Privacy Policy

VidPickr is a tool primarily used by creators to download their own uploaded content. We collect the bare minimum we need to run accounts, charge for paid plans, and respond to support requests. We do not log which videos you download or what you do with them.

VidPickr (“we”, “us”) operates vidpickr.com. If something here is unclear, write to hello@vidpickr.com and a real person will reply.

The data we keep falls into four small buckets:

• Account. Your email address. If you sign in with Google, we also store the Google account ID we got from OAuth so we can recognize you on return visits.
• Payment. We do not see or store your card details — that lives entirely with Stripe. We keep the Stripe customer ID, the active subscription tier, and renewal dates so we know what you paid for.
• Cookies. A session cookie keeps you signed in. A separate cookie marks “trusted devices” for accounts with two-factor login. Both are HttpOnly and limited to our domain.
• Server logs. Standard HTTP access logs — method, path, status, response time. Retained for 14 days for abuse and bug triage, then deleted.

• The list of videos you download. We do not maintain a history of URLs you submit, and we do not associate that history with your account.
• The video bytes themselves. The download stream goes directly to your machine; no copy lives on our infrastructure after the request finishes.
• Watch history, subtitle text you saved, clipped ranges, or anything that would let us reconstruct what you did.

We rely on a small set of vendors. They each see only the slice of data they need to do their job:

• Stripe — payment processing, subscription management, billing portal. They handle card data; we never touch it.
• Resend — transactional email (password resets, account notifications). They see your email address and the content of those emails.
• Google OAuth — if you choose to sign in with Google. They see that you authorized vidpickr to read your name and email.
• Our hosting provider operates the servers that run our application. Standard infrastructure access; no application data outside the buckets listed above.

Account records persist until you delete your account. Payment records (Stripe customer ID, subscription history) are kept as long as required by tax and accounting regulations — typically seven years. Server logs are rotated after 14 days. Email content sent through Resend is kept for 30 days for delivery troubleshooting and then purged.

You can request a copy of your data, correct it, or delete your account at any time. Email hello@vidpickr.com from the address tied to the account. We respond within seven days, usually faster. EU and UK residents have specific rights under GDPR/UK GDPR — same email, same response window.

VidPickr is not intended for use by children under 13 (or 16 in jurisdictions that require it). We do not knowingly collect data from minors. If you believe a child created an account, email us and we will delete it.

If we materially change this policy — new vendors, new data categories, anything you would care about — we will email account holders before the change takes effect. Minor wording fixes get a quiet update with a new “Last updated” date at the top.