Privacy Policy — Clipe

1) Who We Are

Clipe ("we", "us", "our") operates a user‑content sharing platform. We are the data controller for processing personal data under applicable EU and French data‑protection law (GDPR & French Data Protection Act).

2) Personal Data We Process

• Account data: email, username, password hash, age confirmation.
• Profile info: bio, avatar, followers/following.
• Content data: photos, videos, audio, captions, comments, messages.
• Technical data: IP address, device info, OS, app version, log data, crash logs.
• Usage data: interactions, time in app, features used, likes, follows.
• Moderation data: reports, decisions, safety logs.
• Optional (with consent): contacts import, camera/mic access, geolocation, push tokens.

We do not collect sensitive medical, political, biometric or religious data.

3) Legal Bases (GDPR Art. 6)

• Contract: providing the service & features.
• Legitimate interest: security, anti‑abuse, analytics, improvement.
• Legal obligation: report unlawful content (LCEN, DSA) & maintain logs for security.
• Consent: push notifications, geolocation, contacts import.

4) Why We Use Data

• Account creation & login
• Content hosting & sharing functionality
• Recommendations & social features
• Moderation, anti‑fraud & platform security
• Compliance with legal obligations

5) Sharing of Data

• Service providers (hosting, CDN, analytics, moderation) under contract
• Legal authorities when required
• Other users based on your privacy settings & content visibility

We never sell your personal data.

6) Retention

• Account data: until deletion & then securely erased/anonymized
• Logs & moderation: short term unless required for legal or safety reasons
• Posts: remain visible to others if they re‑shared them

7) International Transfers

If data is transferred outside the EU/EEA, it is protected through Standard Contractual Clauses (SCCs) and equivalent safeguards.

8) Cookies & Tracking

We use essential cookies, plus a single first‑party cookie for audience measurement on our website (clipe.app). We do not use advertising or marketing cookies, and we do not track you across other websites.

Audience measurement is provided by PostHog, hosted in the European Union. It records which pages are viewed, and whether visitors tap “Download” or “Open in the app”, so we can understand which content and pages are useful. The cookie stores only a random identifier and lasts up to 12 months.

On our home page only, we also record anonymised session replays — a reconstruction of how the page was scrolled and clicked — to understand where the page is confusing. Any text you type is masked and never recorded.

We do not record session replays on shared content pages (a shared profile, item or collection). Those pages display content belonging to other people, and we do not store recordings of them. We have also deliberately limited what else is collected: no automatic capture of the content you click, and no individual visitor profiles are created — the data produces aggregate statistics about site usage.

You can opt out at any time by enabling “Do Not Track” in your browser — we honour it, and no measurement data is collected when it is set. Analytics requests are served from our own domain (clipe.app) rather than a third‑party one, so tracker‑blocking extensions may not detect them; “Do Not Track” is the reliable way to opt out.

9) Security

We implement encryption, secure storage, access controls and monitoring. No system is infallible; report incidents via contact@clipe.app.

10) Children's Data

Users must be at least 15 in France (or applicable age by law). Accounts below age without parental consent will be removed.

11) Your GDPR Rights

• Access & portability
• Correction & deletion
• Restriction & objection
• Withdraw consent anytime
• Lodge a complaint with the CNIL

Request via contact@clipe.app.

12) Changes

We may update this policy. Material changes will be communicated in‑app or by email. Continued use = acceptance.