Privacy Policy
Last updated October 5, 2026
The short version
- Your videos, audio, images and projects stay on your computer. We never upload or see them.
- If you create an account, we keep your email address and whether you have ClipCookie Pro. That is it.
- Paddle handles payments. We never see your card details.
- No ads, no tracking, no analytics in the app, and we never sell your data.
- Optional cloud transcription and AI assistants send data straight from your computer to the service you choose, never through us.
1. Who is responsible for your data
Dave Ying (sole proprietor, Singapore) is the data controller for the personal data described here. Contact for privacy questions: support@clipcookie.com, or by post at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051.
2. What stays on your computer
ClipCookie is a desktop app. Your media files, projects, transcripts, edits, exports, settings and any API keys you enter are stored on your own computer. We do not collect them, and we cannot see them.
3. Local and cloud AI: what leaves your computer, and when
Most of ClipCookie works completely offline. Data leaves your computer only when you choose one of these:
| What you choose | What is sent | Where it goes |
|---|---|---|
| Local transcription | Nothing. It runs on your computer after a one-time model download. | Nowhere |
| Cloud transcription (Google Gemini, ElevenLabs or OpenRouter) | The audio of the parts being transcribed | Directly to that provider, using your own API key |
| An AI assistant connected to ClipCookie (for example Claude Code, Codex or Claude Desktop) | Whatever the assistant asks ClipCookie for, which can include transcripts, file and folder names, project details and still frames from your video | To the assistant's AI provider (for example Anthropic or OpenAI), through your own assistant and account |
| Editing and exporting | Nothing | Nowhere |
This data never passes through ClipCookie. We do not receive a copy and cannot see it. The provider you choose handles it under its own terms and privacy policy, not ours. Depending on the provider and your plan or settings, a provider may keep it for a time to prevent abuse or meet legal duties, have people review it for safety or quality, use it to improve or train its AI models, and charge your account for the usage. For example, Google says it may use content sent through the free tier of its Gemini API to improve its products, including human review, but not content sent through its paid tier.
Please check the provider's own policy before you use it: Google Gemini API, ElevenLabs, OpenRouter, Anthropic, OpenAI. An AI assistant can see what it reads, including frames of your video, so only connect one to footage you are comfortable sharing with that provider.
The same applies if you copy a transcript or a Proofread or Clean Up prompt from ClipCookie and paste it into an AI tool yourself: that tool's own policy covers what you paste.
Want nothing to leave your computer? Use local transcription and do not connect an AI assistant. Everything else in ClipCookie still works.
4. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Account: your email address, an account ID, and sign-in records (time, IP address) | To create your account, send sign-in codes, keep you signed in, and protect accounts from misuse | Performing our contract with you; our legitimate interest in security |
| Subscription: your Paddle customer and subscription IDs, plan, status and billing dates | To know whether ClipCookie Pro is active on your account | Performing our contract with you |
| Support emails: what you send us | To answer you | Our legitimate interest in helping you; performing our contract |
| Website and download logs: IP address, browser type, pages or files requested | To deliver the website, downloads and updates, and keep them secure | Our legitimate interest in running a secure service |
Payments: Paddle.com is our Merchant of Record. Paddle collects your name, billing address, payment details and tax information at checkout and processes them as an independent controller under the Paddle Privacy Policy. We never receive your card details. Paddle shares with us what we need to manage your subscription, such as your email address, country and order details.
Update checks and downloads: the app contacts our download server or GitHub to check for updates, and the local transcription model is downloaded once from Hugging Face. These requests reveal your IP address to the server, as any download does. They do not include your files or projects.
We do not use advertising, tracking pixels or analytics in the app, and this website does not set tracking cookies. We do not sell or rent personal data.
5. Who we share data with
We share personal data only with the services that run ClipCookie, and only what they need:
- Paddle.com: payments, tax and subscription billing (Merchant of Record).
- Supabase: account sign-in and our subscription database (servers in Singapore).
- Resend: delivering sign-in code emails.
- Cloudflare: hosting this website, downloads and updates, and handling email to our support address.
- GitHub: update checks and release downloads.
- Professional advisers (such as accountants or lawyers) where needed, under confidentiality.
- Authorities, when the law requires it, or to protect rights, safety or property.
If ClipCookie were ever sold or transferred, personal data would pass to the new owner under this policy, and we would tell you first.
6. International transfers
Our service providers may process data in countries other than yours, including Singapore, the United States, the United Kingdom and the European Union. Where the law requires it, we rely on safeguards such as the providers' standard contractual clauses or adequacy decisions.
7. How long we keep data
- Account data: until you delete your account. Ask us at support@clipcookie.com and we will delete it.
- Subscription records: for as long as your account exists, then up to 7 years where needed for tax, accounting or legal reasons. Paddle keeps its own transaction records.
- Sign-in and server logs: usually no more than 90 days, unless needed to investigate misuse.
- Support emails: up to 3 years after the conversation ends, then deleted.
8. Your rights
Depending on where you live, you can ask us to:
- give you a copy of your personal data;
- correct it if it is wrong;
- delete it;
- restrict or object to how we use it;
- send it to you or another service in a portable format;
- withdraw any consent you have given.
Email support@clipcookie.com from the address on your account. We will reply within one month. You can also complain to your local data protection authority; in Singapore, that is the Personal Data Protection Commission.
9. Security
We use encrypted connections (HTTPS) and limit access to personal data to what is needed. In the app, your sign-in is kept in your operating system's secure credential store (Windows Credential Manager, macOS Keychain or Linux Secret Service). No system is perfectly secure, but we take reasonable steps to protect your data and will tell you if a breach affects you, as the law requires.
10. Cookies
This website does not use tracking or advertising cookies. When you check out, Paddle may set cookies needed to process your payment and prevent fraud; see Paddle's policy for details.
11. Children
ClipCookie accounts are not meant for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We will update this page when our practices change and change the date at the top. If a change is important, we will tell you in the app or by email before it takes effect.
13. Contact
Dave Ying · 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051 · support@clipcookie.com