Privacy Policy

1. Definitions and controller identification

1.1 “JP Clips” means the operator trading as JP Clips, based in the United Kingdom; “Service” means the JP Clips website and Discord bot; “Data Protection Legislation” means applicable data protection law, including the UK General Data Protection Regulation and Data Protection Act 2018. “Personal Data”, “Processing”, “Controller” and “Data Subject” have the meanings assigned by that legislation.

1.2 JP Clips acts as Controller in respect of the Processing described in this Policy. Enquiries and Data Subject requests shall be directed to [email protected].

2. Scope and categories of Personal Data

2.1 This Policy applies to Personal Data relating to website visitors, Account holders, Discord users, relevant creators and individuals communicating with JP Clips. Personal Data is obtained from the Data Subject, their browser, Discord, Kick and relevant payment or referral events.

2.2 Personal Data may comprise identity and Account identifiers, membership and subscription status, contact details, submitted Content, rendering preferences, job and usage records, notification subscriptions, referral records, payment-event references, support correspondence and technical request information.

3. Purposes and lawful bases of Processing

3.1 JP Clips processes Personal Data where necessary for performance of a contract with the Data Subject, or to take steps at their request before entering a contract, including authentication, entitlement verification and provision of requested features.

3.2 Processing for proportionate security controls, abuse prevention, operational diagnostics, usage administration and protection of legal rights may be undertaken on the basis of legitimate interests, subject to the Data Subject’s rights and interests. Personal Data may also be processed to comply with a legal obligation or establish, exercise or defend legal claims.

3.3 Where consent is the required lawful basis, consent may be withdrawn without affecting the lawfulness of prior Processing. Failure to provide Personal Data necessary for a requested function may prevent provision of that function.

4. Authentication and client Accounts

4.1 Clipper authentication uses the Discord identify scope. Session information comprises the Discord identifier, username, available display name and avatar address, and relevant Premium, Trial or Admin entitlement results. We do not receive your Discord email address through this sign-in. OAuth access and refresh tokens are not retained in the session.

4.2 Administrator-issued client Account records comprise the Account email, scrypt password hash, hashed one-time access code, code-use status and relevant creation and login times. Plaintext passwords and access codes are not retained as Account credentials. The client session contains the Account identifier and email.

5. Rendering, Content and operational records

5.1 Rendering records may include clip identifiers, channel slugs, titles, selected layouts, backgrounds, mirror settings, watermarks and Premium status. Watermark text and image bytes are processed to provide the requested feature. Usage and history records are processed to administer allowances, delivery and Account functions.

5.2 Normal personal-render download access expires after 2 hours, or 6 hours from completion for a recovered render. Expiry of a downloadable file shall not imply deletion of all associated history, job records, backups or third-party copies. Automatically delivered source clips are subject to separate delivery and storage lifecycles.

6. Notifications, referrals and source information

6.1 Notification records may associate Discord and server identifiers with subscribed channels. Where browser push is enabled and configured, an endpoint and necessary delivery keys may be associated with the relevant Discord identifier.

6.2 Referral records may comprise inviter and member identifiers, join times, order references and qualifying purchase times. Source information may comprise Kick channel identifiers, live status, clip identifiers, titles, thumbnail addresses and playback addresses. An order reference does not contain card credentials.

7. Cookies and local device storage

7.1 The authentication cookie, connect.sid, contains a session identifier and is configured for 7 days. It is HttpOnly; production uses Secure and SameSite=None. Sign-out invalidates the corresponding server session. Public policy documents do not set this cookie. The website does not use advertising cookies or analytics cookies.

7.2 Local or session storage may be used for render-tracker state, checkout-return entitlement checks and dismissal preferences for domain, installation and notification notices. Such information may be removed through browser settings. Blocking necessary authentication storage may prevent use of authenticated functions.

8. Service workers and external requests

8.1 The application registers a service worker at /sw.js for supported installation and notification functions. Public policy documents do not register a worker; a worker installed on an earlier visit may remain applicable to subsequent visits. Optional notification subscriptions may be disabled where supported.

8.2 Playback, thumbnails and avatars may generate requests to third-party providers. The main application requests font resources from fonts.googleapis.com and fonts.gstatic.com. Such requests disclose network and ordinary browser information to the relevant recipient. Public policy documents use local or system fonts without Google Fonts requests.

9. Diagnostics and error reporting

9.1 Where a Sentry DSN is configured, website and server error information may be transmitted to Sentry in its EU region. Reports may contain a Discord identifier. The integration is configured to exclude email addresses, usernames, cookies and page query strings. No report is submitted through an unconfigured DSN.

10. Recipients and payment processing

10.1 Card and cryptocurrency payments are processed respectively by Stripe and NOWPayments through buy.jpclips.tv. This website processes entitlement and relevant purchase-event information; it does not receive the payment credentials submitted to those providers. Independent payment-provider Processing is subject to the provider’s own notice.

10.2 Personal Data may be disclosed, to the extent necessary for the stated purposes, to hosting, database, storage, delivery and diagnostic providers acting on instructions; third-party platforms for requested features; and competent authorities or professional advisers where legally required or necessary for the protection of legal rights. JP Clips does not sell Personal Data.

11. International transfers

11.1 Recipients may process Personal Data outside the United Kingdom. Where a restricted international transfer is undertaken, Data Protection Legislation requires an adequacy decision or appropriate safeguards, which may include approved contractual protections and supplementary measures. Information concerning applicable safeguards may be requested from JP Clips.

12. Retention and security

12.1 Sessions are configured for 7 days and invalidated on sign-out. Expired personal-render files are subject to cleanup following the applicable download period. History, watermark, usage, referral and client records do not have a universal automatic deletion period.

12.2 Retention shall be assessed by reference to continuing provision of Account features, operational needs, prevention of fraud, resolution of disputes and applicable legal obligations. Erasure requests shall be considered against any lawful continuing basis for retention.

12.3 Access controls, hashed credentials and session protections are used to reduce the risk of unauthorised access. No transmission or storage system can provide an absolute guarantee of security.

13. Data Subject rights and supervisory authority

13.1 Subject to Data Protection Legislation and applicable exemptions, a Data Subject may request access, rectification, erasure, restriction and, where applicable, portability; object to Processing based on legitimate interests; and withdraw consent where consent is relied upon. JP Clips does not undertake solely automated decision-making producing legal or similarly significant effects.

13.2 Requests shall be submitted to [email protected]. Proportionate verification of identity or authority may be required. A response shall normally be provided within one month, subject to any lawful extension or exception. Requests are normally free of charge, subject to statutory exceptions.

13.3 A Data Subject may lodge a complaint with the Information Commissioner’s Office (ICO), the UK regulator for personal data, at ico.org.uk. JP Clips is not registered with the ICO.

14. Children and amendments

14.1 Use of the Service remains subject to the eligibility requirements of relevant platforms. Dates of birth are not routinely collected. Concerns regarding Personal Data supplied by a child without appropriate authority shall be referred to JP Clips for assessment.

14.2 This Policy may be revised to reflect changes in Processing or applicable law. The published last updated date identifies the current version; material changes shall be communicated where required.