Privacy policy

1. Controller

Pixylmedia, owner: Batuhan Tasci
Neufeldstraße 20a, 76187 Karlsruhe, Germany
Email: info@pixylmedia.com

2. The essentials

• We do not use advertising cookies. Essential sign-in cookies are always used; anonymised reach measurement with Google Analytics runs only with your consent, which you may withdraw at any time.
• Your account is hosted by our processor Supabase. Stripe alone processes payment details; we never see card data.
• Clipfunk analyses public Twitch streams, including chat and audio, to detect moments for clips. AI services are used for transcription and scoring.
• YouTube, TikTok and Telegram connections are optional and can be disconnected at any time.

3. Hosting and infrastructure

The web app is hosted by Vercel Inc. in the United States. When pages are opened, Vercel processes technically necessary connection data, such as IP address, time, requested page and user agent, in server logs. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in secure and stable operation.

Database, authentication and file storage for clips and previews are provided by Supabase as a processor. Processing servers for the clipping system run at Hetzner Online GmbH in Germany.

Where providers process data in the United States, transfers rely on EU Standard Contractual Clauses or certification under the EU–US Data Privacy Framework.

4. Cookies and consent

Essential cookies: Supabase Auth session cookies are required for sign-in. Your consent choice is stored locally in your browser using localStorage. Legal basis: Section 25(2)(2) TDDDG and Article 6(1)(b) GDPR. Consent is not required for these cookies.

Optional analytics: Google Analytics and its cookies load only after you choose “Accept all” in the cookie banner. Choosing “Essential only” or making no choice means nothing is loaded from Google. Legal basis: Section 25(1) TDDDG and Article 6(1)(a) GDPR. Consent is voluntary and may be withdrawn at any time for the future.

Enable Google Analytics

4a. Google Analytics, with consent only

If you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It uses cookies and similar technologies to analyse website use anonymously, including pages viewed, approximate origin, device/browser and time on site. IP anonymisation is enabled so Google truncates your IP address within the EU.

The purpose is statistical reach analysis to improve the website. Legal basis: Article 6(1)(a) GDPR and Section 25(1) TDDDG. Transfers to Google LLC in the United States cannot be excluded and rely on EU Standard Contractual Clauses or Google’s EU–US Data Privacy Framework certification. Google’s privacy policy also applies.

You can withdraw consent at any time for the future as easily as you gave it:

Enable Google Analytics

5. Registration and sign-in

For your account we process your email address and a hashed password or, when you use Google sign-in, the profile data provided by Google: email, name and profile picture. This provides your account and core functionality under Article 6(1)(b) GDPR. Google sign-in is optional and Google’s privacy policy also applies.

To prevent abuse, especially multiple accounts created to obtain referral rewards, we store the IP address once at first sign-in. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in preventing fraud and abuse. It is used only for internal review and deleted with your account.

6. Twitch stream and chat data

Clipfunk’s core function is detecting notable moments in public Twitch streams. For monitored channels we process public chat messages, including Twitch usernames; derived metrics such as message frequency and emote density; public stream audio around a detected moment; and generated transcripts. Short chat excerpts may be stored as context for a moment.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is providing commissioned clip creation for streamers and clippers. Only data publicly visible on Twitch is processed and individual chat participants are not profiled. Twitch’s privacy notice also applies.

7. AI services for transcription and scoring

For captions and scoring, we send short excerpts of public stream audio to a transcription service using Whisper, operated in part through Groq Inc. in the United States, and transcript and chat excerpts to an AI language model such as Moonshot AI or Anthropic. Providers process this data on our behalf to deliver the feature. We do not instruct them to train models with your content. Legal basis: Article 6(1)(b) and (f) GDPR.

8. Payments through Stripe

Paid plans and add-on purchases are handled by Stripe Payments Europe Ltd. in Ireland. You enter payment data directly with Stripe. We do not receive or store complete payment details, only status and contract information such as plan, term and customer reference. Legal bases: Article 6(1)(b) GDPR and statutory retention duties under Article 6(1)(c) GDPR. Stripe’s privacy policy applies.

9. Google user data: YouTube connection and Google sign-in

Clipfunk uses Google APIs optionally for Google sign-in and for the YouTube connection that uploads approved clips to your own YouTube channel.

a) Data we access

• Google sign-in: name, email address and profile picture from your Google account.
• YouTube connection: an OAuth access token with the permission you grant to upload videos to your channel, scope youtube.upload, and the association with your channel. We do not retrieve other account content, including videos, playlists, comments, subscribers or analytics.

b) How we use it

Only to provide the relevant feature: profile data for sign-in and account display, and the YouTube token solely to upload clips you approve to your own channel. Google user data is not used for advertising, sold, profiled or used to train AI models.

c) Disclosure

We do not disclose, sell or expose Google user data to third parties. It is stored only on our infrastructure, through Supabase as described above, and sent directly to the YouTube API during upload.

d) Protection

OAuth tokens are encrypted in a dedicated secrets vault, never stored in the browser or logs, and transferred over TLS. Only the automated upload process can access them; there is no manual access.

e) Retention and deletion

The YouTube token is stored while the connection exists. Disconnecting it in settings or deleting your account deletes it without delay. You can also revoke access at myaccount.google.com/permissions, immediately invalidating the token. You may request deletion of all data at info@clipfunk.app.

Our use of Google data complies with the Google API Services User Data Policy, including Limited Use requirements. The YouTube Terms of Service and Google Privacy Policy also apply.

10. TikTok user data: optional TikTok connection

If you connect TikTok, we use TikTok Login Kit and the TikTok Content Posting API to publish clips you initiate to your own TikTok account.

a) Data we access

Your TikTok account identifier, open_id, display name and OAuth access tokens for the video.publish and video.upload scopes. We do not read other account data, including videos, followers, messages or analytics.

b) How we use it

Only to publish clips to your own TikTok account and only after your explicit action. No advertising, sale, profiling or AI-model training with TikTok data.

c) Disclosure

We do not disclose TikTok user data to third parties. It is stored only on our infrastructure and sent directly to the TikTok API when you publish.

d) Protection

Tokens are encrypted in a dedicated secrets vault, never stored in the browser or logs, and transferred over TLS. Only the automated publishing process can access them.

e) Retention and deletion

Tokens and account identifiers are stored while the connection exists. Disconnecting TikTok or deleting your account deletes both without delay. You may also revoke access in TikTok under Security → connected apps and request full deletion at info@clipfunk.app.

Legal basis: Article 6(1)(b) GDPR. TikTok’s privacy policy applies.

11. Optional Telegram connection

If you connect Telegram, we store your Telegram chat ID so we can send finished clips and approval requests. You can reset the connection at any time; without it, clips appear only in the dashboard. Legal basis: Article 6(1)(b) GDPR. Telegram’s privacy policy applies.

12. Transactional emails through Resend

We use Resend, Inc. in the United States as a processor for system emails, including welcome messages and acknowledgements of contact and feedback requests. Your email address, display name and relevant message content are transferred. US transfers rely on EU Standard Contractual Clauses. Legal basis: Article 6(1)(b) GDPR for contract performance or Article 6(1)(f) GDPR for answering requests. Resend’s privacy policy applies. Marketing email is sent only with consent.

13. Retention

Account data is stored while your account exists. Clips, transcripts and pipeline logs are stored while needed to provide the feature or until you delete them or close your account. Clip video files are deleted automatically 48 hours after creation, or after one week on Ultra; retention may be extended once by 24 hours per clip. Payment-related data is subject to statutory retention periods of up to ten years. Data is then deleted or anonymised.

14. Your rights

Under the GDPR you have rights of access under Article 15, rectification under Article 16, erasure under Article 17, restriction under Article 18, data portability under Article 20 and objection to processing based on legitimate interests under Article 21. You may withdraw consent at any time for the future. Contact info@pixylmedia.com.

You may also lodge a complaint with a data protection supervisory authority, including the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

15. Changes

We update this policy when features or service providers change. The version published here applies.