Draft for review: not in force yet

Privacy policy

Last updated 31 October 2026

The short version: we collect what we need to make your clips, thumbnails and videos, and nothing more. We don't sell your data and we don't show ads.

Who we are

ClipClip (“ClipClip for Roblox”, at clipclip.io) is run by Anthony Chen EI, 3 avenue Philippe Auguste, 75011 Paris, France (“we”). We decide how your data is used: in the law's words, we're its controller. For any question or request about your data, write to support@clipclip.io.

What we collect, and why

  • Your game's link and its public Roblox page (name, description, numbers, images), when you paste a link: to read your game and plan clips for it.
  • What you tell us about your game (how it works): to plan your clips and to understand your footage.
  • Your profile from Roblox or Google, whichever you sign up with, and an account number: to make your account and keep your plans. From Roblox: your user ID, username, display name, avatar picture and when your Roblox account was made (we don't get your email address from Roblox). From Google: your name, email address and profile picture. We never see your password.
  • Your recordings and uploads, and what Snip makes from them (clips, thumbnails, page videos, and the ideas you write for thumbnails): to make them, show them to you and let you download them. A recording holds everything your computer played while you recorded, sound included.
  • Your Roblox connection, if you connect your Roblox account: your Roblox user ID and name, the games and permissions you picked, and Roblox's keys for them, kept encrypted. With them we publish your game's name and description when you ask, show your game's numbers, and run the Ad Manager if you turn it on.
  • Your game's numbers from Roblox (Analytics): counts and rates about your game's players as a whole, never about any one player.
  • The Ad Manager, if you turn it on: your settings (your monthly limit, how you pay Roblox, Snip's thumbnails), the pictures you add, the ads Snip makes, and your ads' results from Roblox, day by day. You pay Roblox directly: we never see that card.
  • Your email address, if you add one (it's optional): to send you the code that confirms it, and to tell you when Snip has finished your clips, thumbnails or page video. You can turn those emails off or remove your address in your account. If you sign in with Google, we use the address Google gives us.
  • Tips and news, only if you tick the box that asks for them: we keep when you said yes and the exact words you agreed to. You can say no again any time in your account.
  • The launch list, if you leave your email on clipclip.io before launch: your address, the words you agreed to and when, only to email you once, when ClipClip launches. To stop bots, Cloudflare checks your browser as you type (Turnstile), and we keep a scrambled copy of your internet address for a day, to limit tries.
  • Your IP address, when you visit: to stop abuse, like too many requests from one place. We keep it only as long as that takes.
  • Where your free clips and thumbnails were asked from: a scrambled copy of your IP address and of your device ID (see Cookies), saved with them, which we can't turn back into either. Free ones go to one account per device and a few per internet connection, so the free plan stays free for everyone.
  • Payments: Paddle sells our plans and credit packs as merchant of record. It collects your payment details and billing address, and we never see your card number. Paddle tells us what you bought, when and for how much, with its receipt and invoice number, which we keep with your account, and a few details of who paid (the card's type, last 4 digits and expiry, the name on it, the email), which we keep only scrambled, to check invites (below).
  • Invites: who invited whom, and when. Your first name shows to anyone who opens your invite link (“Alex invited you”). If you joined through someone's link, they see your first name, that you joined, and when you bought your first plan or pack, never what you bought or how much. To make sure an invite isn't someone inviting themself, we compare scrambled copies of the device IDs (see Cookies) each account signs in, pays or opens its invite page from, and of who paid.
  • Feedback and emails you send us: your message, and for feedback sent from the app, the game and page you sent it from and where a reply can reach you (your confirmed email address, or one you type with your message), to read it and answer you. Feedback reaches us by email, and we keep our answers with it.
  • Notes on your account: when we need to remember something to help you or keep ClipClip fair (a question you asked us, a test account), we may write a short note or tag on your account. Only we see them, and you can ask to see them like the rest of your data.

The law asks us to say on what basis we use each. Most of it is what you asked for: the service, our contract with you (your account, your games and plans, your recordings and what Snip makes, your Roblox connection and the Ad Manager, your emails about your clips, payments, feedback). Your IP address, the free plan's checks, the invites' checks and our notes on accounts keep ClipClip safe, fair and helpful, which is our legitimate interest. Tips and news, and the launch list, are only with your yes, which you can take back any time. Invoices, we keep because the law says so.

Who helps us

  • Anthropic (Claude) reads your game's details, what Snip found in your recordings and some frames of them, to write your plan and plan your clips and thumbnails.
  • Google (Gemini) watches your recordings and the clips made from them, to find their best moments and check them; speaks the voiceover; draws thumbnails from frames of your gameplay; and signs you in if you choose Google.
  • Roblox signs you in if you choose Roblox, gives us your game's public page, and, if you connect, does what you asked (publishing, your game's numbers, ads). Your game's images also load from Roblox's servers, which see your IP address, as with any website you visit.
  • Cloudflare runs our website and stores your files (recordings, clips, thumbnails, videos), and checks for bots on the launch list.
  • Supabase stores your account and its data, in the EU (Ireland).
  • Resend sends our emails: your codes, “your clips are ready”, news of your invites, tips and news if you asked for them, the launch email if you're on the list, and the feedback you send us.
  • Paddle handles payments, as merchant of record: what it does with payment details is in its own privacy policy.

Our AI providers use your data only to answer our requests: under the terms we use them on, they don't train their models on it. Some of these companies are in the United States; your data is protected there by the standard contracts EU law approves. We may also share data with our professional advisers, and with authorities when the law requires it. Nobody else gets it.

How long we keep it

  • Your account and everything in it (your games, plans, recordings, what Snip made, your settings, our notes on it): until your account is deleted.
  • Roblox's keys: until you disconnect, or Roblox ends them.
  • Your email address: until you remove it or your account is deleted. Your yes or no to tips and news: until your account is deleted.
  • The codes we email you: 30 days, kept scrambled, to stop abuse.
  • The launch list: until we send the launch email, or until you leave it (the email's unsubscribe link deletes your address). Its scrambled internet addresses: a day.
  • Payments and invoices: as long as the law requires (in France, 10 years for accounting records).
  • Invites, with the scrambled device IDs and payment details that check them, and feedback: until your account is deleted.
  • Everything is deleted within 30 days of your account's deletion, except what the law makes us keep, like invoices.

How we keep it safe

Everything travels encrypted. Roblox's keys are encrypted before we store them; device IDs and internet addresses are kept only scrambled, and the codes we email you only hashed; and the database lets each account read only its own data.

Your rights

You can see, correct, download or delete your data, say no to how we use it, and take back any yes you gave. Write to support@clipclip.io: we answer within a month. You can also complain to your data protection authority: in France, the CNIL (cnil.fr).

Kids and teens

You must be 13 or older to use ClipClip, and if you're under 18 you need a parent's or guardian's OK. We don't knowingly collect data from children under 13; if we find out we have, we delete it.

Cookies and storage

We only use what keeps you signed in, your device ID, and storage in your browser: the game you're working on before you sign up, and copies of the app's pages you opened, so they show at once, kept for that tab only. No ad trackers, and we never sell your data.

Your device ID is a random ID your browser keeps, set when you sign in: visitors who don't sign in get none. It keeps the free plan fair, since free clips and thumbnails go to one account per device, and invites fair, since an invite from your own browser to a second account doesn't count. An invite link stores nothing in your browser: its code stays in the page's address until you sign up. Your device ID says nothing about who you are, isn't used for ads, and doesn't follow you to other sites. It lasts 400 days. We keep it, and your internet address, only scrambled, so we can't read either back. Like the cookie that keeps you signed in, it's needed for the service you asked for to work safely and fairly, so it doesn't need your consent.

On the launch list's email box, Cloudflare's bot check (Turnstile) loads only once you start typing, and reads signals from your browser to tell people from bots.

Counting visits: to know how many people visit our website, each page you open there adds one to a count for that day: the page, the website or link that sent you (like TikTok or Google), your country (from Cloudflare) and whether you're on a phone or a computer. If you join the launch list, the website that sent you is counted with the sign-up, never with your address. Nothing about who you are is kept: no cookie, no ID, no internet address, so a count can't lead back to you or follow you from page to page.

Changes

If we change this policy in a way that matters to you, we'll tell you before the change applies.