Privacy Policy

Last updated:

The short version: your videos are made on your device and never uploaded. Without an account, nothing you create leaves your browser. If you create an account, we store only what is needed to run it: your e-mail, a securely hashed password, your plan and — so you can open them on any device — your project drafts. No analytics, no advertising trackers, no selling of data.

1. Who is responsible

The controller is the operator of iClipSora, a self-employed individual registered in the Republic of Latvia, reachable at iclipsora@gmail.com.

2. Data stored only on your device

The editor saves your drafts and settings in your browser's local storage. This data stays on your device until you clear it in your browser settings or use “Reset” in the editor.

3. Your account

• Account data: e-mail address, password (stored only as a salted scrypt hash, never in readable form), whether your e-mail is confirmed, and when the account was created. Purpose: to sign you in and run your account (legal basis: contract).
• Project drafts: when you are signed in, the text, settings and any photos you add to a project are saved to your account so you can continue on another device (legal basis: contract). Exported videos are never uploaded. You can delete any project, or all of them with your account.
• Session cookie: one strictly necessary cookie (ics_session) keeps you signed in for up to 30 days. We use no other cookies, so no cookie banner is needed.
• Security: to protect accounts we briefly process IP addresses to limit repeated sign-in attempts, and our servers keep short technical logs.

4. Purchases

Payments are handled on a checkout page operated by Stripe. Stripe processes your payment details under its own Privacy Policy; we never see your full card details. We receive the information needed to deliver and manage your plan: your e-mail, country, the plan, the status of your subscription and the transaction record. We use it to unlock your plan, provide invoices and support, handle refunds and meet our tax and accounting obligations (legal bases: contract and legal obligation). Purchase records are kept for as long as Latvian tax and accounting law requires.

5. E-mails

We send only service e-mails: confirming your address, resetting your password and important notices about your account or plan. They are sent through Google's Gmail service. If you write to us, we use your message only to answer it.

6. Service providers

We do not sell or rent personal data. We share it only with providers that help us run the Service, under data-processing terms: our hosting provider (servers located in the European Union), Stripe (payments) and Google (e-mail delivery). Some of these providers may process data outside the EU under appropriate safeguards such as the EU Standard Contractual Clauses.

7. How long we keep data

Account data and projects are kept until you delete them or your account. Deleting your account removes your account data and projects immediately; backups are overwritten within 30 days. Purchase records are kept as required by law.

8. Your rights

Under the EU General Data Protection Regulation you have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to lodge a complaint with a supervisory authority — in Latvia, the Data State Inspectorate (Datu valsts inspekcija). You can delete your account yourself on the Account page, or contact us at the address above.

9. Children

The Service is not directed at children under 16, and we do not knowingly process their personal data.

10. Changes

We may update this policy. The date at the top shows the latest version; we will e-mail account holders about material changes.