Privacy

Last updated September 24, 2026

Clipiao lets you record part of your screen and share it with a link. This page explains what we store, why, and how we protect it.

What we store

• Your account: your name, email address and profile picture from Discord or Google, or the name and email you typed. If you use a password, we store only a secure hash of it (Argon2id).
• Your clips: the videos you choose to share, their preview images, when they were made, how long they are and how many times they were viewed. We don't read or analyse what's in them.
• Sign-in sessions: random tokens that keep you signed in, stored only as hashes. With each one we keep the device's name and type (like "DESKTOP-7Q2, Windows" or "Chrome on Windows") and the country it signed in from, as reported by Cloudflare, so you can see and sign out your devices. We don't keep IP addresses. These details are deleted when that sign-in ends.
• App details: the Clipiao version you use, and error reports the app sends when something fails (version, operating system version and the error, without your user name on that computer).

What we don't store

• We don't keep your IP address with your account or your clips, and we don't read location or other metadata from your recordings.
• We don't keep the access tokens Discord or Google give us; we use them once to learn your name and email.
• The Clipiao app doesn't keep copies of your recordings on your PC and doesn't record anything until you select an area.
• We don't sell your data or show ads.

Who can see your clips

Anyone with a clip's link can watch it. Links are long and random, aren't listed anywhere, and our database doesn't contain them: it stores only a scrambled form that can't be turned back into a link without a separate key. So even a copy of our database wouldn't reveal your links.

How long we keep things

• Free clips are deleted after 30 days. Premium clips stay until you delete them. Deleting a clip or your account removes the files and clears them from our delivery network's cache.
• Browser sign-ins end after 60 days without use, the app's after 180 days. You can sign out everywhere from your account page.
• Error reports are deleted after 30 days. Server logs, which include IP addresses, are deleted after 14 days.
• Encrypted backups of our database are kept for 30 days.

Services we use

Cloudflare stores and delivers clips and protects the site, Resend sends account emails, and Discord or Google handle sign-in if you choose them.

If something goes wrong

If we ever find that someone got into our systems, we'll tell affected users by email as soon as we know what happened, and say what was involved.

Contact

You can delete your account and every clip from your account page at any time. To report a clip, use the link under it. To report a security problem, see security.txt.