Accounts
Clerk provides Google and X authentication. Annotated stores the provider’s stable user identifier, profile information you supply, privacy settings, and connection status. Passwords are never collected by Annotated.
Content and activity
We store annotations, drafts, excerpts, commentary, recorded audio, screenshots, votes, bookmarks, follows, comments, shares, and moderation events needed to operate the service. Anonymous publication hides the author publicly but does not remove internal ownership.
Visibility
Private annotations do not appear in feeds, public profiles, search metadata, leaderboards, or public asset URLs. Unlisted annotations are accessible by their link but excluded from discovery. Public content may be indexed if your profile settings permit it.
Claims and safety
Claimant contact information and evidence are restricted to authorized moderators. Clerk’s signed webhook body is processed transiently and is not retained: only minimal delivery metadata, a schema marker, and an optional deletion signal are stored for retry safety. Account deletion also scrubs legacy delivery rows, and all delivery records expire after 30 days. Other security, audit, and rate-limit events are retained only as needed to prevent abuse and demonstrate decisions.
Your controls
You may adjust profile and activity visibility, audience permissions, sharing previews, anonymous defaults, and indexing. Account settings support data export, commentary-audio removal, and deletion.
Linked providers and source media
Opening an official YouTube player sends a request to YouTube’s privacy-enhanced player domain. Source artwork may be loaded from the credited publisher with the browser referrer suppressed; a publisher can still receive ordinary network information such as an IP address. Annotated uses a local poster instead of remote artwork for copied video. Opening the original source is a direct visit governed by that publisher’s privacy terms.