Privacy Policy

This page explains what information Vid2Shorts touches when you use it, what we keep, what we throw away, and what we will never do with any of it. We wrote it ourselves, in plain language, because a privacy policy you cannot understand protects nobody. If you read only one section, read the short version below; everything after it is the same story with the details filled in.

Who we are

Vid2Shorts (vid2shorts.com) is a browser based tool that turns long videos into vertical Shorts. It is operated by Outline Technologies LLC, a company registered in Wyoming, United States, at 30 N Gould St, Ste R, Sheridan, WY 82801. We are the data controller for everything described here. You can reach us any time at [email protected], and a human reads what arrives there.

Using the tool as a guest

No account, no name, no email. When you paste a video link and start a job, our servers handle:

• The video link you pasted. We need it to fetch the video and process it. It is stored with the job while the job exists.
• The video itself, temporarily. The video is fetched from the platform hosting it to our server, cut, reframed, captioned, and the finished file is held so you can download it. Working files are deleted when the job completes, and finished clips expire automatically after a short window. We do not keep a library of your videos, and nobody here watches them.
• Standard server logs. Like practically every website, our servers record the IP address, request path, and time of each request. We use these logs to keep the service working, to debug failures, and to stop abuse such as automated flooding. They rotate out on a schedule and are not used to build profiles.
• A free use marker. To keep the free tier fair we note that a given browser or address has used its free Short. This is a cookie plus a device signature computed by Fingerprint, a specialist service that reads characteristics your browser already publishes, such as screen size, timezone and how your device renders text, and returns an identifier for the device. They receive those characteristics and your IP address; they do not receive your name, your email or anything you make here. We use the identifier for one thing only, which is telling whether this device has already had its free Short, and it is never used for advertising or sold to anybody. It identifies a browser rather than a person, and it exists so one visitor cannot take a thousand free Shorts while everyone else waits in the queue behind them. Blocking it does not break the site.

Creating an account

Accounts exist so your Shorts, your settings, and your plan can follow you between visits. When you create one, here is the complete list of what we hold:

• Your email address, because it is how you sign in and how we can reach you about your account.
• Your name or display name, so the dashboard can greet someone other than "user".
• Your password, hashed. We never see or store the actual password. Authentication runs on Supabase, an established auth provider, and passwords are hashed before they touch a database.
• Your plan and your clip history, so paid features work and your past exports are findable.

That is the whole list. We do not ask for your phone number, your birthday, or anything an account does not genuinely need. We will never email you marketing without your permission, and account email is limited to things you would expect: sign in codes, receipts, and answers when you write to us.

Google sign in, and what Google shares with us

You can create your account with Google instead of a password. If you do, Google shows you a consent screen and then shares three things with us: your name, your email address, and your profile picture. That is everything. We use them to create your account, to sign you in on later visits, and to show your name and picture in your own dashboard. We do not receive your Google password, your contacts, your Drive, your search history, or anything else from your Google account.

What we do with Google data is deliberately boring:

• It is used for authentication and for displaying your own identity to you, and for nothing else.
• It is never sold, rented, or traded.
• It is never used for advertising, and we run no ad systems it could feed.
• It is never used to train AI models, ours or anyone else's.
• It is never shared with third parties, except the processors that host our database (Supabase) and infrastructure, who are bound to process it only for us.

Formally: Vid2Shorts' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can withdraw Vid2Shorts' access to your Google account at any time at myaccount.google.com/permissions. If you also want the Vid2Shorts account and its data gone, email [email protected] from the account address and we will delete it.

Connecting a channel for auto posting

Vid2Shorts can publish a finished Short directly to your own channel, for example your YouTube channel, but only if you deliberately connect it. Connecting walks you through that platform's own consent screen, and the permission we request is the narrow one: the ability to upload the videos you tell us to upload. In practice it works like this:

• Nothing is ever posted unless you press the button that posts it. There is no background posting, no scheduled surprises, nothing automatic that you did not start.
• The access token the platform gives us is stored server side, is never exposed to your browser or to other users, and is used only to carry out the uploads you request.
• Disconnecting the channel in your dashboard deletes the stored token. You can also revoke access from the platform's side at any time, for Google at myaccount.google.com/permissions.
• Deleting your account deletes the stored tokens with it.

YouTube connections use YouTube API Services, so the YouTube Terms of Service and the Google Privacy Policy also apply to what happens on YouTube's side of that connection.

What we deliberately do not do

• We do not sell, rent, or trade any data to anyone. Not guest data, not account data, not Google data. There is no version of our business where your information is the product.
• We do not run third party advertising trackers on this site.
• We do not read, analyze, or catalogue your videos beyond what the processing itself requires.
• We do not send marketing email without your permission. Guests never give us an email at all.
• We do not use your content or your account data to train AI models.

Paying for a plan

We never see your card. Card details are entered on the payment provider's own page, not ours, and they never touch a Vid2Shorts server. There is nothing for us to leak, because there is nothing for us to hold.

• Card payments are processed by Stripe. You are sent to a page hosted by Stripe, where you give them your card number, expiry and security code directly. They send us back only what we need to activate your plan: which plan was bought, whether it was paid, the email you used, a payment reference, and the last four digits and brand of the card so support can match a charge you ask about. Stripe processes that data as an independent controller under its own privacy policy.
• Cryptocurrency payments are processed by NowPayments, on their page, under their own policy. We receive the invoice reference and its status.
• What we store on our side is the plan, the amount, the date, the provider, the reference id and, for a subscription, the id needed to cancel it. That is the record of a sale, so we keep it for as long as accounting and tax law require, which is longer than we keep anything else. It is not used for marketing and it is never sold.

A card charge appears on your statement under Outline Technologies LLC, the company that operates Vid2Shorts, usually shortened to something like OUTLINE TECH. Stripe is the merchant of record, so their name may sit alongside it. If you see something you do not recognise, write to us before you dispute it and we will find it, explain it and refund it if it was ours to refund. That is faster for you than a chargeback and it costs you nothing to try.

Cookies

We use the minimum: a session cookie that keeps you signed in if you have an account, and a marker that remembers your free Short usage. There is no cross site tracking, no advertising pixel, and no fingerprinting for marketing purposes. If you clear your cookies while signed out, the site simply forgets you were here.

Where the source platform fits in

Vid2Shorts fetches videos directly from the platform that hosts them. We are not affiliated with those platforms, and your use of them is governed by their own terms and privacy policies. We never see your account on any of them unless you deliberately connect one to publish your finished Shorts, and you can disconnect it whenever you like.

How long things live on our servers

• Working files: deleted when processing finishes.
• Finished clips: expire automatically within hours so you can download them, then they are gone.
• Server logs: rotate on a fixed schedule measured in days, not years.
• Account data: kept while the account exists, deleted when you delete the account.
• Channel connection tokens: kept until you disconnect the channel or delete the account, whichever comes first.
• Email you send us: kept as long as the conversation is useful, deleted on request.

Who else touches your data

We use a small number of companies to run the service, and no others. Each one is bound to process data only on our instructions, and none of them is allowed to use it for their own purposes. This is the complete list:

• Hetzner (Germany): the servers that run the site and do the video processing.
• Supabase: the database and the authentication that signs you in.
• Stripe: card payments, as merchant of record. They handle the card data; we never receive it.
• NowPayments: cryptocurrency payments, for buyers who choose that route.
• Resend: the transactional email that sends sign-in links and receipts.
• Fingerprint: the device signature that keeps the free tier from being farmed, described above. Nothing else uses it.

We do not sell personal data, we do not share it for advertising, and we run no ad network or third-party analytics that could receive it. If we ever add a processor to this list, the list changes and the date at the top of this page moves with it.

Where your data is handled, and on what basis

Our servers are in Germany and our company is in the United States, so data moves between the two. Where that involves personal data from the UK or the European Economic Area, the transfer relies on the European Commission's Standard Contractual Clauses through our processors. The legal bases we rely on, in the language the GDPR uses:

• Contract: running your account, processing your videos, and taking payment for a plan you bought.
• Legitimate interests: keeping the service up, stopping abuse of the free tier, and debugging failures. Balanced against your interests, which is why the free-use marker identifies a browser and not a person.
• Legal obligation: keeping records of sales for tax and accounting.
• Consent: connecting a channel, and anything else you switch on yourself. You can withdraw it at any time.

Your rights

Depending on where you live, you may have legal rights to access, correct, export, or delete personal data, and we honor the spirit of those rights everywhere rather than arguing about jurisdiction. For guests the honest answer is that we usually hold nothing that could identify you. For account holders, write to [email protected] from your account address and tell us what you want: a copy of what we hold, a correction, or deletion. We will answer plainly and do it.

These are the rights the GDPR and the UK GDPR give you: access, correction, erasure, restriction, portability, and objection to processing based on legitimate interests. Under the California Consumer Privacy Act you can also ask what we collected, ask us to delete it, and be free of any penalty for asking. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing for a Do Not Sell request to switch off, and we say that plainly rather than making you look for a toggle that does nothing.

Write from your account address and we answer within 30 days, usually the same week. We do not charge for it and we do not ask why. If you think we have handled your data badly, you are entitled to complain to your local data protection authority, and in the UK that is the Information Commissioner's Office.

Children

Vid2Shorts is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has created an account or sent us personal information, tell us and we will remove it.

Security

The site is served over HTTPS everywhere, passwords are hashed, channel tokens stay server side, processing happens on servers we control, and access to those servers is restricted to the people who run the service. No system is perfect, but the best protection we offer is structural: we collect so little that there is very little to lose.

Changes to this policy

If we change how the service handles data, this page changes with it and the date at the top moves. A change will never quietly grant us more of your data; anything meaningful will be visible right here.

Contact

Questions, concerns, or requests: [email protected]. A human reads it.