ClipCard

Privacy policy

Last updated 13 October 2026

ClipCard collects as little as it can to work. This page lists what that is. Questions and requests go to [email protected].

If you use ClipCard without an account

  • Your network address is turned into a keyed one-way hash as soon as it arrives. We keep only the hash, to count your daily free renders and to block abuse. Rate-limit counters expire after a day.
  • The posts you render: we fetch the post from X or TikTok and keep its public data for up to 24 hours (an hour for TikTok), so a second request does not fetch it again. The files we make are deleted after 24 hours.
  • Bot check: Cloudflare Turnstile checks that requests come from a person. Cloudflare processes data from your browser for this under its own privacy policy.

If you have an account

  • Account details: your email address, the name you give, how you sign in (for Google and GitHub, the account ID they give us), and your role and plan.
  • Password, if you set one, stored only as an argon2id hash. We never see or store the password itself.
  • Sessions: one cookie keeps you signed in for up to 30 days. We store a hash of it, your browser's user agent and a hash of your network address, so you and we can tell sessions apart.
  • History: which posts you rendered, with each post's author handle and the start of its text, and the settings you chose. We keep this for 30 days. Your history page shows the last 24 hours.
  • Credits and payments: a ledger of credits granted and used, and for each payment the plan, amount, date and Paystack reference.

Payments

Payments are handled by Paystack. You give your card or other payment details to Paystack, not to us; we never see them. Paystack tells us whether a payment succeeded and for how much.

Emails

We email you only what you ask for: sign-in links and address confirmations, and notices about the terms of a paid plan. No newsletters, no marketing, no tracking pixels.

Cookies and storage

One sign-in cookie, set only when you sign in, and a short-lived cookie during Google or GitHub sign-in. Your light or dark theme choice is kept in your browser's local storage. There are no analytics or advertising cookies.

Who else handles data

  • Cloudflare: network, bot checks and file storage (R2).
  • Paystack: payments.
  • Resend: sending sign-in emails.
  • Google and GitHub, if you sign in with them.
  • X: we fetch public posts from it. We do not send X anything about you.

We do not sell personal data or share it for advertising.

Backups and security

The database is backed up every night; backups are kept for 14 days, so deleted data leaves them within that time. Access to the servers and the admin tools is limited to the people who run ClipCard.

Your choices

You can see your details on your account page. Write to us to get a copy of your data, correct it, or delete your account; we answer within 30 days. Records of payments may have to be kept for as long as the law requires.

Changes

If this policy changes, the date at the top changes, and account holders are told of important changes by email.