Privacy Policy
Effective and last updated: July 17, 2026
We process personal data to provide Save Replay's browser-based video trimming, hosting, sharing, account, security, support, and subscription features. This Policy explains what we collect, why we use it, who receives it, and the choices available to you.
1. Who controls your data
Save Replay controls the personal data used to operate the Service. Privacy questions and rights requests can be sent to alessandro.craciun2@gmail.com or through our Contact page.
This Policy applies to visitors, viewers, anonymous uploaders, account holders, and paid subscribers. An uploader may independently be responsible for personal data contained in a video they choose to record and share. Uploaders must have a lawful basis and any permissions needed for that content.
2. Personal data we collect
| Category | Examples |
|---|---|
| Account and identity | Email address, name or display name, profile image, password hash, email-verification status, account role, sign-in provider identifiers, authentication tokens, and session information. |
| User Content and library data | The selected video segment you upload, thumbnail, title, description, source filename, folders, sharing and download settings, passwords stored only as hashes, and public or unlisted share links. |
| Media and processing data | File type and size, duration, dimensions, frame rate, codecs, trim points, preparation version, upload and storage records, processing status, error details, and generated playback assets. |
| Technical and usage data | IP address used transiently and in hashed rate-limit keys, first-party browser identifiers, hashed viewer identifiers, clip views, page and interaction events, privacy-masked session-replay data, JavaScript and server errors, stack traces, timestamps, request headers, device/browser information, security events, and diagnostic logs. |
| Subscription and transaction data | Stripe customer, product, price, subscription, and event identifiers; plan and billing status; renewal, cancellation, trial, and billing-period dates. We do not receive or store full payment-card numbers. |
| Communications | Support requests, abuse and rights reports, privacy requests, feedback, and any information or attachments you include. |
We do not intentionally request sensitive personal data. Videos can nevertheless reveal sensitive information. Do not upload sensitive content unless it is lawful, necessary, and protected with appropriate sharing settings.
3. How we collect data
- From you: when you select and upload a clip, create or update an account, choose settings, purchase a plan, or contact us.
- Automatically: through essential cookies, consent-controlled analytics cookies, cookieless product analytics, privacy-masked session analytics, application requests, error monitoring, security controls, processing jobs, and server logs.
- From providers: Google may provide account information when you choose Google sign-in; Stripe provides subscription and transaction status; infrastructure, email, and storage providers provide delivery, security, or diagnostic records.
- From other people: viewers, rights holders, authorities, or reporters may send information about a clip, account, or alleged violation.
The original video remains on your device during local preview and browser preparation. In the current upload flow, Save Replay receives the prepared selected segment, not the full original merely because you selected the file. A future change to that behavior would require an updated notice.
4. Why we use data and our legal bases
| Purpose | Data | Legal basis where applicable |
|---|---|---|
| Provide uploads, processing, storage, playback, sharing, accounts, and subscriptions | Account, User Content, media, technical, and subscription data | Perform our contract with you or take steps you request before entering it |
| Authenticate users, preserve anonymous ownership, apply privacy settings, and secure clips | Account, cookie, access, and technical data | Contract and legitimate interests in security and access control |
| Count views, enforce limits, troubleshoot, and improve reliability | Hashed identifiers, usage, media, and diagnostic data | Legitimate interests in operating and improving the Service; consent where law requires it |
| Bill subscriptions and keep financial records | Account, subscription, and transaction data | Contract and legal obligations concerning tax, accounting, and payments |
| Send verification, password-reset, security, billing, and service messages | Account and communication data | Contract, legal obligations, and legitimate interests in account administration |
| Prevent fraud and abuse, enforce our Terms, moderate content, and respond to reports | All relevant categories | Legitimate interests in trust, safety, and legal claims; legal obligations; vital interests in an emergency |
| Respond to rights requests, court orders, and lawful authority requests | Identity, account, content, technical, and communication data | Legal obligations and legitimate interests in establishing or defending legal claims |
Where we rely on legitimate interests, we consider the necessity of the use and balance it against your rights. Where consent is the required basis, you may withdraw it prospectively.
5. Clip visibility and other people
- Public clips may be viewed by anyone and may be discoverable or indexed.
- Unlisted clips can be viewed and re-shared by anyone with the link.
- Password-protected clips can be viewed by anyone who obtains both the link and password.
- Private clips are restricted to the verified owner, subject to administrative access needed to operate, secure, and enforce the Service.
Viewers may record or redistribute what they can see. Before uploading a video about another person, consider their privacy and obtain permission where required.
6. Who receives personal data
We disclose only what is reasonably necessary to:
- Infrastructure and database providers that host the application, database, logs, and processing workloads;
- Backblaze for prepared video, thumbnail, and playback-asset storage and delivery;
- Stripe for checkout, payment processing, subscription management, fraud prevention, and billing portals;
- Resend for transactional account email;
- Google when you choose Google sign-in;
- Umami Cloud for cookieless product events and aggregate upload-to-share funnel measurement;
- Microsoft Clarity for consent-controlled, strictly masked behavioral analytics, heatmaps, and session reconstruction;
- Sentry for frontend and backend error monitoring and readable production stack traces, with default personal-information collection disabled;
- professional advisers, auditors, insurers, potential transaction counterparties, and affiliates under appropriate confidentiality duties; and
- courts, regulators, law enforcement, emergency services, rights holders, or affected parties when disclosure is required by law or reasonably necessary to protect rights, safety, and the Service.
We do not sell personal information for money, and we do not use or disclose it for cross-context behavioral advertising. Providers may process data under their own privacy notices when acting independently, such as during Stripe checkout or Google sign-in.
7. International transfers
Providers may process data outside your country. Where data-protection law requires transfer safeguards, we use an adequacy decision, approved contractual clauses, a recognized certification framework, or another lawful mechanism, and apply supplementary measures where appropriate. Contact us for more information about safeguards relevant to your data.
9. Retention
We keep personal data only as long as reasonably necessary for the purposes above. Retention depends on the data and context:
- Account and active subscription records are generally kept while the account or subscription remains active.
- Clips and playback assets are kept until the owner deletes them, they expire under the applicable plan, or removal is needed under our Terms. Drafts, failed uploads, and staging objects may be deleted sooner.
- Deleted material is removed from active systems, but limited copies may remain temporarily in backups, provider systems, security records, or legal holds.
- Rate-limit, security, view, billing, tax, dispute, and support records are kept for the period needed to prevent abuse, maintain accurate records, comply with law, and establish or defend claims.
We consider volume, sensitivity, risk, purpose, technical constraints, and legal requirements when setting retention periods. We may aggregate or irreversibly de-identify information and retain the resulting non-personal data.
10. Security
We use measures designed to protect data, including encryption in transit, password hashing, signed upload and download requests, scoped storage credentials, hashed ownership and viewer identifiers, access controls, rate limits, and administrative restrictions. Access is limited to people and providers with a need to know. No internet service can guarantee absolute security, so keep your own copies and use appropriate privacy settings and strong, unique passwords.
11. Your choices and rights
In the product, you can update profile information, change clip visibility, delete clips you own, manage a subscription, delete browser cookies, and stop using the Service. Depending on your location and applicable exceptions, you may also ask us to:
- confirm whether we process your personal data and provide access to it;
- correct inaccurate or incomplete information;
- delete information;
- restrict or object to certain processing;
- provide certain data in a portable format;
- withdraw consent where processing relies on consent; and
- review a decision or complain to your local data-protection authority.
Send requests to alessandro.craciun2@gmail.com. Describe the request and the account, browser owner, or clip involved. We may verify identity and authority before acting. We will not discriminate against you for exercising a privacy right. Some information may be retained or withheld where permitted or required by law, including for security, other people's rights, billing records, and legal claims.
12. United States state privacy disclosures
If a state privacy law applies to us and to your information, you may have rights to know, access, correct, delete, or obtain a copy of personal information and to appeal a denied request. You may use an authorized agent where law permits, subject to verification. We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. We do not knowingly use sensitive personal information to infer characteristics about you.
The categories collected, purposes, sources, recipients, and retention criteria are described above. Submit a request or appeal using the contact details below and identify your state of residence.
13. Children
The Service is not directed to children under 16, or under the higher age required by local law, and we do not knowingly collect their personal data. If you believe a child has provided data or appears in unlawful or exploitative content, contact us immediately with enough information to locate it. We will investigate and delete or restrict data where required.
14. Automated decisions
We may use automated rules for rate limiting, upload validation, plan enforcement, security, and abuse detection. We do not currently make solely automated decisions that produce legal or similarly significant effects about individuals. If that changes, we will provide any notice and review rights required by law.
15. Third-party sites and changes
Links and integrations may lead to third-party services we do not control. Review their privacy notices before providing data. We may update this Policy when the Service, providers, or law changes. We will post the revised version and update the date above, and provide additional notice for material changes when required.
16. Contact
For privacy questions, requests, or complaints, email alessandro.craciun2@gmail.com or use our Contact page. For product help, visit Support.