TRUST & DATA

Everything Clipy stores about you.

One page, every field. If a row is on this page, we store it. If a row is not on this page, we do not.

Last reviewed: 2026-08-08.

QUICK ANSWER

Clipy stores account fields from Google sign-in, the recordings and shared screenshots you create, transcripts and AI summaries, basic processing metadata, and a minimal first-party visitor cookie. It does not sell data, run ad pixels, or train models on your recordings.

ACCOUNT

What we store about you

Email
From your Google OAuth sign-in.
Display name and avatar
From your Google OAuth profile.
Account created timestamp
When the account row was first written.
Last sign-in timestamp
Updated on each successful sign-in.
Last active timestamp
Updated as you use the product.
Signup IP and coarse geo
IP at signup, resolved to country, region, and city via our in-house iplookup service.
Bio (optional)
Only stored if you choose to set it on your profile.
SCREENSHOTS

What do we store about shared screenshots?

Shared screenshot file
Only uploaded when you choose Share link in the extension. Stored on Backblaze B2 and served from cdn.clipy.online.
Screenshot metadata
Title, MIME type, dimensions, byte size, public link id, and creation/update timestamps.
RECORDINGS

What we store about your recordings

Video file
Stored on Backblaze B2 object storage, served from cdn.clipy.online.
Thumbnail JPG
Stored on Backblaze B2.
Video title
Auto-generated from the AI summary unless you renamed it yourself.
AI transcript
Segments plus plaintext, stored in our SQLite database.
AI summary
TL;DR, key points, action items, and your Q&A turns against the transcript.
View count
A bare integer counter. We do not log per-viewer events, IPs, or user agents.
Duration, container format, processing status
Used to render the player and surface processing state.
COOKIES & CLIENT STORAGE

What we set in your browser

clipy_vid
First-party cookie, HttpOnly, ~400-day rolling lifetime
Set by our middleware to recognize repeat visitors for future personalization. Does not track you outside clipy.online.
next-auth.session-token
Cookie
Your Clipy sign-in session, present only while you are logged in.
PostHog
Product analytics
Visits and pageviews. Helps us see which pages are used and which paths break.
Google Analytics
Product analytics
Visits and pageviews. Same purpose as PostHog.
THIRD PARTIES

Where your data goes, and what we send

Google OAuth
Your email and profile, only at sign-in.
Resend
Your email address and the transactional email body. Used for welcome, recording-ready, contact reply, processing-failure, account-deleted, and new-sign-in alert emails.
Backblaze B2
Your video files, thumbnails, and screenshots you choose to share.
iplookup.biotrusted.com
Your IP at signup and on sign-in, resolved to coarse country, region, and city. Runs on our own infrastructure.
OpenRouter (LLM)
Your transcript plaintext, used to generate the AI summary and answer Q&A.
Sentry
Redacted crash, error, and warning diagnostics from the web app, server, Chrome extension, and desktop app. Default PII is disabled, and Clipy filters emails, tokens, cookies, passwords, and public recording URLs before sending events.
Sherpa-ONNX speech model
Your video audio, processed locally on our server. No third party receives it.
WHAT WE DO NOT DO

Things we never do

  • Sell your data.
  • Run third-party advertising networks.
  • Embed Facebook, TikTok, or LinkedIn ad pixels.
  • Track recipients of your share links beyond the bare view counter.
  • Use your recordings to train AI models.
DELETION

How to delete everything

Go to /profile and use the “Delete account” section. Here is what happens, in order:

  1. Your account row is removed from our database.
  2. All of your video rows cascade-delete.
  3. Your video files and thumbnails are purged from Backblaze B2 asynchronously.
  4. A confirmation email is sent to your address on file.

Once that completes, share links to your recordings return 404. It is not a soft delete.

RETENTION

How long we keep things

Stated explicitly, because “no retention schedule published” reads as an unanswered question rather than the generous answer it actually is here.

  • Recordings: until you delete them. There is no expiry timer on any plan, free or paid. We do not age recordings out, archive them, or degrade them over time.
  • If you downgrade from Pro to free: nothing changes. Every recording you already made stays playable, shareable and downloadable. We do not retroactively watermark, lock, or delete anything you made while paying.
  • Deleted recordings: gone immediately. Not soft-deleted, not archived. Backups roll off within 30 days, after which no copy exists.
  • Account deletion: purges everything, per the section above.
  • Crash diagnostics: 90 days, redacted of emails, tokens and passwords before they ever reach Sentry.
  • Server access logs: 30 days.
SECURITY

Reporting a vulnerability

Email security@clipy.online. We reply within 72 hours and give a triage verdict within 7 days. The full disclosure policy, our safe-harbour terms, and an honest account of what we do and do not certify are on /security, with a machine-readable record at /.well-known/security.txt.

UPDATES

When this page changes

Last reviewed 2026-08-07. We update this page whenever we add or remove a vendor, change what we store, or change a cookie. The date at the top moves with the change.

CONTACT

Questions?

Email support@clipy.online and a human reads every email.

For the legal version, see our privacy policy.