Privacy Policy

1. The short version

Your videos never reach us. Importing, syncing, generating and saving all happen inside your browser, on your own machine. We have no upload endpoint for footage and no copy of your files. The only personal data we hold is what an account needs: your e-mail, a display name, and your credit balance.

One thing more, and only if you ask for it: when you are signed in and save a project, we keep that project in your account so you can open it on any computer. A project is the settings of your looks and any text you typed on them. It never holds a frame of your video, a second of your audio, or a picture from your disk.

2. Who is responsible

The data controller is:

3. What we process, why, and on what basis

4. What stays on your own device

Project settings, projects you save while signed out, your theme, language and currency choice and your session token are kept in your browser's localStorage. Videos being generated are written to the browser's private storage (OPFS) and cleared on the next launch. You can wipe all of it by clearing site data for reactioncut.com.

5. Cookies and counting

We use no tracking cookies, no advertising pixels and no third-party analytics. The storage described above is strictly necessary to make the tool work, which is why you are not greeted by a consent banner.

To know whether the site works, we count a few anonymous events: a page was opened, the editor was opened, a video was generated or saved, an account was made, credits were bought. What reaches our server is the name of the event, the page it happened on and, for a page visit, the name of the site that linked here (for example google.com) plus a campaign tag if the link carried one. No cookie, no identifier, nothing about your files, and nothing is written to your device to do it. Your IP address is used only in the moment it takes to turn away floods and is never stored.

We keep these as daily totals (“the editor was opened 40 times on Monday”), so no row belongs to a person, and we delete them after about 400 days. If your browser sends Do Not Track or Global Privacy Control, nothing is counted at all.

6. Who else touches your data

Payments go through Paddle.com Market Ltd. We never see your card number. We receive only your e-mail and what you bought, which is what licensing the credits requires.

7. Your rights, and how to use them right now

Two of these do not need us at all. On your account page you can download a copy of everything we hold about you, as one file, and delete your account outright. The same page lets you change your password and sign out of every other device.

You can also ask us to correct your data, restrict or object to its use, or hand it to another provider. Write to [email protected] and we will answer within 30 days. If you think we have handled your data badly you can complain to your national data-protection authority.

What deleting the account actually does

Your account row, the projects saved to it and your record of spent credits are removed. Credits you have not spent go with them and cannot be restored, so use them first if you want them.

One thing is kept, and you should know why: records of payments stay, because invoicing and tax law require a seller to keep them. They no longer carry your address, though. On deletion the e-mail on each payment record is replaced by the same kind of one-way fingerprint described above, so the record still adds up for an auditor while no longer pointing at a person, including for us.

8. Children

Accounts are for people aged 16 and over. If you believe a younger person has created one, tell us and we will remove it.

9. Changes

If this policy changes materially we will update the date at the top and describe the change here.

10. Contact

[email protected]