the likes you give.
• Counters: how many times a published photo or profile was seen or a profile link was clicked, aggregated per day. These counters contain no IP address and no visitor identity, and robots are ignored.
• Security: to limit abuse we keep a keyed one-way hash of your IP address for a short time (contact, upload and request limits; it is erased within 30 days). It cannot be turned back into your IP address.

Cookies and local storage

One essential session cookie keeps you signed in. If you arrive through a shared link that carries a source tag (for example ?ref=pdf), a small cookie remembers that tag for 30 days so we can tell which shared links bring people in; it holds no personal data. Your browser also stores your favourite poses and “already seen today” markers locally on your device. We use no advertising cookies; our aggregate analytics (Edgemetry, Cloudflare Web Analytics) collect anonymous performance and usage data and do not identify you.

Who sees what

Photos you publish, your profile and your username are public. Photos you keep private are visible only to you and to moderators if a report requires it. Your email is never shown.

Service providers

The site runs on Cloudflare (hosting, database, file storage and anonymous analytics). “Continue with Google” sends you to Google to sign in; Google tells us your email address and name and learns that you signed in to GnomeYoga.

When you use “Create with AI”, the theme, length and options you choose are sent to an AI provider (Anthropic) so it can build the sequence from our pose library. Do not type personal data into those fields.

If you use “Import a notebook”, the photos you choose are sent once to an AI provider (Anthropic) so that the text and poses on the page can be read. When you create the sequence, we keep a reduced copy of your notebook pages with it, in our file storage, so you can look at your originals later. Only you can see them. You can delete them one by one or all at once from the sequence, and they are also deleted with the sequence or your account. Typed or pasted plans are read on our own servers.

Your rights

You can edit your profile, make content private, or delete it. “Delete my account” on your profile permanently removes your account, sequences, photos and profile. Messages you sent through the contact form are deleted with it. You can also ask for a copy of your data or a correction: use the contact form (“My data”) and we answer within 30 days. You may also complain to the Belgian Data Protection Authority.

Retention

We keep your data while your account exists. Deleted content is removed from our storage. Security hashes are erased within 30 days and expired sessions every night. Backups may keep deleted data for a short additional period.

Changes

If this policy changes in a meaningful way we will say so on this page.