Back to the registry
Legal · Privacy

Privacy Policy

How The Creators Wiki handles creator and brand data: what we collect, how collaboration emails are protected, and how your images are processed locally in your browser.

Last updated · 3 November 2026

1Scope of this policy

The Creators Wiki is a discovery directory for verified creators and the brands that want to work with them. This policy covers the information you type into the registry and the records we keep to run it.

It replaces every earlier policy that described social-platform API or OAuth data collection. We no longer read analytics from any external platform API: everything shown on a profile comes from what the creator entered, plus the images they upload.

2What we collect from creators

When you create a creator profile, we store only what you submit:

  • Your sign-up email and the password you set (hashed by our authentication provider — we never see it).
  • The public social handles you add for Instagram, YouTube and TikTok, and the public URLs behind them.
  • The collaboration email you choose to publish, which is never shown publicly until a brand unlocks it.
  • Your city and country, the languages you speak, your niche tags and a short bio.
  • Your brand-collaboration count, any optional secondary channels, and the profile and banner images you upload.
  • Payment records for the one-time listing fee: amount, currency, status and the provider's transaction id — never your card number.

3What we collect from brands

  • Your work email address, which must be a company domain — consumer mailboxes are declined at sign-up.
  • Your full name, designation and company name.
  • Billing records for the Brand Pass: amount, currency, status, renewal date and the provider's transaction id.
  • The creators whose contact details you unlocked, so the same email is never charged to your quota twice.

4Collaboration emails stay protected

Creator collaboration emails are never rendered on a public page, never included in a page payload, and never exposed to a search engine. They are stored in a separate, access-controlled record and are released only to a signed-in brand that spends an unlock credit.

Every reveal is logged against the brand account. This is deliberate: it keeps automated scrapers from harvesting creator inboxes, and it means a creator can see which brands requested their contact.

5Images are processed in your browser

Profile pictures and banners are compressed on your own device before anything is uploaded. The browser centre-crops the image to a 1080 x 1080 square and re-encodes it as WebP, so the file that leaves your device is already the final, small version.

We do not run server-side image processing, and the original file is never transmitted to us.

6How we use your information

  • To publish and review your registry profile and to show your cards on the registry.
  • To process the listing fee, placement add-ons and Brand Pass payments, and to issue receipts.
  • To release a creator's collaboration email to a brand that spends an unlock credit.
  • To send service email — verification codes, review decisions, payment confirmations and security notices.
  • To detect duplicate, impersonating or fraudulent profiles, and to comply with the law.

7Who we share data with

Only with the processors that run the service under contract: our application hosting and database provider, our payment provider and our email delivery provider. They may not use your data for their own purposes.

We never sell, rent or license personal data, and we do not share creator contact details with anyone who has not unlocked them.

8Retention and deletion

Profile data stays while your profile is listed. Creators and brands can delete their account from their own dashboard in one click, which removes the profile, the stored contact record, uploaded images and unlock history.

We retain payment records and minimal security logs only where tax or anti-fraud law requires it.

9Security

Traffic is served over HTTPS, passwords are stored hashed by the authentication provider, contact emails sit in an isolated record that only an authorised server call can read, and administrative access is limited to verified operator accounts.

No system is perfectly secure. Use a strong, unique password and tell us at once if you suspect unauthorised access.

10Your rights

  • Access and correction: view and edit everything on your profile from your dashboard.
  • Export: request a copy of the records we hold for your account.
  • Deletion: remove your account and data yourself, at any time.
  • Objection: ask us to stop a particular use, or complain to your local data protection authority.

11Contact

Privacy questions, access requests or deletion help: contact@thecreatorswiki.com. We respond within two business days.

Questions about this policy?

Write to our team and we will respond within two business days.

contact@thecreatorswiki.com

The Creators Wiki operates this registry and is the data controller for the information described on this page.