Last updated: 31 October 2026
The data controller is Filip Horejš, Czech Republic, operator of Clip Collider (clipcollider.com). Contact: [email protected].
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address; with Google sign-in also your name and profile picture as provided by Google | To create your account and sign you in | Contract, Art. 6(1)(b) |
| Export log: template name, clip length, time of export, whether it was free | To count your free exports, run Pro plans and prevent abuse | Contract, Art. 6(1)(b); legitimate interest in preventing abuse, Art. 6(1)(f) |
| Plan status and payment-provider customer ID (when you subscribe) | To provide Pro and handle billing | Contract, Art. 6(1)(b) |
| Invoices and payment records | Accounting and tax | Legal obligation, Art. 6(1)(c) |
| Technical server logs (IP address, browser, time) | Security and keeping the Service running | Legitimate interest, Art. 6(1)(f) |
| Anonymous visit statistics (page views, referrer, country, device type), without cookies | To see how people find and use the site | Legitimate interest, Art. 6(1)(f) |
What we don't collect: the images, sounds and videos you use in the Studio. Rendering happens in your browser and those files are never uploaded to us. We don't use advertising or third-party tracking cookies.
We store your sign-in session in your browser's local storage so you stay signed in. The Studio may also remember your settings there. This is strictly necessary for the Service to work, so it doesn't need a cookie banner. It is removed when you sign out or clear your browser data.
We use a few trusted providers. They only process data on our instructions:
| Provider | Role | Location |
|---|---|---|
| Supabase Inc. | Accounts and database | EU (Frankfurt, Germany) |
| Cloudflare Inc. | Website hosting, security and privacy-friendly visit statistics (Cloudflare Web Analytics, no cookies, no personal profiles) | Global network |
| Resend Inc. | Sending sign-in emails | USA |
| Google LLC | "Sign in with Google", only if you choose it | USA |
| Stripe (when paid plans launch) | Payments | EU / USA |
Where data is transferred outside the EU, it is protected by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. You can delete your account and all data linked to it yourself on the Account page. For anything else, email us and we'll reply within 30 days.
You can also complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů (uoou.gov.cz), or to the authority in your own EU country.
All traffic is encrypted (HTTPS). Database access is restricted with row-level security, so each user can only read their own records, and changes to export counts and plans can only be made on the server. No system is perfectly secure, but we take reasonable measures to protect your data.
The Service is not intended for children under 16. We don't knowingly collect data from them. If you think a child has created an account, contact us and we'll delete it.
If we change this policy in a meaningful way, we'll update the date at the top and, for important changes, let signed-in users know by email.