Last updated: August 7, 2026
This policy explains what data Ninefolio collects and how it is used. The data controller is Webuild Technologies SRL. For any privacy question or request, reach us via the contact page.
Under the GDPR we rely on: contract (providing the service you signed up for), legitimate interests (security, abuse prevention, improving the service, and measuring our own advertising), legal obligation (tax and accounting records), and consent (analytics and marketing cookies — either of which you can withdraw anytime).
We use a small number of specialist providers to run Ninefolio: a database and authentication service, a media storage service, a payment processor (we never see or store card numbers), a bot-protection service, a cookieless traffic-measurement service, an EU-hosted product-analytics service, and — subject to your cookie choices — a cookie-based analytics service and an advertising platform that measures our ads. Each of them processes data solely to provide their service to us, under a data processing agreement — except the advertising platform, which also uses what it receives for its own purposes, as described under Marketing below.
Some of our providers process data outside the EEA (for example in the US). Where that happens, transfers are covered by recognised safeguards — the EU Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.
You can access, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time — see Data Deletion or reach us via the contact page. If you are in the EU, you also have the right to complain to your data protection authority.
If you live in California, the CCPA/CPRA gives you the right to know what personal information we collect (listed above), to access, correct or delete it, and not to be discriminated against for exercising these rights. We do not sell your personal information for money. Our marketing cookies, and the ad reporting described below, may involve “sharing” personal information for cross-context behavioral advertising as California defines that term — you can opt out at any time, for any reason, by switching Marketing off under “Cookie settings” in the footer of this page and our other main pages, which is also how you exercise your right to opt out of sharing. To exercise any of these rights, reach us via the contact page — we verify each request and respond within the time the law requires. You can also designate an authorized agent to make a request for you.
Essential cookies are required for the service to work: your login session, bot protection on signup, a cookie remembering your consent choice for 12 months, and one recording only whether your country requires us to ask for consent at all — a single yes/no, never your location itself.
Optional cookies come in two categories — analytics and marketing — and how they start depends on where you are. In the EU, EEA, UK and Switzerland we ask first: neither category loads until you accept it in the cookie banner. Elsewhere they may be active by default. Either way you can turn each of them on or off at any time under “Cookie settings” in the footer of this page and our other main pages (our ad landing pages are deliberately stripped of navigation, and creator portfolio pages carry no footer of ours — so use the footer here or on the home page), and once you make a choice we honour it wherever you are. Your choice applies from the next page you load; anything already stored in your browser stays there until it expires or you clear it, and a page you already have open may still report an action you complete on it.
Analytics cookies show us how Ninefolio is used — page views, feature usage and session-level insights into how visits use our pages — so we can improve it. Turn them off and cookie-based analytics don't load; only the basic, cookieless measurement described below remains.
We also keep basic, cookieless traffic and usage statistics; they set no cookies and store nothing on your device, so they run for every visitor. No analytics data is ever sold.
Marketing cookies are a separate category with its own switch. We advertise on third-party platforms, and their advertising pixel tells them you visited so we can see which ads actually work; those platforms may connect that to their own account data about you and use it to show you ads. Turn marketing off and we stop loading it. It is not used on creator portfolio pages at all — those visitors are the creator's audience, not ours.
The marketing category also covers one cookie of our own. If you arrive by clicking one of our ads, the link carries a click identifier, and we keep it in a cookie for up to 30 days so that it is still there if you create an account later — otherwise it would be lost the moment you moved to another page. It is only set while marketing is on, and we delete it the next time you load one of our pages after you switch marketing off. If you do create an account, the identifier is also stored alongside your account record, so that a purchase weeks later can still be matched to the ad that brought you.
If you reach us by clicking one of our ads, we also report back to the advertising platform from our own server that the click led to a signup or a purchase. This uses the click identifier described above and, depending on the step, a scrambled (one-way hashed) form of your email address — never a readable one — or basic technical information about your device and connection. We only do this when you actually arrived from one of our ads: if you found us some other way, nothing is reported.
If you decline marketing we don't keep the click identifier on your device, and we don't report your signup or any later purchase. The reporting itself relies on our legitimate interests: knowing which ads work is what stops us paying for the ones that don't, and it involves no profiling of you and no decision that affects you. You can object at any time — switch Marketing off under “Cookie settings” and we stop reporting your later signup or purchase, or email us and we'll action it. Turning it off before you sign up means nothing is ever sent from our server for you.
Ninefolio is not directed at children under 18 and we don't knowingly collect their data. If you believe a child under 18 has an account, contact us and we'll delete it.
We may update this policy; material changes will be announced on this page and, where appropriate, by email.