Privacy Policy

1. Clipping

• Recording and conversion run entirely in your browser; your clips never reach our servers. Manual clipping sends us nothing about the video or the times you choose.
• When you load a video, your browser connects to YouTube (Google) to show it in YouTube’s official player (privacy-enhanced mode) and to fetch its title. Nothing connects to YouTube before that. YouTube receives your IP address and browser details, may store data on your device and may show ads in the player. Zclipper uses YouTube API Services; YouTube’s processing is covered by the Google Privacy Policy.
• A shared link carries the video and your selection to whoever you send it to. We don’t store it.

2. Every visit

• Hosting and security. Cloudflare, our host, processes your IP address, browser details and the pages you request, to deliver the site and protect it from attacks.
• Visit statistics. Cloudflare Web Analytics counts visits without cookies, without storing anything on your device and without fingerprinting.
• Our server. When you open the clipper, the page asks our server whether you’re signed in; without a session cookie, nothing is stored. Requests to our server are logged (IP address, time, address requested, browser type) and kept for 7 days. What our own code logs never includes your email address or name.
• Your device. Your browser’s local storage keeps your theme choice (zclipper-theme) and your display’s capture scale (zc-capture-scale, used to size recordings). Neither leaves your device. If you sign in, a cookie (zc_session) keeps you signed in until you sign out or 30 days pass without a visit. These are strictly necessary, so they need no consent.

3. Magic Clips account

What we keep

• Your email address, which we need to sign you in and email you; your name, if you add one; and your language, for emails and checkout.
• Sign-in data: single-use sign-in links (valid 15 minutes) and your session, stored only as hashes, with the time you were last active and the page to bring you back to.
• Subscription data: plan, billing dates, credits used, and Stripe references (customer, subscription and invoice IDs, and the payment link of an unpaid invoice). We never see your card details.
• Your AI runs: the YouTube video ID and length, the language, the clips proposed (titles, descriptions, times), their status and technical usage (model, processing time, tokens).
• Messages you send us.

What we send

• For each AI run, Google (Vertex AI) receives the video’s YouTube address and the language to write in, and nothing about you. The clips you pick are recorded in your browser, like manual clips.
• We email you only what your account and subscription need: sign-in links, payment notices (a failed payment, then its resolution), replies to your messages, and advance notice of a change to our prices, to Pro, to our Terms or to this policy. No newsletters, no marketing.

Abuse prevention

• The sign-in form runs a Cloudflare Turnstile check, which uses your IP address and browser signals to tell people from bots. It loads only when you open the form.
• We count first-time sign-in requests per network using a keyed hash of your IP address (for IPv6, of its /64 network). The address itself is never stored.

4. Legal bases

5. Who receives data

• Cloudflare: hosting, database, email delivery, Turnstile and visit statistics (privacy policy).
• Stripe: payments. Stripe receives your email address and references to your account, and collects your payment details itself (privacy policy).
• Google (Vertex AI): proposes clips; receives only a video’s address and a language.
• YouTube: when you load a video, your browser deals with YouTube directly, under Google’s privacy policy.
• Our email provider, for messages you send us.

We don’t sell or rent your data or share it for advertising. Cloudflare, Stripe and Google may process data outside the European Union, including in the United States, under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

6. How long we keep it

7. Your rights

You can access, correct, export or delete your data, restrict its use, and leave instructions for what happens to it after your death. You can object at any time to processing based on our legitimate interests. To use these rights or delete your account, email support@zclipper.video from your account’s address; we answer within one month. You can also complain to the CNIL or your local data protection authority.

8. Children

Zclipper is not meant for children under 15, and accounts are only for people aged 15 or over. We don’t knowingly collect data from children under 15. If you believe a child has given us data, contact us and we’ll delete it.

9. Changes

We’ll post changes here with a new date, and email account holders before any significant change.