CiGYL - from idea to previs in minutes – not days
CiGYL - from idea to previs in minutes – not days
We take your privacy seriously. This policy explains how we handle your data.
Last updated: 19 August 2026 — added Section 6 on usage statistics.
André Graf
C/O www.impressum-ohne-adresse.de
Wernher-von-Braun-Str. 5-7
69214 Eppelheim, Germany
info@cinegraft.com
To create an account, we collect only your email address. Your password is stored in securely hashed form by our authentication provider — we never see or store it in plain text. We do not ask for your name, postal address, or any other personal details. As CiGYL is free during the beta, no payment information is collected.
Your actual project data — storyboards, characters, locations, scenes and media — is stored locally on your own device (in your browser and in a project folder you choose). It is never uploaded to our servers.
AI features are optional and use a "Bring Your Own Key" (BYOK) model. If you choose to use them, you add your own API key for a third-party AI provider (for example Google Gemini, OpenAI, or Anthropic). Your API keys are stored locally and encrypted on your device and are never transmitted to us.
When you use an AI feature, the content required for that request (such as prompts, descriptions or images) is sent directly from your browser to the AI provider you selected, using your own account with that provider. CiGYL does not route, receive, or store this content. That processing is governed by the privacy policy and terms of the respective provider, which you are responsible for reviewing. If you never use AI features, no data is sent to any AI provider.
We use Netlify to host the website and Supabase to handle account authentication — this stores your email address and your hashed password. Both are GDPR-compliant providers. Your data is not shared with advertising networks, and we never use your content to train AI models.
Under the GDPR you have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, contact us at info@cinegraft.com. You may also delete your account, which removes your email address from our authentication provider.
We only use technically necessary cookies to keep you logged into your account. No third-party tracking cookies are used. Our own usage measurement does not use cookies either, and it stores nothing in your browser unless you switch it off yourself (see Section 6).
The overview video on our home page is embedded from YouTube in its privacy-enhanced mode (youtube-nocookie.com). Simply opening the page sets no YouTube cookies. If you start the video, your browser connects to Google’s servers, which receive your IP address and may store information on your device; that processing is governed by Google’s privacy policy. You can watch the video without playing it here by opening it directly on YouTube instead.
To understand which parts of CiGYL are actually used, we measure usage on our own infrastructure (Supabase, EU). No third-party analytics service is involved, nothing is shared with advertising networks, and we never record your project content.
For every visit we record: which tool a page belongs to, how long it was actively used, your browser’s window width, the kind of device you use (see below), the country the visit comes from and your browser’s time zone setting (see below), and a coarse category describing how you first found CiGYL — for example “youtube”, “google”, “chatgpt.com” or “direct”. We do not record your IP address or the contents of page addresses.
Where you are, roughly. We record the country a visit comes from (for example “DE”), so we can see which parts of the world CiGYL is used in. Our own server at the edge of the network derives that country code from the connection and passes on only the code — your IP address is neither forwarded nor stored, and no third-party lookup service is involved. As a second, independent signal we also record the time zone your browser reports (for example “Europe/Berlin”); it is less precise, since a VPN or a trip abroad changes it.
What kind of device you use. We record a coarse device category (for example “iPhone”, “Android phone”, “Mac” or “Windows PC”), so we can see which devices CiGYL needs to work well on. Our own server at the edge of the network derives it from the browser identification your device sends with every request, and passes on only that category — the full browser identification is neither forwarded nor stored.
If you are signed in, the measurement also records your account identifier. This is personal data. We need it to answer one question we cannot answer otherwise: how many of our users actually use CiGYL, and for how long — without it, one person using a laptop and a phone would count as two different people. The legal basis is our legitimate interest in understanding and improving our own product (Art. 6(1)(f) GDPR). If you are not signed in, no account identifier is recorded.
No recognition across visits. The measurement stores nothing in your browser. To group the pages of one visit, the start time of the visit and the source category are passed along in the address of links within cigyl.com and removed from the address bar straight away. A new visit is not linked to an earlier one. Earlier versions kept an entry named cigyl:acq-v1 in your browser; it is deleted automatically the next time you open a page.
When you register, the source category of that visit (for example “youtube”) is stored once with your account, so we can see which channels bring new users.
Your choices. To exclude your browser from measurement entirely, open cigyl.com/?cgtrack=off — the setting is stored in that browser and stays until you clear your browsing data. Visiting /?cgtrack=on reverses it.
Access and deletion. You may ask us at any time what usage data is stored for your account, and ask us to delete it, at info@cinegraft.com. If you delete your account, the associated usage data is deleted automatically along with it.