Privacy Policy

Last updated:

SnipStream ("SnipStream", "we", "us") runs the website at snipstream.app and its API. This policy explains what information we collect when you use SnipStream, why we collect it, who we share it with, how long we keep it, and the choices and rights you have, including under the GDPR (EU/UK) and the CCPA/CPRA (California).

1. Information we collect

Information you give us

  • Account details: your email address and name when you sign up with email or Google. Passwords are handled by our authentication provider, Supabase; we never see or store them.
  • Clip requests: the YouTube link you submit, the start and end times, and the format and quality you choose.
  • Optional email notifications: if you ask to be told when a clip is ready, the email address you enter for that.
  • Messages to us: your name, email address and message when you use the contact form.
  • Payments: the plan you buy and its status. Card payments are processed by Stripe and crypto payments by NOWPayments. We never receive or store your full card number, CVC or wallet private keys.

Information collected automatically

  • IP address: recorded with each clip request to enforce free-plan limits, apply rate limits and prevent abuse. For IPv6 we keep only the network part (the first half of the address), not your full address.
  • Technical data: browser type, device and operating system, and request logs (pages and API endpoints accessed, with timestamps), kept for security and troubleshooting.
  • Browser storage: we store small values in your browser to keep you signed in, remember your theme, your cookie choice, any clip that is still processing, and a random device ID that counts free clips per device. See section 6.

We do not use third-party advertising trackers, and we do not sell your personal information.

2. How we use your information

  • To create clips and deliver them to you.
  • To run your account, show your clip history and apply your plan's limits.
  • To process payments, renewals and refunds.
  • To send the emails you ask for (clip-ready notices, verification and password reset) and to answer your messages.
  • To keep the service secure: rate limiting, fraud and abuse prevention, and debugging.
  • To meet legal obligations, such as tax records and responding to valid legal requests.

Legal bases (GDPR): performance of our contract with you (providing the service and your plan), our legitimate interests (security, abuse prevention and improving SnipStream), your consent (optional notifications and non-essential storage), and legal obligations (tax and accounting records).

3. YouTube content and your clips

SnipStream fetches only the part of a YouTube video you select and cuts it without re-encoding. We do not keep copies of full videos. Finished clips are stored with our storage provider only for your plan's retention period and are then deleted automatically:

  • Free: 24 hours
  • Pro: 30 days
  • Business: 365 days

You are responsible for having the right to download and use the content you clip. See our Terms of Service and Disclaimer. Copyright owners can report a clip under our DMCA Policy.

4. Who we share information with

We share information only with service providers that help us run SnipStream, and only what each one needs:

  • Supabase: sign-in and account database.
  • Cloudflare: content delivery, DNS and clip storage (R2).
  • Our hosting provider: the servers that process clips.
  • Stripe: card payments and subscriptions.
  • NOWPayments: cryptocurrency payments.
  • Resend: transactional email.
  • Google: only if you choose "Continue with Google", to confirm your identity.

We may also disclose information if required by law, to protect our users or SnipStream from fraud or abuse, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.

5. How long we keep information

  • Clips: deleted automatically at the end of your plan's retention period (section 3).
  • Clip request records (link, title, times, IP address): kept while your account is open so you can see your history, and for up to 12 months for abuse prevention.
  • Account data: kept until you delete your account.
  • Payment records: kept as long as tax and accounting law requires, usually up to 7 years.
  • Contact messages: kept for up to 24 months.

6. Cookies and browser storage

We use only storage that the service needs to work, plus your saved preferences:

  • Sign-in session: keeps you logged in (Supabase).
  • Cookie choice: remembers whether you accepted or rejected the banner.
  • Theme: remembers light or dark mode.
  • In-progress clip: lets a clip resume if you reload the page.
  • Device ID: a random number, not linked to you, so free clips without an account are counted per device instead of per network (people sharing Wi-Fi each get their own).

You can clear this storage at any time in your browser settings. Doing so signs you out. See our Cookie Policy for the full list.

7. Your rights

Depending on where you live, you can ask us to:

  • Access the personal information we hold about you and get a copy of it.
  • Correct information that is wrong.
  • Delete your account and personal information.
  • Export your information in a portable format.
  • Object to or restrict some processing, and withdraw consent at any time.

California residents: you have the right to know, delete and correct your personal information and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioral advertising. We will not treat you differently for using these rights.

To make a request, use the contact page with the email address on your account. We will reply within 30 days and may need to confirm your identity first. If you are in the EU or UK you can also complain to your local data protection authority.

8. Security

Connections to SnipStream are encrypted with HTTPS. API keys are stored only as one-way hashes, payment details stay with our payment providers, and access to our systems is restricted. No system is perfectly secure, so please use a strong, unique password and tell us if you notice anything suspicious.

9. International transfers

SnipStream's servers and providers are mainly located in the United States. If you use SnipStream from another country, your information will be processed there. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

10. Children

SnipStream is not intended for children under 13 (or under 16 in the EU and UK). We do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as SnipStream changes. We will change the "Last updated" date above, and for significant changes we will tell signed-in users by email or with a notice on the site.

12. Contact us

Questions about this policy or your information? Reach us through the contact page.