effective May 13, 2026

privacy.

We collect as little as we can to run the Service. This page explains what we keep, why, and what you can do about it.

1. What we collect

• Account data: your email and (optional) display name, a salted hash of your password, account-creation date, and whether your email is verified.
• Session data: a signed session cookie, your sign-in IP, and the user-agent string. We use this to keep you signed in and to detect suspicious activity.
• Billing data: your subscription tier, status, and renewal date. Payment method details (card numbers, addresses) are collected and stored by Polar, our merchant of record — not by us.
• Render data: the snippet text, theme/font choices, and the resulting video. We store the props you submit and a link to the rendered output until you delete them or your account is closed.
• Operational logs: request paths, status codes, and timing — used to debug errors and detect abuse. Logs are kept for up to 30 days.
• Analytics: we use Vercel Analytics (no cookies, no IP-level tracking) to count page views and approximate device class.

2. Why we collect it

• To provide and operate the Service you signed up for.
• To process payments via Polar.
• To send you transactional email (sign-up verification, password reset, billing notices).
• To enforce usage limits and prevent abuse.
• To debug bugs and improve the product.

We do not sell your data, share it with advertisers, or use it to train AI models.

3. Where it lives

• Account and render metadata: Neon (Postgres), hosted in our chosen AWS region.
• Rendered media: Remotion / AWS S3, same region.
• Payment data: Polar.
• Email delivery: Resend.
• Hosting: Vercel.

These providers may process data in the United States or the EU. They're bound by their own privacy commitments and standard contractual clauses where applicable.

4. How long we keep it

• Account data: while your account is active.
• Renders: while your account is active, unless you delete them sooner.
• Operational logs: up to 30 days.
• Billing records: as long as tax law requires (typically 7-10 years), held by Polar.

5. Your rights

• Access & export: email team@code2clip.app and we'll send your data within 30 days.
• Correct: update your name and email from the account settings page.
• Delete: close your account from settings; this removes your user record, renders, and triggers deletion of your Polar customer record. Some billing entries are kept where the law requires.
• Object / restrict: contact us if you want us to stop a specific use.

If you're in the EU/UK and we can't resolve a complaint, you can contact your local data-protection authority.

6. Cookies

We use one essential cookie (a signed session cookie set by Better Auth) to keep you logged in. We don't use tracking or advertising cookies. Vercel Analytics is cookieless by design.

7. Children

code2clip isn't directed at children under 13 and we don't knowingly collect data from them. If you think a child has signed up, write to us and we'll delete the account.

8. Changes

If we change this policy materially we'll email you and update the effective date above.

9. Contact

Privacy questions: team@code2clip.app.