Privacy

Last updated 7 August 2026

This is the honest version: what we hold, why we hold it, who else sees it, and how to make it go away. Motion Network doesn't run ads, doesn't sell anything about you, and has no third-party tracker watching you read this page. There's less here than you're probably used to, which is the point.

1. Who we are

Motion Network is the data controller for everything described here. Written questions, requests and complaints all go to the same place: support@motion-network.com.

2. What we hold, and why

Your account. Your name, email address and a scrambled version of your password. We never store the password itself - it's put through scrypt with a random salt per account, and checking it means re-scrambling what you typed and comparing. A leak of our database does not hand anyone your password. If you sign in with Google instead, we keep the identifier Google gives us and your verified email, and never see a password at all.

Your profile. Whatever you choose to fill in - handle, bio, website, links, awards, showreel, profile picture. All of it is optional, all of it is public by design, and you can change or empty any of it in Settings.

Your work and your words. The files you upload, along with their titles, descriptions and tags, plus your comments, your Help posts and the pieces you save. Saves are private to you. The rest is public - that's what posting is.

Staying signed in. A session is a long random number in a cookie. We store only a one-way hash of it, so even we can't read your session token out of our own database.

Payment. If you subscribe, we keep your Stripe customer and subscription identifiers, which plan you're on, its status and when it renews. We never see or store your card details - those go straight to Stripe and never touch our server.

Email we've sent you. The address, which kind of message it was, whether it arrived, and any error. If your address hard-bounces or you mark us as spam, we record that and stop sending to it - both to respect the signal and to protect our ability to reach everyone else.

Abuse limits. We count recent sign-in, sign-up and password-reset attempts per IP address to blunt brute-force attacks. This lives in memory only, expires within minutes, and is never written to disk. We keep no access logs.

Visit counts. We count page views on our own server as pages are served. There is no third party involved, no script in your browser, and no cookie. We never store your IP address. To avoid counting the same person twice in a day, your IP and browser type are combined with a secret random value and the date, and run through a one-way hash; only that hash is kept. It can't be turned back into an address, and because the date is part of it, it can't be used to follow you from one day to the next. We also record which page was viewed and which external site linked to it. Everything is added up as it's written, so there is no record anywhere describing one person's visit.

Digest and news, if you asked for it. Only if you ticked the box: your email address and name, and the date you agreed, so we can show that you did. See section 5 for who else holds this and section 7 for how to stop it.

3. Our legal basis

Running your account, hosting what you post and taking payment are all performance of a contract - you asked us for a service and this is the service. Security measures, rate limiting, counting visits and keeping records of email delivery are our legitimate interests in operating a site that works, doesn't get overrun, and that we can tell is being read.

The digest is the one thing here that runs on consent, and it's the only thing you have to opt into. The box is never pre-ticked, nothing else on the site depends on it, and you can withdraw at any moment in one click.

Two kinds of email

Worth separating, because they follow different rules. Emails about your own account - confirming your address, resetting your password, telling you the password changed, billing - are part of the service and have no unsubscribe link. If we let you turn those off you'd lose the ability to recover your account, and you'd stop hearing when something changed on it. The digest is marketing, needs your consent, and can be switched off without affecting anything else.

4. Cookies

Three things, all strictly necessary, none used for tracking:

There is no advertising cookie, no tracking pixel and no cross-site profiling, which is why you get a short notice rather than a consent maze.

5. Who else sees your data

Four companies, each doing one job:

Nobody buys data from us, because we don't sell it. We don't share your information for advertising, and we don't build profiles of you for anyone.

6. How long we keep it

Your account and everything on it stays until you delete it. Sessions expire after 30 days. Password reset links last 30 minutes and confirmation links 24 hours, and all of them are single-use. Rate limit counters vanish within minutes. Records of email delivery are kept while your account exists. Database backups are kept for seven days, so deleted material can persist in a backup for up to a week before ageing out.

Your consent to the digest, and the date you gave it, are kept while you're on the list; withdraw and both are erased, so no stale record is left implying an agreement you've since taken back. Visit counts are totalled as they're written and kept indefinitely in that form - they describe pages, not people, and hold nothing that leads back to you.

7. Stopping the digest

Settings, then "Digest and news", then "Don't email me about this". It saves on the click - there's no confirmation step and no save button, because getting out should never be harder than getting in. Every digest also carries an unsubscribe link, and using that works just as well: it comes back to us and switches the setting off.

It changes nothing else. You keep your account, your work stays up, and you carry on getting the emails about your own account described in section 3.

8. Deleting your account

Settings, then Close account. It is immediate and it is total: your posts, uploaded files, comments, Help threads, saves and profile all go, any subscription is cancelled so you aren't billed again, and if you were on the digest list your contact record at Resend is deleted too - we don't leave a copy of your address behind in someone else's system. We email you a receipt confirming it, including whether the billing actually stopped. We cannot restore an account afterwards, because there's nothing left to restore from.

9. Your rights

Under UK and EU data protection law you can ask for a copy of what we hold, have mistakes corrected, have your data deleted, object to how we're using it, or ask us to hand it over in a portable form. Most of this you can do yourself in Settings in less time than an email takes. For anything else, write to support@motion-network.com and we'll answer within 30 days.

If we get it wrong and you're not satisfied with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

10. Security

Passwords are hashed with scrypt and compared in constant time. Sessions are stored only as hashes. The site is served over HTTPS. Sign-in, sign-up and reset attempts are rate limited. Changing your email address needs the new address to confirm before anything moves, and the old address is warned while there's still time to stop it. Changing your password signs out every other device and emails you about it. None of this makes a site unbreakable, and we won't pretend otherwise - but if something does go wrong that puts you at risk, we'll tell you and the regulator, not quietly hope you don't notice.

11. Children

Motion Network is for working motion designers and isn't intended for under-16s. We don't knowingly hold data about children. If you think we have, tell us and we'll remove it.

12. Changes

If we change how any of this works, we'll update the date at the top of this page, and we'll email members about anything that genuinely affects them rather than relying on you to re-read a policy.

13. Contact

support@motion-network.com. A person reads it.