Privacy Policy

Last updated: May 15, 2026

This Privacy Policy describes how ClipMix ("we", "us", or "our") collects, uses, and shares information when you use clipmix.net (the "Service"). By using the Service, you agree to the practices described here.

This document is provided for informational purposes and is not legal advice. We recommend reviewing it with qualified counsel before relying on it.

What we collect

We collect only the information needed to operate the Service:

  • Account information: email address, password (stored hashed by our auth provider), and a display name you choose.
  • Authentication tokens: if you sign in with a third-party provider (e.g. Google, Twitch via Supabase OAuth), we receive a provider identifier and basic profile info from that provider.
  • Content you create: Twitch clip URLs you submit, the mix files we generate from them, and metadata you set (mix name, visibility, share status).
  • Usage data: IP address, browser type, pages visited, and timestamps, recorded in server logs.
  • Anonymous like data: when a logged-out visitor likes a public mix, we store a SHA-256 hash derived from their browser session — not the underlying identifier — solely to prevent duplicate likes.
  • Cookies: a session cookie set by our auth provider so you stay signed in, and a `cookie_consent` flag recording your cookie preference.
  • Analytics and advertising (if enabled): we may use Google Analytics and Google AdSense, which set their own cookies and may collect device and usage information per Google's policies.

What we do not collect

We do not collect phone numbers, postal addresses, payment information, or any other personally identifiable information beyond what is listed above. We do not sell your personal information.

How we use it

  • Provide and operate the Service (authenticating you, processing clips, storing mixes).
  • Prevent abuse (rate limiting, deduplication, spam detection).
  • Diagnose and fix problems (server logs).
  • Improve the Service (aggregate analytics).

Service providers

We share information with third parties that help us run the Service:

  • Supabase (authentication and database hosting)
  • Cloudflare (DNS, CDN, R2 object storage for mix files)
  • Twitch (we fetch public clip metadata from Twitch's API on your behalf when you submit a clip URL; we do not share your account information with Twitch)
  • Google (Analytics and AdSense, if enabled — subject to Google's policies)

These providers process information on our behalf under their own terms and security practices.

Your rights

Depending on where you live (including the EU under GDPR and California under CCPA), you may have the following rights:

  • Access: request a copy of the personal information we hold about you.
  • Deletion: request that we delete your account and associated data.
  • Correction: request correction of inaccurate information.
  • Portability: request a machine-readable copy of your data.
  • Objection / restriction: object to or restrict certain processing.
  • Withdrawal of consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Account deletion

You can request account deletion by emailing [email protected] from the address associated with your account. We will delete your account, mixes, and associated personal data within 30 days, except where we are legally required to retain certain records.

Data retention

We retain account information and mixes for as long as your account is active. Server logs are retained for up to 90 days for security and debugging. After account deletion, we may retain anonymized usage data and information necessary to comply with legal obligations.

Security

We use industry-standard practices including HTTPS, hashed passwords, scoped storage access, and database row-level security. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it. EU users must be at least 16 (or the age of digital consent in their country).

International transfers

The Service is operated from the United States. If you access it from outside the US, your information will be transferred to and processed in the US, which may have different data protection laws than your country.

Changes

We may update this Privacy Policy. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated through the Service or by email.

Contact

Questions about this policy: [email protected]

Your Clips. Zero Effort. Maximum Hype.

Turn your favorite clips into viral content in minutes. Zero editing skills required.