Privacy Policy

Last updated: 24 October 2026

This policy explains what personal data ClipMill ("we", "us") collects, why, how long we keep it, who we share it with, and what rights you have. It applies to the website and web app at clipmill.app. You must accept this policy and our Terms of Service before you use ClipMill.

1. Who is responsible for your data

The controller under the EU General Data Protection Regulation (GDPR) is:

• Frelo, obrt za usluge, vl. Berislav Paradžik, OIB 19176639445
• [ADDRESS not set]
• Email: [EMAIL not set]

ClipMill is run by an individual. We have not appointed a data protection officer because the law does not require one for a service of this size. Send any privacy question or complaint to the email address above.

2. What ClipMill does

ClipMill is a web app for chess content creators. You upload a recording of your stream. We transcribe it, use AI to pick highlights, fix captions and write titles, descriptions and tags, render vertical Shorts, and generate a thumbnail. If you connect your YouTube channel, you can publish the Shorts or the full stream to your own channel, now or at a time you choose.

3. What data we collect

3.1 Account data

• Your email address and login information, so you can sign in.
• Your subscription status and plan. Payments are handled by our merchant of record (see section 7). We do not receive or store your card details.

3.2 Content you upload and content we make for you

• The stream recordings you upload, and the audio we extract from them.
• Transcripts of those recordings.
• Photos and reference thumbnails you upload.
• The outputs we generate: Shorts, thumbnails, captions, titles, descriptions and tags.

Your recordings may contain your voice, your face, your name and anything else said or shown on stream, including about other people. You are responsible for having the right to upload it (see our Terms of Service).

3.3 Google user data (YouTube)

If you choose to connect a YouTube channel, you sign in with Google and grant ClipMill two permissions (OAuth scopes):

• Manage your YouTube videos (youtube.upload): used only to upload the videos you choose to publish (YouTube API method videos.insert) and to set the custom thumbnail you choose (thumbnails.set).
• View your YouTube account (youtube.readonly): used only to read the ID and name of your channel (channels.list), so the app can show you which channel your videos will go to, and to check that the videos uploaded through ClipMill still exist and what their status is.

From Google we receive and store:

• an OAuth refresh token, which lets ClipMill act for you only within the permissions above;
• your YouTube channel ID and channel name;
• the YouTube video IDs, and the privacy and publishing status, of videos uploaded through ClipMill.

We do not request access to your Google account's email address, contacts, Gmail, Drive or any other Google service. We do not read your other videos, comments, subscribers or analytics, and we do not download any audiovisual content from YouTube.

3.4 Technical data

• Server logs: IP address, date and time, requested page, browser type, and error messages. We use them to keep the service running and secure.
• Cookies: we only use cookies that are strictly necessary, namely a sign-in session cookie and a short-lived cookie that protects the Google sign-in step against forgery. We do not use analytics, advertising or tracking cookies, and we do not let third parties place cookies or collect information from your device through ClipMill.

4. Why we use your data, and our legal basis

• To provide the service you signed up for (making Shorts, thumbnails and texts, and publishing to YouTube when you ask): performance of our contract with you, GDPR Article 6(1)(b).
• To manage your subscription: performance of contract, Article 6(1)(b).
• To keep the service secure, prevent abuse and fix errors, using server logs: our legitimate interest in running a safe and working service, Article 6(1)(f).
• To keep records the law requires and to answer lawful requests from authorities: legal obligation, Article 6(1)(c).
• To answer your messages: performance of contract or our legitimate interest in replying, Article 6(1)(b) or (f).

We do not show ads, we do not sell your data, and we do not use your data for profiling or for automated decisions that have legal or similarly significant effects on you.

5. How we use Google user data (Limited Use)

ClipMill's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In practice this means:

• We use Google user data only to provide the features you see in the app: uploading the videos you choose, setting the thumbnails you choose, and showing which channel is connected and what happened to your uploads.
• We do not transfer Google user data to anyone, except to Google itself when we make the API calls you asked for, to our hosting provider that stores it on our behalf, when the law requires it, or as part of a merger or sale of the service with your prior explicit consent.
• We do not send Google user data to our AI providers (Anthropic, Kie.ai). They receive only the content you upload and text we derive from it, as described in section 7.
• We do not use Google user data for advertising, we do not sell it, and we do not use it to determine credit-worthiness or for lending.
• We do not use Google user data to develop, improve or train any artificial intelligence or machine learning model.
• No person reads your Google user data unless you ask us to (for example in a support request), it is necessary for security purposes such as investigating abuse, or the law requires it.

Your use of YouTube is governed by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

6. How long we keep your data

• Uploaded stream recordings and extracted audio: deleted automatically 30 days after processing finishes.
• Outputs (Shorts, thumbnails, transcripts, captions, titles, descriptions, tags) and the photos you uploaded: kept until you delete the video in the app ("Delete this video") or close your account.
• YouTube refresh token: kept while your channel is connected. It is revoked at Google and deleted from our servers when you click Disconnect, when you close your account, or when we find that you revoked access in your Google account.
• Channel ID, channel name, and YouTube video IDs and status: we refresh this data from YouTube at least every 30 days, or delete it. We delete it within 7 days after you disconnect your channel or ask us to delete it, and within 30 days after you revoke access through your Google account settings.
• Account data: kept while your account is open, and deleted within 30 days after you close it, except records we must keep by law (for example accounting records, which in Croatia must be kept for up to 11 years).
• Server logs: deleted after 30 days, unless we need a specific log entry longer to investigate a security incident.

Deleting data in ClipMill does not delete videos you already published to YouTube. Manage or delete those in YouTube Studio.

7. Who we share data with (sub-processors and other recipients)

We only share data that a provider needs to do its job for us.

• Hetzner Online GmbH (Germany): hosts our servers in data centres in Germany. All data described in this policy is stored there.
• Anthropic PBC (United States): provides the Claude AI model. It receives the transcript text, video frames from your recording, and draft texts, only to pick highlights, fix captions, write titles, descriptions and tags, and check the quality of the Shorts. Under Anthropic's Commercial Terms, Anthropic may not train its models on this content, and its retention policy states that API inputs and outputs are deleted within 30 days, with limited exceptions such as abuse enforcement or legal requirements.
• Groq, Inc. (United States): turns speech into text (Whisper model). It receives the audio track of your recording, only to transcribe it. See Groq's Privacy Policy. If Groq is unavailable, transcription runs on our own server instead.
• Kie.ai (NexusAI Services LLC, United States): generates thumbnail images. It receives a text prompt, your reference thumbnails, and any photos you upload for the thumbnail. Kie.ai's terms allow it to use submitted content to operate and improve its services. If you do not want a photo processed by Kie.ai, do not upload it.
• Google LLC / YouTube (United States): when you publish, we send the video, its title, description, tags, privacy and schedule settings, and thumbnail to YouTube on your instruction. From then on, Google handles that content as an independent controller under the Google Privacy Policy.
• Creem (creem.io), our merchant of record for subscriptions (planned): sells the subscription to you, processes your payment, and handles invoices, taxes and refunds. Creem acts as an independent controller for payment data under its own privacy policy. We receive your subscription status and the details needed to link the payment to your account.

We may also disclose data if the law requires it, or to protect our rights, our users or the public from fraud or abuse.

8. Transfers outside the EU

Your data is stored in Germany. Anthropic, Kie.ai and Google are based in the United States, so the data they receive (described in section 7) is transferred outside the European Economic Area. We rely on the European Commission's Standard Contractual Clauses, or on the EU-U.S. Data Privacy Framework where the recipient is certified under it. You can ask us for a copy of the safeguards that apply.

9. How we protect your data

• All traffic to ClipMill uses HTTPS.
• OAuth tokens are encrypted at rest, and only the ClipMill service can read them.
• Your files are stored on servers with restricted access, and each account can only see its own videos.
• We revoke tokens we no longer need.

10. Disconnecting YouTube and revoking access

• In ClipMill, open YouTube settings and click Disconnect. We revoke the token at Google straight away and delete it from our servers.
• You can also revoke ClipMill's access at any time on the Google security settings page: https://security.google.com/settings/security/permissions.

11. Deleting your data

• Use Delete this video in the app to remove a video and all its files from our servers.
• To delete your account and all its data, or to ask us to delete any stored YouTube data, email [EMAIL not set]. We delete it as soon as possible and within 7 days, except records the law requires us to keep.

12. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• receive data you gave us in a machine-readable format (data portability);
• object to processing based on our legitimate interests;
• withdraw any consent you gave, at any time, without affecting earlier processing.

To use any of these rights, email [EMAIL not set]. We will answer within one month. We may ask you to confirm your identity.

13. Supervisory authority

You have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live or work. Our lead authority is the Croatian Personal Data Protection Agency:

• Agencija za zaštitu osobnih podataka (AZOP)
• Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia
• Email: azop@azop.hr, phone: +385 1 4609 000
• Website: https://azop.hr

14. Children

ClipMill is not directed at children. You must be at least 18 years old, or the age of majority where you live, to use it.

15. Changes to this policy

If we change this policy, we will update the date at the top. If a change affects how we use your data, in particular Google user data, we will tell you by email or in the app before the change takes effect.

16. Contact

Questions or complaints about privacy, including about how we handle YouTube data: [EMAIL not set], or by post to Frelo, obrt za usluge, vl. Berislav Paradžik, OIB 19176639445, [ADDRESS not set].