Privacy Policy

Datenschutzerklärung nach Art. 13 und 14 DSGVO (GDPR). Last updated: 18 September 2026.

1. Controller

Leon Koch
Varloh 1
30900 Wedemark, Deutschland
E-Mail: [email protected]

ClipBack is run by one person. A data protection officer is not required (§ 38 BDSG, Art. 37 GDPR); write to the address above for anything about your data.

2. Overview

ClipBack stores very little about you. Without an account, nothing about you is kept beyond a short-lived server log and the clips you create. With an account, we keep the account fields Google hands us at sign-in and your clips and playlists. There is no advertising, no analytics, no tracking and no profiling, and we do not make automated decisions with legal effect about you (Art. 22 GDPR). Nothing we hold is sold or shared for marketing.

Third parties that receive data are named in the section that describes the processing. Where one of them is outside the EU/EEA we say so and name the transfer basis (Art. 44 ff. GDPR).

3. Hosting, connection data and server logs

ClipBack runs on a server operated by the controller in Germany. Every request first reaches Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which acts as reverse proxy, TLS endpoint and DDoS protection and forwards the request to our server through an encrypted tunnel. Cloudflare therefore processes your IP address, the request metadata and, in transit, the content of the request (for example a form you submit). Cloudflare acts as our processor under its Data Processing Addendum. Cloudflare is certified under the EU–US Data Privacy Framework and its DPA includes the EU Standard Contractual Clauses, so any transfer to the USA rests on Art. 45 and Art. 46(2)(c) GDPR. Lawful basis: legitimate interest, Art. 6(1)(f) GDPR (secure and reliable delivery of the site).

Our web server writes an access log (IP address, time, requested page, referrer, browser identifier, response status) to detect and stop abuse and to diagnose faults. Lawful basis: Art. 6(1)(f) GDPR (security and operation). The log is rotated by size (at most 50 MB in total) and old entries are overwritten as new ones arrive, so an entry survives for days to a few weeks depending on traffic; the log is never evaluated for any other purpose.

For rate limiting (for example, how many clips one address may create in a quarter of an hour) your IP address is held in the server's memory only for the length of that window and is not written anywhere.

4. Account data (Google Sign-In)

ClipBack has no passwords. Signing in uses Google Identity Services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users in the EEA) and Google LLC, USA.

Nothing is loaded from Google before you act. The sign-in library is fetched from Google only when you click Sign in with Google. From that moment Google receives your IP address and browser data, shows its own sign-in dialog and may store a cookie or similar data in your browser for the sign-in flow. Loading the library and its storage are strictly necessary for the sign-in you have expressly asked for (§ 25 Abs. 2 Nr. 2 TDDDG); in addition, the click is your consent to that loading (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR), which you withdraw for the future simply by not using Google Sign-In. Google learns that you signed in to ClipBack and processes that under its own privacy policy.

When you sign in, Google sends our server a signed identity token. Our server checks its signature against Google's public keys (a server-to-server request that carries no data about you) and we store from it your Google account ID, your email address, your display name and the URL of your profile picture. We also record when the account was created and when you last signed in, and — once you have agreed to the YouTube player being loaded (section 6) — that you did so, when, and which version of the notice you saw. Your profile picture is shown by loading it from Google's servers while you are signed in, which sends your IP address to Google each time. We receive no other access to your Google account.

Lawful basis: performance of the contract, Art. 6(1)(b) GDPR (providing your clip library). Google LLC is certified under the EU–US Data Privacy Framework (Art. 45 GDPR). You are not obliged to create an account; without one you can still create and share clips, but not keep them in a library. Account data is kept until you delete your account in Settings.

5. Clips and playlists

When you create a clip we store the source platform, the video ID, the selected time range, the title you gave it, and the source video's title and thumbnail URL. Title and thumbnail URL are fetched once by our server from the platform's public oEmbed endpoint; that request comes from our server and does not carry your IP address. The preview image shown on the create page after you paste a link is likewise fetched by our server from Google and delivered to you from clipback.tv, so your IP address is not sent to Google until you click play (see section 6).

We never download or store video. Clips are public under their link and may be embedded on other sites. Lawful basis: Art. 6(1)(b) GDPR, the (free) usage contract under which we provide the service, for signed-in and anonymous users alike.

Clips created without signing in are deleted automatically after 30 days without a view; each view of the clip page or its embed resets that period. Clips in an account stay until you delete them or your account.

Playlists. If you are signed in you can gather your own clips into playlists. For each playlist we store the name you gave it, which of your clips it holds and in what order, when each clip was added, and when the playlist was created and last changed. Playlists are private: they have no public link, only you can open them, and they are not passed to anyone. Lawful basis: Art. 6(1)(b) GDPR, the same usage contract as for clips. A playlist stays until you delete it or your account. When a clip is deleted, for whatever reason, it is removed from every playlist it was in.

6. Playing clips: YouTube player and thumbnail

A clip plays through the embedded YouTube player of Google Ireland Limited / Google LLC, loaded from youtube-nocookie.com (YouTube's privacy-enhanced mode).

The player is not loaded until you agree. Before that no script and no frame from Google is present on the page. You agree by clicking play on the notice shown over the preview image. The player is then loaded and your IP address, browser and device data and the video ID are transmitted to Google; the player may store cookies or data in your browser (even in privacy-enhanced mode YouTube uses browser storage for player settings) and Google processes the data under its own privacy policy, including in the USA (Google LLC is certified under the EU–US Data Privacy Framework, Art. 45 GDPR). Google may link this to your Google account if you are signed in to Google in that browser.

Lawful basis: your click is the express request for the playback function, so loading the player and the storage it needs are strictly necessary for the service you asked for (§ 25 Abs. 2 Nr. 2 TDDDG, Art. 6(1)(b) GDPR). Because the supervisory authorities read that exception narrowly where a third party sets its own storage, we also treat the click, made under the notice shown on the poster, as your consent to the loading (§ 25 Abs. 1 TDDDG, Art. 6(1)(a) GDPR). Google's use of the data for its own purposes is Google's responsibility as an independent controller.

We remember your answer, so you are asked once and not on every clip. What is stored is only the fact that you agreed, the time, and the version of the notice you saw — never anything about the videos you watch. If you are signed in it is kept on your account, so it also applies when you next use ClipBack in another browser; if you are not signed in it is kept in your browser's local storage (clipback_player_consent) and reaches us at no point. On pages that have it, clips then start without a further click. An embed of a ClipBack clip on another website never uses a stored answer and always asks again, because you are on someone else's page there.

You can withdraw at any time, and it is exactly as easy as giving it (Art. 7(3) GDPR): open Cookie settings in the footer of any page and choose Ask before every clip. That deletes the record on your account and in your browser at once; from then on nothing is loaded from Google again until you agree anew. Clearing your browser data has the same effect for the local copy, and deleting your account removes the one on the account. If we ever change the wording of the notice, the stored answer stops counting and you are asked again — consent covers the text that was actually shown to you.

Thumbnail. Before you click play the clip page (and an embed on another site) shows the video's preview image. That image is fetched once by our server from Google's image servers and then served to you from clipback.tv; our server keeps a copy for up to 30 days. Your browser therefore contacts only clipback.tv until you click play, and nothing about you reaches Google before that click. Lawful basis for the server-side fetch: Art. 6(1)(f) GDPR (showing you what a clip is before you play it); it involves no data about you.

7. Embed view counting

When a ClipBack embed is played on another website we record the clip ID, the time and the registrable domain of the embedding site (extracted server-side from the referrer). No IP address, no cookie, no user identity. Lawful basis: Art. 6(1)(f) GDPR (basic, non-personal audience measurement).

8. Advertising and analytics

ClipBack shows no advertising and runs no analytics. Should that change, ads and analytics will be switched on only after you consent in the cookie settings dialog, and this policy will be updated first. IP hashes that may have been stored by an earlier version of the ad analytics are removed after 90 days.

9. Email

The only email we send is transactional: the confirmation that your account has been deleted (Art. 12(3) GDPR). There is no newsletter and no advertising by email. Lawful basis: Art. 6(1)(c) GDPR.

It is sent through Brevo (Brevo SAS, formerly Sendinblue, 7 rue de Madrid, 75008 Paris, France), which acts as our processor and processes your address and the message content in the EU.

10. Waitlist (closed)

Before launch, visitors could leave an email address on a waitlist. The list is closed and is no longer used. Addresses still on it are removed on request below, and the list will be deleted in full. Lawful basis for the remaining storage until then: Art. 6(1)(f) GDPR.

11. Error monitoring

If enabled, technical errors are reported to Sentry (Functional Software, Inc., San Francisco, USA), using its EU data region so that error reports are stored in the EU. Reports contain the stack trace, the request path and the time; the transmission of IP addresses, cookies and request contents (form fields, JSON bodies) is switched off in our configuration. Sentry acts as our processor under its Data Processing Addendum and is certified under the EU–US Data Privacy Framework for the account-level data that is held in the USA. Lawful basis: Art. 6(1)(f) GDPR (finding and fixing faults). Reports are deleted after 90 days.

12. Cookies and local storage

See the Cookie Policy. ClipBack sets one strictly necessary session cookie and no advertising or analytics cookies. Preferences such as the colour theme stay in your browser's local storage and are never sent to us.

13. Backups

The database is backed up daily on the server operated by the controller in Germany; the fourteen most recent copies are kept and older ones overwritten, so deleted data disappears from backups within about two weeks of being deleted from the live system. Backups are used only to restore the service after a failure. Lawful basis: Art. 6(1)(f) GDPR in fulfilment of Art. 32 GDPR.

14. Security

All connections are encrypted (TLS). Sessions are signed and cannot be forged. Access to the server and the database is limited to the controller. Should a breach of security nevertheless put your rights at risk, we will notify the supervisory authority within 72 hours and, where required, you (Art. 33, 34 GDPR).

15. Your rights

You have the right to access your data (Art. 15), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and, where processing rests on your consent, to withdraw that consent at any time with effect for the future (Art. 7(3) GDPR). You can delete your account and all of your clips and playlists yourself at any time from Settings. For everything else, email the controller; we answer within one month.

Right to object (Art. 21 GDPR). Where we process your data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you may object at any time for reasons arising from your particular situation. We then stop the processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You can complain to a data protection supervisory authority, in particular the one for the controller's seat: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, lfd.niedersachsen.de, or the authority of your own place of residence.

16. Changes

This policy is updated whenever the processing changes. The current version is always at clipback.tv/privacy; the date at the top tells you when it last changed.