This Privacy Policy explains what information ClipCast (“we”) collects when you use the ClipCast Chrome extension and website at clipcast.tech (the “Service”), how we use that information, and the choices you have.
Short version: we collect the minimum we need to operate the Service, we never sell your data, and you can delete your account and content at any time.
1. Information we collect
Account data
- Email address (required for sign-in).
- Name and profile picture (only if you sign in with Google).
- Timestamps for account creation and last login.
Content you upload
- Screen recordings and screenshots you choose to upload.
- Titles, descriptions, and chapter markers you set.
- Thumbnails generated from your recordings.
Usage data
- Anonymous view counts on shared links, with a viewer hash derived from IP + user-agent (used only for dedup).
- Server logs (request paths, response codes, timestamps) for security and debugging.
- Aggregate metrics on feature usage (no recording content is analyzed).
Billing data (paid plans only)
Payments are processed by Paddle.com Market Ltd, our Merchant of Record. We do not store full card numbers. We receive from Paddle: customer ID, subscription ID, plan, billing country, and the last 4 digits of the card. See Paddle's privacy notice for their handling.
2. What we do NOT collect
- We do not analyze the audio or video content of your recordings to train AI models (except features you explicitly enable, like the AI transcript add-on which runs on your selected clip).
- We do not sell, rent, or trade your personal data with third parties for advertising.
- We do not embed third-party ad tracking on our pages or on shared video viewer pages.
- The Chrome extension does not read content from pages you visit unless you explicitly start a recording or open the setup overlay.
3. How we use the information
- Provide the Service: store and serve your recordings, generate share links, count views.
- Account & billing: authenticate you, send transactional emails, process payments.
- Security: detect abuse, rate-limit, prevent unauthorized access.
- Improve the product: aggregate feature-usage metrics. No individual content is used.
- Communicate: respond to your support requests; send service announcements (e.g. material policy changes). Marketing emails are opt-in only.
4. Data storage and processing locations
The Service stores data in multiple regions depending on the data type:
- Account & metadata: Neon Postgres (US East).
- Recordings & thumbnails: Cloudflare R2 object storage (global edge).
- Application servers: Hostinger (EU).
- Payment data: Paddle (UK/EU).
5. Sharing of information
We share data only with these service providers under contract to operate the Service:
- Paddle — payment processing, tax compliance, invoicing.
- Cloudflare — object storage and CDN for recordings.
- Neon — managed Postgres database.
- Google — OAuth sign-in.
- Hostinger — application hosting.
We may disclose information when required by law (subpoena, court order) or to protect the rights and safety of ClipCast or others. We do not provide bulk access to any government or commercial entity.
6. Sharing your videos
When you enable sharing on a video, the /v/<slug> URL becomes accessible to anyone with the link. You can turn sharing off, rotate the slug, set a password, or set an expiry date at any time from the video's settings panel. View counts are tracked anonymously (see “Usage data” above).
7. Cookies and similar technologies
- Authentication cookies (essential): keep you signed in.
- CSRF cookies (essential): protect against cross-site request forgery.
- Password-gate cookies (essential): grant access to a specific password-protected video for 8 hours after correct entry.
- Theme preference (functional, stored in localStorage): remembers dark/light mode.
- We do not use third-party analytics or advertising cookies.
8. Your rights
Depending on your jurisdiction, you may have the following rights:
- Access & export — request a copy of the personal data we hold about you.
- Correction — fix inaccurate data from your account page.
- Deletion — delete your account anytime; we erase your data within 30 days (legal-retention exceptions apply for billing records).
- Portability — your recordings can be downloaded directly from the dashboard at any time.
- Object/withdraw consent — for marketing emails, unsubscribe in any email or via your settings.
- Lodge a complaint — with your local data-protection authority.
To exercise any of these rights, email info@clipcast.tech. We respond within 30 days.
9. Data retention
- Free-tier recordings: auto-deleted 30 days after upload.
- Paid-tier recordings: retained until you delete them or cancel your plan.
- Account metadata: retained while the account is active; deleted within 30 days of account deletion.
- Billing records: retained for the legally required period (typically 7 years).
- Server logs: retained 30 days then automatically rotated.
10. Security
We use HTTPS everywhere, password hashes via bcrypt, HMAC-signed cookies for sensitive flows, scoped S3-compatible credentials, and strict CORS and CSP policies. We perform routine reviews of dependencies and access logs. No system is perfectly secure; please report vulnerabilities to info@clipcast.tech.
11. Children
The Service is not directed at children under 13, and we do not knowingly collect data from them.
12. International transfers
Your data may be processed in countries other than your own (see Section 4). Where required by law, we rely on Standard Contractual Clauses for transfers from the European Economic Area, the UK, and Switzerland.
13. Changes to this Policy
We may update this Policy. We will announce material changes via email or in-product at least 14 days before they take effect.
14. Contact
Questions or data-rights requests: info@clipcast.tech.