What reaches us
- A device identifier: a code we derive with a one-way hash (SHA-256) from an identifier the operating system provides, so it can't be traced back to the original. We use it to count trial days and tie a subscription to your device.
- Technical data with each subscription check: the system (Windows or Android), the app version, the time of first and last contact, and how many checks were made.
- Your subscription: the activation code, its period, and the devices it's active on.
- Orders: the plan, amount, currency, payment status and time, and the payment gateway's reference.
- IP address: it passes through our hosting providers as with any connection. We use the country it implies only to show prices in that country's currency, and we don't store it in our databases; hosting providers' logs may keep it briefly for operations and security.
What never reaches us
- The sites you visit, your browsing history, cookies, and the films you watch or save — all of it stays on your device.
- Card or wallet details: you enter them on the payment gateway's own page, and they never pass through us.
- Watch-party content: messages and room activity are end-to-end encrypted (AES-256-GCM) with a key derived from the room code. The relay server passes on data it can't read, and doesn't store it.
- Audio: background-music reduction runs entirely on your device.
Payments
Payments are processed by XPay, the electronic payment gateway, under its own privacy policy. We receive only the payment status and its reference.
Site-support updates
The app contacts our servers to check for and download site-support updates. These updates are digitally signed, and nothing about what you watch is sent with the request.
Sharing on your local network
If you turn on sharing of kept films (off by default), your devices on the same network can see the kept films' names, lengths and qualities, to play them from there. None of this leaves your network.
Where data is kept, and for how long
On Supabase servers in the European Union (Paris). We keep device and subscription data for as long as you use the app, and payment records for as long as the law requires. You can ask us to delete your device's data and subscription; we keep only what's needed to prevent abuse of the free trial.
This website
It uses no cookies and no analytics or tracking tools, and its fonts are hosted on the site itself. Cloudflare, which hosts the site, processes the technical connection data needed to serve and protect the pages.
Children
VidShot isn't directed at children under 13, and we don't knowingly collect data about them.
Your rights
You can ask what we keep about your device, and ask for it to be corrected or deleted. Write to us with the device ID shown on the subscription screen in the app.
Changes
If we change this policy, we'll publish the new version here with its date.