Privacy Policy

Effective date: April 30, 2026

This Privacy Policy explains how Klipprr ("we", "us") collects, uses, and shares information when you use our website and desktop application (together, the "Service").

Who we are

Klipprr is operated by Klipprr s.r.o., a company registered in Slovakia (EU) (IČO: [registration number — add before publishing]). For invoices, contracts, or formal data requests, contact us at hello@klipprr.com.

Information we collect

Information you provide

Account information — email address, authentication identifiers (e.g. Google OAuth subject ID), and display name.
Billing-related information — subscription status and Stripe customer/subscription identifiers. Payment card details are processed entirely by Stripe; we never store full card numbers.
Support communications — messages you send to us, and any files or logs you choose to share.

Information collected automatically

Log and device information — IP address, browser user-agent, timestamps, and pages visited, generated by our hosting and security infrastructure.
Analytics data (subject to your cookie consent) — page views, session identifiers, feature interactions, and conversion events collected via Google Analytics 4, Meta Pixel, and PostHog. See Cookies and tracking below.
Attribution data — UTM parameters, referrer, and landing page recorded in your browser’s session storage for the duration of your visit.

Content and usage data

The Service lets you create clips from third-party sources (YouTube, Twitch, X, Instagram, Vimeo) and from local video files. Depending on how you use the Service, we may process:

Input URLs you provide and related metadata needed to perform the requested action.
Plan/entitlement usage (such as clip counts and feature access) to enforce limits and prevent abuse.

We do not permanently store your video files on our servers. All clipping and export happens locally on your device. Diagnostic logs are stored locally unless you choose to share them with us.

Cookies and tracking

We use both essential cookies (required for authentication and core site functionality) and, with your consent, analytics cookies. See our full Cookie Policy for a complete list of cookies set by each provider.

Essential cookies

Authentication session tokens (Supabase) and your cookie consent preference are always active and cannot be disabled without breaking core features.

Analytics cookies (require consent)

After you click Accept all in the cookie banner, the following tools become active:

Google Analytics 4 — tracks page views, sessions, and conversion events (sign-ups, downloads, purchases). Sets _ga and _ga_* cookies.
Meta Pixel — measures ad effectiveness. Sets _fbp and _fbc cookies.
PostHog — product analytics (feature flags, funnel analysis, session recording if enabled).

Server-side event forwarding

When analytics consent is granted, certain events (page views, sign-ups, purchases) are also relayed from our server to Meta’s Conversions API and Google Analytics 4’s Measurement Protocol. This relay includes your IP address and browser user-agent, which are transmitted to those services for attribution and fraud-prevention purposes. This forwarding only occurs after consent is given.

How we use information

Provide the Service — account creation, authentication, feature access, and subscription enforcement.
Process payments and manage subscriptions.
Security and fraud prevention — detecting abuse and protecting the Service.
Analytics and improvement (with consent) — understanding how users interact with the Service to improve it.
Email communications — transactional emails (account and billing) and, where permitted, onboarding/marketing emails. You can unsubscribe from marketing emails at any time via the link in every email or by contacting us.
Legal compliance — accounting, tax recordkeeping, and responding to lawful requests.

Legal bases (EEA/UK)

If you are in the EEA/UK, we process personal data under one or more of the following legal bases:

Contract necessity — to provide the Service you signed up for.
Consent — for non-essential analytics and advertising cookies, and for marketing emails.
Legitimate interests — security, fraud prevention, and service reliability, where our interests are not overridden by your rights.
Legal obligation — tax records, accounting, and responding to lawful orders.

How we share information

We share information with service providers ("processors") that help us run the Service, including:

Supabase — authentication, database, and related infrastructure.
Stripe — payments and subscription management.
Vercel — website hosting and related logs.
Resend — transactional and onboarding email delivery.
Cloudflare — domain/DNS and network security services.
Google (Analytics 4 / Ads) — analytics and advertising measurement, subject to your consent.
Meta (Pixel / Conversions API) — advertising measurement, subject to your consent.
PostHog — product analytics, subject to your consent.

We may also share information if required by law, to enforce our terms, or to protect the rights, safety, and security of Klipprr, our users, or others.

International data transfers

Some of our providers process data outside the EEA (for example, Supabase, Stripe, Vercel, Google, and Meta are US-based). Where applicable, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or adequacy decisions to protect personal data transferred outside the EEA.

Data retention

We keep personal data only as long as necessary for the purposes described above. Account data is retained while your account is active; billing and transaction records may be retained longer to meet legal obligations; analytics data is retained per each provider’s standard retention periods; log data is typically retained for shorter periods for security and troubleshooting.

Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To submit a request, contact hello@klipprr.com. EEA/UK residents also have the right to lodge a complaint with their local supervisory authority (in Slovakia: the ÚOOÚ).

To withdraw consent for analytics cookies, clear klipprr_cookie_consent_v1 from your browser’s local storage and reload the page — the consent banner will reappear.

Children

The Service is not directed to children. You must be at least 13 years old (or older if required by your local law) to use the Service.

Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above. For material changes, we will provide additional notice where required by law.

Contact

Privacy questions? Email hello@klipprr.com.