Privacy Policy
Effective date: 15 October 2026
This policy explains what personal data we collect when you use the Klipprr website and desktop app (together, the “Service”), why we collect it, who we share it with, and what you can ask us to do with it. It is written to be read, not to be survived.
1. Who is responsible for your data
The data controller is Lextor s.r.o., a company registered in Slovakia (EU), IČO 56 250 215, registered office Mikoviniho 6961/10, 917 01 Trnava, Slovakia, trading as Klipprr. You can reach us for any privacy matter at hello@klipprr.com.
We are not required to appoint a Data Protection Officer, so privacy requests are handled by the founder directly at the address above.
2. The short version
- Your video files never reach our servers. Clipping and export happen on your device.
- We store the minimum needed to run accounts, subscriptions and monthly clip limits.
- No analytics or advertising cookie is set until you opt in, and you can change your mind at any time.
- We do not sell personal data, and we do not share it with data brokers.
3. What we collect
3.1 Data you give us
| Data | When | Why |
|---|---|---|
| Email address, authentication identifiers (including a Google account ID if you sign in with Google), display name | Account creation and sign-in | To create and secure your account and link it to your plan |
| How you heard about Klipprr, if you choose to answer | Account creation (optional question) | To learn which channels bring people to Klipprr; you can leave it blank |
| Billing country, and (optionally) a VAT/tax ID and company name | Checkout | To issue a valid invoice and apply the correct tax treatment |
| Stripe customer and subscription identifiers, plan, renewal date, payment status | Checkout and each renewal | To give you the plan you paid for and to support billing questions |
| Email address (waitlist) | Joining the Windows waitlist | To notify you once, when the Windows build is available |
| Anything you write to us, including logs you choose to attach | Support | To answer you and fix the problem |
Payment card details never reach us. Card data is entered on Stripe’s own checkout page and processed by Stripe. We only ever see the identifiers and status described above.
3.2 Data collected automatically
| Data | Source | Legal basis |
|---|---|---|
| IP address, user agent, request time and path (server logs) | Vercel and Cloudflare infrastructure | Legitimate interest in keeping the Service available and secure |
| Page views, sessions, feature usage, conversion events | Google Analytics 4 and PostHog | Your consent (analytics cookies) |
| Which advertisement led to a download or subscription | Google Ads conversion measurement | Your consent (advertising cookies) |
| Campaign parameters (utm_*, gclid), referrer and landing page | Stored in your browser’s session storage for the current visit | Legitimate interest in knowing which channels work; attached to your account only if you sign up |
| Number of clips exported in the current month, plan tier, export errors | The desktop app, tied to your account | Performance of our contract with you (enforcing plan limits) and legitimate interest in fixing failures |
3.3 What we never collect
- The contents of your video files, or copies of them.
- Thumbnails, frames or audio from your clips.
- Payment card numbers.
- Location data beyond the country-level inference implicit in an IP address.
When you paste a URL into the desktop app, the request to the source platform (for example YouTube or Twitch) goes from your Mac. We do not receive or store the URLs you clip.
4. Cookies and similar technologies
On your first visit, nothing but strictly necessary storage is used. Analytics and advertising tools load only after you accept the matching category in the banner. The Cookie Policy lists every cookie, its provider and its lifetime.
To change or withdraw your choice at any time, use the Cookie preferences link in the footer of any page. Withdrawing is as easy as consenting, and it takes effect immediately for future collection.
When you have accepted analytics cookies, some events (page views, sign-ups, checkout starts, purchases) are also sent from our server to Google Analytics 4, and — only if you additionally accepted advertising cookies — to Meta’s Conversions API. Those transmissions can include your IP address, browser user agent and a hashed version of your email address. Without the matching consent, no such transmission happens at all.
5. Why we use your data (purposes and legal bases)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating your account, signing you in, applying your plan and clip limits | Contract — Art. 6(1)(b) |
| Taking payment, issuing invoices, handling renewals and cancellations | Contract — Art. 6(1)(b) |
| Keeping accounting and tax records | Legal obligation — Art. 6(1)(c) |
| Preventing abuse, fraud and service outages | Legitimate interest — Art. 6(1)(f) |
| Learning which channels bring people to Klipprr: the referrer and campaign parameters attached at signup, and your answer to the optional “how did you hear about us” question | Legitimate interest — Art. 6(1)(f) |
| Analytics, product improvement and advertising measurement | Consent — Art. 6(1)(a) |
| Onboarding emails about the account you created (see section 6) | Legitimate interest — Art. 6(1)(f), with an opt-out in every message |
| Product tips and offers about paid plans | Consent — Art. 6(1)(a), given by an unticked optional box at signup |
| Answering support requests | Contract, or legitimate interest if you are not yet a customer |
6. Emails we send
- Service emails — sign-in confirmation, password resets, receipts, renewal and failed-payment notices. These are part of the Service and cannot be switched off while you hold an account.
- Onboarding emails — a few messages after you create an account, about setting it up and making a first clip. These are part of the service you signed up for, and we send them on the basis of our legitimate interest in helping you get started. Every one carries a one-click unsubscribe link and an unsubscribe header your mail client can use, and we stop immediately when you use it.
- Product tips and offers — only if you ticked the optional box when you signed up. This is consent, it is never pre-ticked, and withdrawing it is one click. We record when you gave it.
- Waitlist email — one message when the Windows build is ready, and nothing else.
7. Who we share data with
We use the following processors. Each of them is bound by a data processing agreement, and none of them is allowed to use your data for their own purposes (with the exception of the advertising and analytics tools you consent to, which act under their own terms).
| Provider | What it handles | Where |
|---|---|---|
| Supabase | Authentication, database, edge functions | EU (Stockholm region); company is US-based |
| Vercel | Website hosting, server logs | US / global edge network |
| Stripe | Payments, subscriptions, invoices, tax calculation | US / EU |
| Resend | Sending service and onboarding email | US |
| Cloudflare | DNS and network protection | Global |
| GitHub | Hosting the app download files | US |
| Google (Analytics 4, Ads) | Analytics and advertising measurement — only with your consent | US / EU |
| PostHog | Product analytics — only with your consent | US or EU cloud, depending on our instance |
| Meta | Advertising measurement — only with your advertising consent, and only if we are running Meta ads | US |
We also disclose data where the law requires it, to establish or defend legal claims, or to protect the rights and safety of users and third parties. If Klipprr is ever sold or merged, your data may transfer to the acquirer under this policy; we will say so in advance.
We do not sell personal information and we do not “share” it for cross-context behavioural advertising as those terms are defined under US state privacy laws.
8. International transfers
Several providers above are established in the United States. Where personal data leaves the EEA, the transfer relies on the European Commission’s Standard Contractual Clauses, on the EU–US Data Privacy Framework where the provider is certified, or on another Chapter V safeguard. You can ask us which mechanism applies to a specific provider.
9. How long we keep things
| Data | Retention |
|---|---|
| Account and profile | Until you delete the account, then removed immediately |
| Clip usage counters | Rolling monthly records, deleted with the account |
| Invoices and payment records | 10 years, as required by Slovak accounting law (Act 431/2002) — kept even after account deletion |
| Onboarding email log and unsubscribe record | Deleted with the account; unsubscribe records for people without an account are kept so we do not email them again |
| Windows waitlist emails | Until the Windows build ships, or until you ask us to remove you |
| Server and security logs | Up to 30 days |
| Analytics data | Up to 14 months (GA4), per-provider defaults for PostHog |
| Support email | Up to 24 months after the conversation ends |
10. Your rights
If you are in the EEA or the UK you have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time without affecting processing that already happened. Residents of California and other US states with privacy laws have comparable rights, including the right not to be discriminated against for exercising them.
How to use them:
- Delete everything — sign in and use Account → Delete account. This cancels any subscription and erases your data straight away, except the invoice records we must keep by law.
- Get a copy of your data — email hello@klipprr.com from your account address with the subject “Data request”.
- Withdraw analytics or advertising consent — the Cookie preferences link in the page footer.
- Stop onboarding emails — the unsubscribe link in any of them.
We answer within one month, as GDPR Art. 12(3) requires, and we do not charge for it. We may ask you to confirm you control the account email before acting on a request.
If you think we have got it wrong, please tell us first — but you can also complain to a supervisory authority. In Slovakia that is the Office for Personal Data Protection (Úrad na ochranu osobných údajov SR), dataprotection.gov.sk. You may also complain to the authority where you live or work.
11. Security
Traffic is encrypted in transit (HTTPS). Database access is restricted by row-level security so an account can only read its own records. Administrative keys are held as server-side secrets and never shipped to the browser. No system is perfect: if a breach ever affects your personal data and is likely to result in a risk to you, we will notify you and the supervisory authority within the deadlines set by GDPR Art. 33 and 34.
12. Children
The Service is not directed to children and we do not knowingly collect data from them. You must be at least 16 years old to create a Klipprr account if you are in the EEA or the UK, and at least 13 elsewhere (or older, where your local law sets a higher age). If you believe a child has given us personal data, email hello@klipprr.com and we will delete it.
13. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects or similarly significant effects for you. Plan limits are enforced by a simple counter, not by a profile of your behaviour.
14. Changes to this policy
We will post any updated version on this page with a new effective date. If a change materially affects how we use your data, we will give notice by email or in the product before it takes effect.
15. Contact
Lextor s.r.o., Mikoviniho 6961/10, 917 01 Trnava, Slovakia · hello@klipprr.com
Klipprr is operated by Lextor s.r.o., Mikoviniho 6961/10, 917 01 Trnava, Slovakia (EU) · IČO 56 250 215
hello@klipprr.com · © 2026 Lextor s.r.o. All rights reserved.