Privacy
Policy
AirVA reads your hand through your webcam — so the first thing you should know is exactly where that video goes. The honest answer is nowhere. Here is everything else.
TL;DRThe short version
The full policy is below and worth reading, but here is the whole of it in four cards.
Your video never leaves your device
Your camera feed is analysed inside your browser, frame by frame, and thrown away. It is never uploaded, never recorded by us, and never seen by a human.
No account, no password
There is nothing to sign up for, so there is no name, email or password for us to hold or lose.
No ad networks, no data selling
We run no advertising trackers and we do not sell, rent or share your data with data brokers. Ever.
We never store your IP address
Your IP is turned into an irreversible hash the moment a request arrives and the original is discarded — we cannot recover it.
01Your camera and your drawings
This is the part most people actually want to know, so it comes first.
What the camera sees is analysed on your device and discarded frame by frame.
The camera feed
When you open the canvas, your browser asks for camera permission. If you grant it, the video is handed to a hand-tracking model that runs inside your browser on your own machine. It looks at each frame, works out where your hand is, and discards the frame. Nothing is buffered, uploaded or stored.
This is not a promise you have to take on trust — it is a property of how the app is built. The model and its runtime are served from our own domain rather than a third party, and the only network request the canvas makes while you draw is the anonymous usage ping described in section 2. You can confirm this yourself: open your browser's developer tools, switch to the Network tab, and draw. No video, no images, no frames.
Your drawings
Everything you draw lives in your browser's memory. When you export a PNG or a video, the file is produced on your device and saved straight to your downloads — it does not pass through us. We never receive your artwork, and we cannot see what you drew. Close the tab and it is gone; we have no copy to delete.
The one exception, and it is entirely your choice: if you sign the guestbook on our home page, the name, message and optional hand-drawn signature you submit are sent to us and stored, because publishing them is the point. See section 2.
02What we collect
Three buckets, and nothing outside them. The first two are automatic; the third only happens if you choose it.
a. Anonymous usage measurement
We measure how AirVA is used so we can tell whether it works. None of this identifies you personally.
| What | Detail | Why |
|---|---|---|
| Hashed visitor ID | Your IP address combined with a secret value and put through a one-way hash. The IP itself is never written down and the hash cannot be reversed back into it. | To count returning visitors without knowing who they are |
| Approximate location | Country, region and city, derived from the network your request came from. Nothing finer than a city. | To know which countries to write and design for |
| Browser and device | Browser user-agent, screen size, pixel density, whether the screen is touch-capable, and on some browsers a device model name such as "Pixel 7". | To reproduce and fix bugs that only appear on some devices |
| Visit activity | Which page, when it started, how long it lasted, whether you held the device in portrait or landscape, and the site or ad that referred you. | To see which pages help and which waste your time |
| Feature events | Anonymous counters: reaching a step of the setup guide, finishing calibration, drawing a first stroke, exporting a file. | To find where the app confuses people |
b. Session replay
We use Microsoft Clarity to record anonymised interaction with our pages — pointer movement, clicks, scrolling and rage-clicks — so we can watch where a layout fails. It does not capture your camera, and it does not capture what you draw on the canvas. See section 4.
c. The guestbook, only if you use it
Our home page has an optional guestbook. If you submit it we store the name you typed, your message, an optional hand-drawn signature (stored as a short list of coordinates, not an image), your hashed visitor ID and the time. Entries are reviewed before they appear. Please do not put anything private in a box whose entire purpose is to be published.
What we never collect: your name or email (unless you type them into the guestbook or email us), your camera feed, your drawings, your location beyond city level, your files, your contacts, or anything from other sites you visit. We have no advertising pixels and no cross-site trackers.
03Why we collect it
Plainly: AirVA is free, has no account and no checkout, so usage data is the only way we can tell whether it is working. It is used to fix bugs, to find the steps where people get stuck, and to decide what to build next. That is the whole list.
Where the law requires a basis for processing, ours is legitimate interest in operating and improving the service, applied as narrowly as we know how: hashed identifiers instead of IPs, city-level location instead of precise, aggregate counts instead of profiles, and a one-click opt-out in section 6.
We do not sell, rent, licence or trade your data. We do not build advertising profiles. We do not combine what we collect with data bought from anyone else.
04Third parties
The complete list of outside services that can see any part of your visit. There is no sixth entry.
| Service | Role | What it can see |
|---|---|---|
| Microsoft Clarity | Anonymous session replay and heatmaps | Interaction with our pages. Not your camera, not your drawings. Loaded only on getairva.com. |
| Cloudflare | Network and security layer in front of the site | Standard request metadata, as any network provider between you and a website does. |
| Hostinger | Hosting and database | Stores the data described in section 2 on our behalf. |
| Your browser vendor | Camera permission | Grants or denies access. We only ever receive the answer, never the footage. |
The hand-tracking model that reads your gestures is served from our own domain, not fetched from a third-party network. Using AirVA therefore does not announce your visit to anyone we have not listed here.
05Cookies and local storage
We set no advertising cookies and no cross-site tracking cookies. What we do use is your browser's own local storage, which never leaves your device and is readable only by this site. In full:
| Key | Purpose |
|---|---|
| airva_calibration_v2 | Your saved hand calibration, so you do not repeat setup every visit |
| airva_attr / airva_attr_ft | Which link first brought you here, so we can tell what works |
| airva_sid | A random per-visit ID that ties page views in one visit together |
| airva_seen_bloom_guide | Remembers you have seen a tooltip, so it stops reappearing |
| airva_hdyhau_v1 | Remembers we already asked how you found us, so we only ask once |
| airva_optout | Set when you opt out in section 6. Its presence stops analytics entirely. |
Clearing your browser storage for this site removes all of them. Nothing breaks — you simply recalibrate.
06Your choices and rights
Turn analytics off, right now
This is a real switch, not a preference we promise to honour later. It writes a flag this browser checks before sending anything, so nothing further is sent from here.
It applies to this browser on this device. It is stored in local storage, so clearing site data also clears the opt-out.
Other controls you already have
- Revoke camera access at any time in your browser's site settings. The canvas stops seeing anything immediately.
- Draw with the camera off. Nothing about the site outside the canvas needs it.
- Opt out of Clarity by using your browser's Do Not Track setting or any standard tracker-blocking extension. We do not attempt to defeat either.
Access, correction and erasure
Depending on where you live you may have the right to ask what we hold about you, to have it corrected, or to have it deleted. Email support@getairva.com and we will act on it.
One honest caveat about what that can achieve: because we deliberately never store your identity, we usually have no way to find "your" rows — that is the point of hashing. If you want a guestbook entry removed, tell us the name and roughly when you posted and we will remove it.
07Children and classrooms
AirVA is used in classrooms, so this matters more here than it does on most sites.
AirVA is not directed at children under 13 and we do not knowingly collect personal information from them. We do not need to: there is no sign-up, no name and no email, the camera feed never leaves the device, and nothing a pupil draws reaches us.
Teachers: the two things worth knowing before you put this on a projector are that the camera stays local, and that the guestbook is the only place a pupil could type something public — so if that is a concern, simply do not visit it. If you believe a child has given us personal information through the guestbook, email us and we will delete it.
08Retention and deletion
We would rather be accurate than impressive here.
- Camera frames and drawings: never stored, so there is nothing to retain.
- Usage records: kept while they are useful for spotting trends and regressions. We do not currently run an automatic deletion schedule, and we would rather say so than quote a number we do not enforce. When one is in place this page will say what it is.
- Guestbook entries: kept until you ask us to remove them, or until we retire the guestbook.
- Clarity recordings: retained under Microsoft's own schedule, which we do not control.
Data is stored on servers in the European Union. If you are elsewhere, your data is transferred there when you use the site.
09Changes and contact
If this policy changes we will update the date at the top of the page. If a change materially affects what we collect or who sees it, we will say so prominently rather than quietly editing a line.
Questions, requests, or a correction to something here: support@getairva.com. A person reads that address.