Privacy Policy

Who we are, and how to reach us

Celebrity Lenses is operated by Loopara. For any privacy question, request or complaint, write to the support address at the bottom of this page and tell us which account it concerns. We answer privacy requests within 30 days.

Celebrity Lenses is an independent platform. It is not affiliated with, endorsed by or certified by Snap Inc. Lenses are published on Snapchat and open there.

What we collect

Only what a discovery app needs in order to work. This list is exhaustive for the current version.

• Account — your email address, display name, profile picture (or the single default picture, if you never choose one), preferred language, and the date you joined.
• Sign-in — a password kept only as a bcrypt hash; or, if you use Google or Sign in with Apple, the identifier that provider returns and the email address attached to it. Your Google or Apple password never reaches us.
• What you publish — your creator profile, and for each listing its title, description, tags, category, cover image and public Snapchat link.
• What you save — favourites, collections, the creators you follow, the categories you picked as interests, and the listings you recently viewed.
• Usage events — when a listing is viewed, opened in Snapchat or shared, we record the listing, the time, whether a signed-in account did it, and at most a two-letter country code. There is no precise or GPS location at any point.
• Reports — if you report a listing, we keep the report, its reason and the outcome.
• Technical — ordinary server logs (IP address, request time, app version, device class), kept for security, abuse prevention and debugging.

What never leaves your device

Some things stay on your phone because there is no product reason to ship them anywhere:

• Your search history.
• Your reminder, theme and language settings.
• Your session tokens, held in the platform keychain.
• Your photos: the app has no background access to your camera or photo library. A picture is uploaded only at the moment you deliberately pick one as your profile picture or a listing cover.

What we never collect

• Precise or background location.
• Contacts, calendar, microphone or health data.
• Camera or photo-library access beyond the single image you choose yourself.
• Advertising identifiers (IDFA / GAID), or any tracking across other companies' apps and websites.
• Payment details — the app has no purchases, no subscriptions and no paywall.

Why we use it, and on what legal basis

• To run the service — showing the catalogue, saving what you save, publishing what you publish. Basis: performing our contract with you.
• To keep the platform safe — spam, abuse, impersonation and copyright complaints. Basis: our legitimate interest, and our legal obligations.
• To give creators the counts on their own listings — views, opens, shares and country breakdowns, aggregated across many people. A creator never sees a named list of who opened a lens. Basis: legitimate interest.
• To show house advertising — our own promotional slots, placed by our team and always labelled. Basis: legitimate interest.
• To answer you when you write to support. Basis: performing our contract with you.

Advertising

Every ad in Celebrity Lenses is house advertising: slots we sell and place ourselves, administered from our own dashboard, and visibly labelled as sponsored. There is no third-party ad SDK, no real-time bidding, no advertising identifier and no audience segment built from your behaviour. Which slot you see depends on the surface you are on and, at most, the language and country of the app — never on a profile of you.

Who else ever sees it

We do not sell personal data. We share it only with the following, and only as far as each one needs it:

• Infrastructure providers that host the API, the database and the images on our behalf, under contract and bound to protect the data to the same standard.
• The email provider that delivers password-reset codes.
• Google or Apple, if you choose their sign-in button — and only to confirm who you are.
• Snapchat: when you open a lens you leave our app, and from that point Snap Inc.'s own privacy policy governs. We pass them nothing about you; the link is a public lens URL.
• Authorities or rights holders, where a valid legal request or a copyright complaint obliges us.

Where it is stored

Your data is held on servers operated for us by our infrastructure providers. Where it is transferred outside your own country, we rely on those providers' standard contractual protections and require the same standard of protection wherever it is processed.

How long we keep it

• Account data — until you delete the account.
• Sign-in sessions — a refresh session expires 30 days after it is issued, and is revoked the moment you sign out.
• Password-reset codes — 15 minutes, after which the code is useless.
• Usage events — kept as individual rows for the creator statistics they feed, then aggregated. When an account is deleted its events are detached from it: the row keeps the listing and the country, not the person.
• Server logs — a short rolling window, for security and debugging.

Deleting your account

Delete it yourself from Account → Delete account in the app, or write to support and we will do it. Deletion is immediate and irreversible: your account, sign-in identities, saved lenses, collections, follows, interests, recently-viewed list and active sessions all go.

One thing survives on purpose, and it is better known before you tap: listings you published stay listed, and their ownership moves to the platform account. Removing them would break links other people have already saved and shared. If you want a listing gone, delete the listing first in the studio — that is a separate action.

An account that has taken administrative moderation actions cannot be deleted while it still holds that role, because those actions are kept in an audit log. The role is transferred first, then the account can be deleted.

Your rights

Wherever you live, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to or restrict a particular use, or ask for it in a portable form. Your name, language and picture are editable in the app at any time; for anything else, write to support.

In the EU or UK these rights are yours under the GDPR, and you may complain to your national data protection authority. In Saudi Arabia the equivalent rights are yours under the PDPL, and you may complain to SDAIA.

Children

Celebrity Lenses is not directed at children under 13 and we do not knowingly collect their data. If you believe a child under 13 holds an account, write to support and we will delete it. Snapchat applies its own age requirements once a lens opens there.

How we protect it

• Passwords are stored only as bcrypt hashes — we cannot read yours, and neither can anyone who obtains the database.
• Traffic between the app and the API is encrypted in transit.
• Access tokens are short-lived; refresh tokens are stored hashed and can be revoked, which is what signing out does.
• On the web, session tokens live in httpOnly cookies that page scripts cannot read; in the app they live in the platform keychain.
• Administrative actions are written to an audit log.

Changes to this policy

This page is versioned and dated at the top. If a change materially affects what we collect or what we do with it, we will say so in the app before it takes effect rather than quietly editing this page.