Privacy Policy

Your privacy matters to us. This policy explains what information we collect, how we use it, and your rights regarding your data.

Your likes, views and private collections

Your likes, your views and your private collections are completely private. They are never shared with, or seen by, other users.

• Likes — the images you like appear only in your own “My Likes” page. No other user can see what you have liked, or who has liked any image. Nothing about your likes is shown on your profile or anywhere else.
• Views — what you view, and how much you view, is never shown to other users. Your viewing history is used only to run the service for you (for example, to mark what you have already seen), and any achievements based on it are visible only to you.
• Private collections — new collections are public, so other people can find and view them, but you can make any collection private at any time. A private collection, including its name, cover and contents, is visible only to you. It never appears on your profile, in comments, search, discovery or sitemaps, and other users cannot open, like or reference it.

Images and creators may show anonymous totals, such as how many likes or views their work has received. These totals never reveal who liked or viewed anything.

A small number of Endlss staff can access this data only where necessary to operate, secure and moderate the platform. It is never sold or shared for advertising. On the website, if — and only if — you allow analytics cookies, we send anonymous usage events (such as an image being viewed or liked, identified only by the image’s ID) to our analytics provider. These never include your name, account details, collection names or anything you have typed. If you don’t allow analytics, nothing is sent.

Who we are

Endlss Ltd (Company Number 17469234) is the data controller for personal data collected via the Endlss platform. References to "Endlss", "we", "us", or "our" in this policy refer to Endlss Ltd.

Splondge Ltd acts solely as a payment processor for Endlss Ltd under a separate services agreement. Splondge Ltd is not a data controller and assumes no liability for data processing, service provision, or user content.

Endlss Ltd is registered at: International House, 55 Longsmith Street, Gloucester, GL1 2HT.

Information we collect

When you use Endlss, we may collect the following information:

• Account information (name, email address) when you sign in via a social provider
• Images and media you upload, along with associated metadata
• Usage data such as pages visited, images explored, and collections created
• Device and browser information for analytics and compatibility

How we use your information

We use your information to:

• Provide and improve the Endlss service
• Personalise your exploration experience
• Maintain account security and prevent abuse
• Communicate service updates when necessary

Data sharing

We do not sell your personal data. We may share limited information with trusted third-party services (such as cloud hosting and authentication providers) solely to operate the platform. We will never share your data for advertising purposes.

Payment processors:

• Stripe — processes subscription payments on behalf of Endlss Ltd. Splondge Ltd acts as an agent for Endlss Ltd in collecting payments, but Stripe handles all payment card data.
• Splondge Ltd — acts solely as a payment collection agent for Endlss Ltd. Splondge Ltd does not process or store user data beyond what is strictly necessary to collect payments.

Browser extension

The Endlss browser extension allows you to save images and videos from supported websites directly to your Endlss inbox. This section explains how the extension handles your data.

Data we collect

When you right-click an image or video and select “Add to Endlss”, the extension collects the following:

• The image or video file itself
• The page URL and hostname where the media was found
• Page metadata such as the title, description, and any tags present on the page
• On supported AI art platforms (such as Midjourney, Civitai, and Leonardo.ai), the generation prompt and creator attribution if publicly displayed on the page

How we collect it

Data collection is only triggered by your explicit action — right-clicking an image and selecting the menu item. The extension does not monitor your browsing activity, track page visits, or collect any data in the background.

On certain supported websites, the extension runs a content script that reads publicly visible metadata from the page DOM when you initiate a capture. These scripts are inert until you take action and do not modify the page or transmit data automatically.

How we use it

Captured media and metadata are uploaded to your personal Endlss inbox via our API. We use this data to:

• Store the image or video in your account
• Display the title, tags, and source attribution alongside the media
• Generate visual similarity embeddings so the media can be discovered through exploration

Authentication and local storage

The extension stores a single authentication token locally in your browser (via chrome.storage.local) to authenticate API requests. No passwords, cookies, or session data from other websites are accessed or stored.

Permissions

The extension requests access to all URLs solely to download images from any website you choose to capture from. It also requests permissions for the right-click context menu, browser notifications (to confirm uploads), and local storage (for your authentication token). No permissions are used for tracking or analytics.

Third-party sharing

Data captured by the extension is sent only to Endlss servers. The extension does not contact any third-party analytics, advertising, or tracking services.

Messages

You can send private messages to other Endlss users.

Messages can be seen and read by Endlss staff.

Messages are stored on Endlss servers.

If a conversation breaks our Terms of Service, you can report it, or block the other user to stop receiving their messages. Staff may remove any message that breaks the Terms of Service.

Your rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability — receive your data in a structured format

To exercise any of these rights, contact us at privacy@endlss.co.

Data retention

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Age requirement

Endlss is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at privacy@endlss.co and we will delete it promptly.

Data protection officer

For data protection queries, you may contact our Data Protection Officer at:
dpo@endlss.co

Complaints

If you are not satisfied with how we handle your personal data, you have the right to complain to a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO).

Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on the platform or by email.