Privacy Policy
What vidstill collects, what it keeps, who processes it, and what you can ask us to delete.
This policy explains what data vidstill handles when you use the site, why, for how long, and which service providers are involved. It is written to be read, not skimmed.
What we collect and why
The links you paste. We use them to fetch the video's metadata, captions, or streams. Each request is recorded with the video id, what you asked for (download, transcript or summary), whether it succeeded, and either your account id or a one-way hash of your IP address. The hash lets us apply the daily free allowance without storing your address; it cannot be turned back into an IP.
Transcripts and summaries. These are stored so repeat requests are instant, and they appear on a public page for that video unless the signed-in user who created the page makes it private. They contain the video's spoken words and the AI-written summary, not anything about you.
Downloaded files. Files prepared on our servers (HD merges, MP3, speech-to-text audio) are deleted automatically after about one hour. The instant 360p option never touches our servers; your browser fetches it from the platform directly.
Account data. If you sign up: your email address, name, password hash, and sign-in method (email or Google). If you subscribe: your payment provider's customer id and subscription status. We never see your card number.
Contact and takedown requests. Name, email, and the message you send.
Technical logs. Request logs from our hosting provider (Cloudflare), kept for a short period for security and debugging. We do not run advertising trackers.
Who processes it
We use these providers, each only for the purpose stated:
| Provider | Purpose |
|---|---|
| Cloudflare | hosting, database, file storage, speech-to-text (Workers AI) |
| DigitalOcean | the server that prepares HD, MP3 and audio files |
| Massive | proxy network used to fetch videos from the platforms |
| DeRouter | the AI model that writes summaries (receives the transcript text only) |
| Stripe or Creem | payments, if you subscribe |
| Resend or Cloudflare Email | transactional email (verification, password reset, replies) |
Transcript text sent to the summary model contains no information about you.
How long we keep it
- Prepared files: about one hour.
- Request records: 12 months, then deleted or aggregated.
- Transcripts and summaries: until the page is removed by its owner, by a takedown request, or by us.
- Account data: until you delete your account, which you can do from Settings.
- Contact and takedown messages: two years, for the record of how the request was handled.
Your choices
- Use the site without an account. Guest use is tied only to a hashed IP for the daily allowance.
- Make a page private, or delete your account, from your dashboard and settings.
- Ask us to delete a public page you have rights to, through the DMCA page.
- Email us to ask what we hold about your account, or to have it deleted; we answer within 30 days.
Cookies
We use a session cookie when you sign in, a preference cookie for language and theme, and nothing for advertising. See the cookie policy for the list.
Children
vidstill is not directed at children under 13 (or the age of digital consent where you live), and we do not knowingly collect their data.
Changes
We will update this page when our practices change and note the date at the top.
Contact
Use the contact page, or the DMCA page for removal requests.