Privacy Policy

Your recordings and screenshots never leave your device. Genvap renders everything in your browser. We don't upload your media to any server and we have no file storage — a saved project is the edit (positions, timings, text, colours) plus the names and dimensions of the files it expects, which is why re-opening a project asks you to re-attach your own files.

The one exception is image export, explained below, where the finished image is sent to us in-memory to apply or omit the watermark and handed straight back — never stored.

Ezra Quinn Toney, trading as Splint, is the controller of the personal data described here — based in California, United States. For anything in this policy, including requests about your data, email splintsite@gmail.com.

Account data. If you sign up, we hold your email address and, if you use Google sign-in, the basic profile Google returns (name, email, profile picture). Sign-in is handled by Firebase Authentication; if you use a password, we never see it.

Saved projects. When you save a project we store the edit itself and metadata about the files it uses — filename, duration and dimensions. Not the files.

Billing data. Payments run through Stripe. We store your Stripe customer ID and your subscription status and renewal date so we know what you're entitled to. We never receive or store your card number.

Feedback. If you send feedback through the in-app form, we store your message, the name you give (or “Anonymous”), which page you sent it from, your account ID if you're signed in, and your IP address. The IP is there to rate-limit abuse of the form.

Usage analytics. We use Google Analytics via Firebase to count page views and see which parts of the app get used. This sets cookies or similar identifiers in your browser and tells Google your approximate location, device and browser.

On your own device. Your media sits in your browser's IndexedDB storage, and your theme and app preferences in local storage. That data is yours, on your machine — we can't read it. Clearing your browser data removes it.

• To provide the service — account data, saved projects and billing data. Without these we can't sign you in, keep your work or know what you've paid for. (Performance of our contract with you.)
• To keep it working and safe — feedback and the IP-based rate limit, so the form can't be used to spam us. (Our legitimate interest in a service that isn't abused.)
• To understand usage — analytics, so we know what to improve. Where the law requires consent for analytics cookies, we rely on your consent and you can withdraw it at any time.
• To meet legal obligations — keeping records of transactions for tax and accounting.

• We don't sell or share your personal information for money or for cross-context behavioural advertising.
• We don't use your content to train machine-learning models.
• We don't use your content in our own marketing.
• We don't send marketing email. The only email you'll get from us is about your account, your payments, or a reply to something you sent us.

We use a small number of providers to run Genvap. They act on our instructions and may store data outside your country, including in the United States, under the safeguards their own terms provide.

• Google (Firebase)

  Account sign-in, database hosting, serverless functions, analytics

  Their privacy terms

• Stripe

  Payment processing and subscription billing

  Their privacy terms

When you export an image, your browser renders it and sends the finished image to our export function. That function checks whether the export is paid for, then either returns the clean image or stamps a watermark on it and returns that. The image is held in memory for the length of that request and is not written to any database or storage bucket. Video exports are produced entirely in your browser — the video never reaches us at all.

Sign-in uses cookies and browser storage that are strictly necessary — without them you can't stay signed in. These are always on, because the site can't work without them.

Analytics cookies are off by default and only ever set if you accept them in the banner we show on your first visit. Declining is a single click and nothing about Genvap works any differently afterwards. You can change your mind whenever you like using the Cookies link in the footer of any page, and clearing your browser data resets the choice too.

• Account data and saved projects: until you delete the project or ask us to delete your account.
• Billing records: as long as tax and accounting law requires, typically several years, held by Stripe and by us.
• Feedback: until we've acted on it and no longer need it.
• Rate-limit records: automatically purged about two days after they're created.
• Analytics: per Google's retention settings for our property.

Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it — email splintsite@gmail.com and we'll respond within 30 days. We won't treat you differently for asking.

If you're in the UK, EU or EEA you additionally have the right to object to or restrict processing, the right to data portability, the right to withdraw consent, and the right to complain to your local data protection authority.

If you're in California you have the rights to know, delete and correct, and the right to opt out of sale or sharing — which is moot here, because we do neither.

Deleting your account removes your account record and saved projects. It doesn't remove media from your own device — clear your browser's storage for that — and doesn't remove transaction records we're required to keep.

Genvap isn't intended for anyone under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, email us and we'll delete it.

Accounts and data are held on Google's infrastructure with access rules that let only your own account read your own projects. Payment card data never touches our systems. No system is perfectly secure, so we also keep the amount we hold deliberately small — most of what you make in Genvap never leaves your machine.

If this policy changes we'll update the date at the top, and we'll give notice in the app for anything significant. See also our Terms of Service.