Privacy Policy
Last updated: 27 August 2026
src/lib/legal.ts is still a placeholder. Selling to consumers requires a named seller with an address and a tax number.1. The short version
Your videos never reach us. Importing, syncing, generating and saving all happen inside your browser, on your own machine. We have no upload endpoint for footage and no copy of your files. The only personal data we hold is what an account needs: your e-mail, a display name, and your credit balance.
2. Who is responsible
The data controller is:
TODO: registered name (sole trader or company)TODO: street, postal code, city, country
TODO: tax / company registration number
[email protected]
3. What we process, why, and on what basis
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| E-mail, display name, password hash | To run your account and let you sign in | Performance of a contract | Until you delete the account |
| Credit balance and purchase history | To sell credits and keep an accurate balance | Contract; legal accounting duties | Up to 10 years where tax law requires it |
| Session token | To keep you signed in | Contract | Until it expires or you sign out |
| A record of credits added and spent | So a balance can be checked, and a cancelled generation refunded exactly once | Contract; legal accounting duties | Until you delete the account; purchase records longer, see below |
| A one-way fingerprint of your IP address | To count requests and free exports, so the service cannot be flooded | Legitimate interest in a working service | Minutes to two days. The address itself is never stored |
| Your video and audio files | None: we never receive them | Not applicable | Never sent to us |
4. What stays on your own device
Project settings, your theme, language and currency choice and your session token are kept in your browser's localStorage. Videos being generated are written to the browser's private storage (OPFS) and cleared on the next launch. You can wipe all of it by clearing site data for reactioncut.com.
5. Cookies and analytics
We use no tracking cookies, no advertising pixels and no third-party analytics. The storage described above is strictly necessary to make the tool work, which is why you are not greeted by a consent banner.
6. Who else touches your data
| Processor | Role | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database and network protection | EU / global edge |
| Paddle.com Market Ltd | Payments, invoicing and sales tax (Merchant of Record) | UK / EU |
| NOWPayments | Cryptocurrency payments (only if you choose to pay in crypto) | EU |
| Google LLC | Sign-in with Google (only if you choose it) | US / EU |
| Meta Platforms, Inc. | Sign-in with Facebook (only if you choose it) | US / EU |
Payments go through Paddle.com Market Ltd. We never see your card number. We receive only your e-mail and what you bought, which is what licensing the credits requires.
7. Your rights, and how to use them right now
Two of these do not need us at all. On your account page you can download a copy of everything we hold about you, as one file, and delete your account outright. The same page lets you change your password and sign out of every other device.
You can also ask us to correct your data, restrict or object to its use, or hand it to another provider. Write to [email protected] and we will answer within 30 days. If you think we have handled your data badly you can complain to your national data-protection authority.
What deleting the account actually does
Your account row and your record of spent credits are removed. Credits you have not spent go with them and cannot be restored, so use them first if you want them.
One thing is kept, and you should know why: records of payments stay, because invoicing and tax law require a seller to keep them. They no longer carry your address, though. On deletion the e-mail on each payment record is replaced by the same kind of one-way fingerprint described above, so the record still adds up for an auditor while no longer pointing at a person, including for us.
8. Children
Accounts are for people aged 16 and over. If you believe a younger person has created one, tell us and we will remove it.
9. Changes
If this policy changes materially we will update the date at the top and describe the change here.
10. Contact
Something here unclear, or does it not match what you saw? Ask us, or write straight to [email protected].