Privacy Policy

01. Overview

ClipsDown ("we", "us", "our") operates the website at clipsdown.com and its associated features: the social video downloader, the Engagement Exchange, and user account system. This Privacy Policy explains what data we collect, why we collect it, and how we protect it. We are committed to minimal data collection and maximum transparency.

02. Video Downloader — No Logging

When you use the video downloader (no account required), we do not:

• Store or log the URLs you paste
• Store the downloaded media files on our servers
• Collect your IP address for tracking purposes
• Associate your downloads with any user profile

Media is fetched from the original platform via API and streamed directly to your device. Once the transfer completes, no trace of that request is retained.

03. User Accounts

Creating an account is optional. If you sign up for the Engagement Exchange, we collect the following via our authentication provider (Supabase):

• Email address — used for passwordless magic-link sign-in only. We do not send marketing emails unless you explicitly opt in.
• User ID — a randomly generated UUID used internally to associate your profile data.
• Profile metadata — point balance, total earned/spent, trust score, last daily bonus claim date, and admin status.

We do not collect your name, phone number, payment details, or any other personally-identifying information beyond your email address.

04. Engagement Exchange Data

When you use the Exchange feature (earn or spend points), we record:

• Point transactions (earn events, spend events, daily bonuses)
• Campaign configurations (your YouTube video URL, campaign type, point budget)
• Task completion records (which tasks you completed, verifiable timestamps)
• Trust score updates based on completion quality

This data is stored securely in our database and is used solely to operate the Exchange. Campaign video URLs you submit are visible to other signed-in users who are matched to complete tasks on your content.

05. Cookies & Tracking

We use minimal, first-party cookies only:

• Auth session cookie — set by Supabase to keep you signed in. This is cleared when you sign out or the session expires.
• Functional preferences — we may store lightweight UI preferences (such as download quality selection) in localStorage — not cookies — and these never leave your device.

We do not use third-party tracking pixels, behavioral advertising cookies, Google Analytics, or any fingerprinting technology.

06. Third-Party Services

We use the following sub-processors to operate our service:

• Supabase — database, authentication, and session management. Data is stored in EU or US regions. Supabase is compliant with GDPR and SOC 2 Type II.
• Vercel — hosting and Edge Network. Vercel processes request logs transiently for operational purposes only.

We do not sell, trade, or rent your personal data to any third party.

07. Data Retention & Deletion

Your account data is retained for as long as your account exists. To request deletion of your account and all associated data, email us at privacy@clipsdown.com. We will process deletion requests within 14 days. Transaction records may be anonymized (rather than deleted) where required for audit purposes.

08. Security

All traffic to and from ClipsDown is encrypted via TLS 1.2+. Your database rows are protected by Supabase Row-Level Security (RLS) policies that ensure users can only read and modify their own data. We never store passwords — authentication is handled via email magic links.

09. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete personal data we hold about you. To exercise any of these rights, contact privacy@clipsdown.com. We will respond within 30 days.

10. Changes to this Policy

We may update this policy as our features evolve. Material changes will be indicated by updating the "Last Updated" date above. Continued use of ClipsDown after an update constitutes acceptance of the revised policy.