Privacy Policy
ClipVault is committed to transparency. Here is exactly how we handle your data, keep your information secure, and protect your privacy.
Encryption & Security
We encrypt passwords using secure hashing algorithms and protect session tokens using secure, HTTP-only JWT cookies.
30-Day Auto-Cleanup
System logs and download history data are automatically purged from our servers after 30 days to minimize data footprint.
1. Information We Collect
We collect information directly from you when you register an account or interact with our extraction tools:
- Account Registration: When you create an account, we collect your name, email address, and a secure hash of your password. This information is required for authentication and account management.
- Authentication Data: We use JSON Web Token (JWT) cookies stored in your browser to maintain your session. These cookies are marked HTTP-only and secure.
- Download History: Registered users have their download logs (Instagram Reel URL, video title, thumbnail path, video source link, and status) saved in our database to populate the "History" tab.
- Anonymous Usage Data: For visitors who do not log in, we track the count of free downloads (up to 3 total) using a hybrid approach combining the client's IP address and a signed, secure
visitor_idcookie.
2. Cookies & Visitor Tracking
We employ cookie tracking for essential application functionality only. We do not use third-party advertiser cookies, tracking pixels, or invasive behavioral profiling tools.
- Session Cookies: Used to securely maintain your logged-in state.
- Visitor Limit Cookies: A signed, secure cookie containing an anonymous visitor identifier is used solely to enforce the 3-download free trial limit for unauthenticated guests.
- Analytics: We do not run external tracking scripts. We analyze server-side application logs in aggregate to monitor error rates, performance, and server load.
3. IP Address Handling & Rate Limiting
To defend our infrastructure against automated scrapers, denial-of-service attempts, and abuse, we implement a multi-layered security checking system:
- Global IP Rate Limiting: All extraction and API endpoints are rate-limited to 100 requests per 15 minutes per IP address.
- Burst Rate Limiting: Authenticated users are subject to limit checks to manage backend workload concurrency.
- IP Logging: We record the IP address of each download request to enforce free trial constraints (anonymous limit of 3 downloads) and for security auditing.
4. User Rights & Data Retention
You retain full ownership and control of your information. Your rights include:
- Clear Download History: Authenticated users can clear their download history records at any time using the "Delete" or "Clear History" button on the History panel. This permanently deletes the logs from our active database.
- Account Deletion: You have the right to request full account deletion. Upon verification, your profile and history will be permanently deleted from our servers.
- Automated Data Expiry: To protect your privacy, all extraction logs and download history logs older than 30 days are automatically and permanently deleted from our database.
5. Security Practices
ClipVault runs on a security-hardened environment. We use media proxying to fetch video thumbnails and download streams, which acts as a shield between you and third-party content distribution networks. All communication is encrypted over HTTPS.
6. Contact Information
For any questions, privacy inquiries, or data deletion requests, please contact us at: