Privacy Policy

Last updated September 24, 2026

Sevit Privacy Policy

This Privacy Policy explains how Sevit collects, uses, stores, shares, and protects personal data when you use the Sevit website at sevit.id, the Sevit Capture and Sevit New Tab Chrome extensions, the Sevit Android application, and other services connected to Sevit.

By using Sevit, you understand that data may be processed as described in this Privacy Policy.

1. Who we are

Sevit is developed and operated by SCND.digital.

For personal data processed through Sevit, SCND.digital acts as the personal data controller to the extent determined by applicable law.

Questions or requests relating to privacy can be sent to:

Email: [email protected]

2. Data we process

The data we process depends on the Sevit features you use.

Account information

If you create an account using email, we process:

  • your email address;
  • password;
  • display name, if provided;
  • preferred language; and
  • account role, such as user or administrator.

Passwords are not stored in their original form. Sevit stores them using an argon2id hash.

If you choose to sign in using Google, we may receive:

  • your Google account ID;
  • an email address verified by Google; and
  • your Google account name, which may be used as your display name.

We do not receive your Google account password.

Sessions and devices

To keep you signed in and allow access from applications and extensions, we process information such as:

  • hashed session tokens;
  • the time a session was created;
  • the time a session expires;
  • platform type;
  • application or device labels, such as Chrome Extension or Android together with the system version; and
  • the time the device was last used.

Sevit does not store your IP address or browser information as part of these session records.

Your library content

When you use the library, Sevit may store:

Links

  • URL;
  • title;
  • description;
  • notes;
  • tags;
  • collections;
  • pinned status;
  • favorite status; and
  • archived status.

Images you upload

  • the image file; and
  • its original filename.

Screenshots

  • the screenshot file;
  • the source page URL;
  • the source page title; and
  • the type of capture.

Page information

When you save a link, Sevit's server may visit that page to retrieve information such as:

  • title;
  • description;
  • creator name; and
  • preview image.

Search

To make your library searchable, Sevit creates a search index using information such as titles, notes, descriptions, and URLs.

Image processing

Images and screenshots may be converted to WebP format. Image metadata such as EXIF information is not retained as part of that process.

Supporter Program and payments

If you participate in the Supporter Program, Sevit may process:

  • display name;
  • destination address;
  • publicly displayed address;
  • profile description;
  • the version and language of the Supporter Terms you accepted;
  • the time of acceptance;
  • contribution amount;
  • currency;
  • payment status;
  • order number;
  • transaction time; and
  • moderation decisions and their reasons.

Sevit does not store payment instrument details.

Sponsor and supporter impressions

When a sponsor or supporter is displayed on the website or Android application, Sevit may record an impression when at least half of the relevant element is visible for at least one second.

If you click it, Sevit may also record that click.

These records may contain:

  • account ID;
  • sponsor or supporter ID;
  • event type; and
  • event time.

We do not add your IP address or device information to these impression and click records.

Advertisers receive aggregated statistics such as impression and click counts. They do not receive a list of individual users who viewed or clicked their advertisements.

Technical logs

To operate, maintain, secure, and troubleshoot the service, Sevit's servers may generate technical logs containing information such as:

  • request method;
  • requested address or endpoint;
  • certain request parameters; and
  • a randomly generated request identifier.

URL parameters may contain information you submit to the service, such as search terms.

Certain sensitive information, including authorization headers, cookies, and share-link tokens, is redacted from application logs.

IP addresses may be processed temporarily in memory for security purposes, including rate limiting.

Network, proxy, CDN, or infrastructure providers used by Sevit may also process connection information such as IP addresses as part of operating and securing their services.

3. How we use data

We use data as necessary to:

  • create and manage accounts;
  • authenticate users;
  • protect accounts and the service;
  • store and synchronize libraries across devices;
  • display, organize, and search library content;
  • retrieve link metadata and preview images;
  • store images and screenshots;
  • operate Sevit Capture and Sevit New Tab;
  • operate the Supporter Program and process contributions;
  • display and calculate sponsor and supporter statistics;
  • moderate content;
  • prevent abuse and excessive requests;
  • maintain and troubleshoot the service; and
  • comply with applicable legal obligations.

Depending on the processing activity, our basis for processing may include:

  • providing a service you requested or performing our agreement with you;
  • your consent;
  • legitimate interests in operating, securing, and improving the service; or
  • compliance with applicable legal obligations.

Where processing is based on consent, you may withdraw your consent subject to applicable law.

What we currently do not do

At present:

  • Sevit does not send the contents of your private library to third-party AI providers;
  • Sevit does not use third-party analytics on the website, Sevit Capture, Sevit New Tab, or the Android application;
  • Sevit does not use third-party advertising trackers on those applications; and
  • Sevit does not use third-party crash-reporting services on those applications.

If this changes in the future and affects the way personal data is processed, this Privacy Policy will be updated.

4. Other parties that may receive data

We only share data with, or permit it to be processed by, other parties where necessary to provide the service or comply with legal obligations.

Midtrans

Sevit uses Midtrans to process Supporter Program payments.

When you initiate a payment, Sevit may send Midtrans:

  • the order number;
  • payment amount;
  • your supporter profile display name, up to 20 characters; and
  • your account email address.

The payment process takes place through Midtrans.

Information such as card details, bank account details, QRIS payment information, or other payment credentials is entered through Midtrans and does not pass through Sevit's servers.

Sevit receives information about the transaction status but does not store your card details or payment credentials.

Google

Sign in with Google

If you use Sign in with Google, your browser or application will redirect you to Google's services for authentication.

Google Fonts

The Sevit website, Sevit New Tab, and the Sevit Capture popup may retrieve font files from Google Fonts.

When this happens, your browser may connect to Google's servers and provide technical information normally required for internet communication, such as your IP address and browser information.

The Sevit Android application does not load Google Fonts in this way.

Open-Meteo

Sevit New Tab may use Open-Meteo to display weather information.

This feature is only active if you enter a city in the New Tab settings.

The city name you enter is sent to Open-Meteo's location search service. The resulting coordinates are then used to request weather forecasts.

The city, coordinates, and weather data are stored locally in your browser and are not sent to Sevit's servers.

Sevit New Tab does not use GPS or determine your location from your IP address for this feature.

Websites you save

When you save a link, Sevit's server may visit the address to obtain page information and preview images.

Metadata requests identify themselves as SevitMetadata/1.0 and do not include your browser cookies.

For certain services, including YouTube and TikTok, the page URL may also be sent to that service's preview or oEmbed endpoint.

Sevit New Tab background images

If you use an external image URL as your New Tab background, your browser retrieves the image directly from the website hosting that image.

As a result, that website may receive connection information normally sent by your browser, including your IP address.

Infrastructure

Sevit uses third-party server and network infrastructure, including Cloudflare.

These providers may process technical information necessary to operate, secure, or deliver Sevit.

Some service providers may process data outside Indonesia. Where personal data is transferred across national borders, Sevit will handle the transfer in accordance with applicable data protection requirements.

We do not provide advertisers with individual user identities or the contents of private libraries for sponsor statistics.

5. Information visible to other people

Most library content is private unless you use a feature specifically designed to share it.

Shared collections

If you create a share link for a collection, anyone who has that link may be able to view information made available through the shared page, including:

  • collection name;
  • collection description;
  • item title;
  • item description;
  • domain;
  • URL; and
  • item image.

Archived items may remain visible through a shared collection if those items are still part of that collection.

Private notes, tags, and favorite status are not displayed.

Your display name is only shown if you enable that option.

You can revoke or replace a share link at any time.

Supporter board

The Supporter board is only visible to signed-in users.

For approved supporter profiles, the board may display:

  • display name;
  • the address selected for display; and
  • total contribution amount.

6. Cookies and data stored on your device

Sevit does not use advertising-tracking cookies.

Website

Sevit uses:

sevit_session

Used to keep you signed in. The normal lifetime is 30 days, and the cookie cannot be read by page JavaScript.

sevit_oauth

Used temporarily during Google authentication and expires after approximately 10 minutes.

sevit_locale

Used to remember your language preference for up to one year.

Your theme preference may be stored in browser local storage.

Sevit New Tab

Sevit New Tab may locally store:

  • authentication token;
  • a cached copy of home-page data so New Tab can load quickly;
  • your account name and email as part of that home-page data;
  • recent items;
  • settings;
  • city;
  • coordinates; and
  • weather data.

This data remains on your device, and locally stored account data is removed when you sign out through New Tab.

Sevit Capture

Sevit Capture may store:

  • an authentication token; and
  • screenshots that have not yet uploaded successfully.

Screenshots that fail to upload may be stored temporarily so the extension can retry and may be removed when the browser closes.

Android application

The Android application stores information such as:

  • authentication token;
  • theme; and
  • language.

Authentication information is stored using secure storage mechanisms available on the device.

7. Security

We use technical and organizational measures intended to protect data against unauthorized access, use, alteration, or disclosure.

Measures currently used include:

  • encrypted HTTPS connections;
  • argon2id password hashing;
  • hashed session and device tokens;
  • restrictions on direct database access;
  • limiting database access to authorized server environments;
  • role-based restrictions on administrative functionality; and
  • request rate limiting to help prevent abuse.

Although we take measures to protect the service, no internet system or method of electronic storage can be guaranteed to be completely secure.

8. How long we retain data

We aim to retain personal data only for as long as it is required for the relevant purpose.

Accounts and libraries

Account data and library content are retained while your account remains active or until the relevant data is deleted using available features.

Deleted items

For uploaded images and screenshots, the primary file is removed from active file storage when the item is deleted.

For links, data may first be marked as deleted so that deletion can be safely processed by the system.

Deleted link data is scheduled for permanent deletion from the active database within 30 days.

Some copies may temporarily remain in backups until those backups reach the end of their retention cycle.

Sessions

Normal web sessions remain valid for 30 days.

For Sevit New Tab, session validity may be extended through continued use, up to a maximum of one year from the time the session was created.

Expired session records are scheduled for deletion within 30 days after expiration.

Sponsor and supporter statistics

Impression and click records associated with an account are retained for no longer than 180 days.

After that period, individual records may be removed while daily aggregated statistics that are no longer associated with an account may be retained.

Payments and contributions

Transaction information required for accounting, dispute resolution, abuse prevention, or legal obligations may be retained for a longer period where required by applicable law.

Backups

Database backups are created periodically.

Sevit currently retains:

  • the most recent seven daily backups; and
  • the most recent four weekly backups.

Database backups do not include library image files.

Information deleted from the active system may remain temporarily in a backup until that backup is automatically replaced under the retention schedule.

Technical logs

Application logs are retained for no longer than 30 days, unless a particular log must be preserved for a longer period for a security investigation, technical troubleshooting, or a legal obligation.

9. Your personal data rights

Subject to applicable law, including the Republic of Indonesia Law No. 27 of 2022 on Personal Data Protection, you may have rights to:

  • obtain information about the identity of parties requesting or processing your data;
  • obtain information about the purposes of processing;
  • access your personal data;
  • obtain a copy of your personal data;
  • update or correct inaccurate personal data;
  • request that processing be stopped or that data be deleted or destroyed where permitted by law;
  • withdraw consent where processing is based on consent;
  • object to decisions based solely on automated processing where that right applies; and
  • exercise other rights provided under applicable data protection laws.

Certain rights may be subject to exceptions or limitations under other legal obligations.

Information about submitting a request is available on the Data & Privacy Requests page at:

`/info/data-requests`

You may also contact [email protected].

We may request additional information where necessary to verify that the person making a request is the account holder or otherwise entitled to exercise rights over the relevant data.

10. Children

Sevit is intended for users who are 18 years of age or older.

We do not intend to provide Sevit accounts directly to children under 18.

If we learn that an account belonging to a person under that age is processing personal data without the consent or other basis required by applicable law, we may take reasonable steps to restrict the account or delete the relevant data.

If you believe a child is using Sevit without the required consent, contact [email protected].

11. Changes to this Privacy Policy

We may update this Privacy Policy when:

  • Sevit's features change;
  • the way we process data changes;
  • the service providers we use change; or
  • applicable legal requirements change.

The date of the latest update will be displayed at the top of this page.

Published versions of this policy may be retained as a historical record so that the policy applicable at a particular time can be identified.

For material changes that significantly affect how personal data is processed, we will take reasonable steps to notify users, for example through a notice within Sevit, on the website, or by email.

12. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or Sevit's processing of personal data, contact:

SCND.digital / Sevit
Email: [email protected]

Additional contact information is available at:

`/info/contact`