Privacy Policy

The minimum needed to run the service:

• Account identifier: a user ID and email address. We do not store passwords; authentication is handled by a third-party provider on our behalf.
• Usage data: job history (Twitch URL submitted, scan results, credits charged/refunded, timestamps) and purchase records (transaction IDs, pack purchased, amount, date).
• Source content (temporarily): when you submit a Twitch URL, we temporarily fetch content from it to produce the supercut. The fetched source is deleted as soon as the job finishes, typically within minutes.
• Generated supercuts: the MP4 output is held by our object-storage provider for up to 24 hours so you can download it, then automatically deleted.
• Operational logs: request paths, error traces, and IP-derived rate-limit signals. Sensitive values (filenames, secrets, transaction IDs) are hashed rather than stored verbatim.

• To run jobs you submit and deliver your supercut.
• To bill credits and process purchases.
• To send transactional emails about your account (e.g. sign-in codes, receipts), never marketing.
• To detect and mitigate abuse (rate limits, bot protection, anti-fraud on signup).

We use a small set of third-party processors strictly to operate the service. Each handles data under its own privacy terms:

• Authentication (sign-in, sessions).
• Payments: Stripe Checkout handles card payment. We never see or store your card details. Stripe privacy
• Source content: when you submit a URL, the content is fetched from Twitch's servers under Twitch's own terms.
• Database (account and job records).
• Object storage (temporary supercut MP4 hosting).
• Compute (running the burp-detection and supercut build).
• Hosting (the website and API).
• Operational alerts: error-rate spikes and chargeback notifications are sent to a private channel we monitor for incident response. Alerts contain internal identifiers (transaction IDs, error counts) and never include your email, your Twitch URLs, or your supercut content.

The named subprocessors for each category and their privacy policies are listed on our subprocessors page.

We do not sell or share your data with anyone outside this list, and we never use your content to train any AI model.

• Source content: deleted at the end of each job (within minutes).
• Supercut output: deleted automatically 24 hours after creation.
• Job records: we keep only your 50 most recent jobs. When you submit a 51st, the oldest is permanently deleted (including any remaining stored output).
• Account data: kept until you delete your account.
• Transaction records: kept for at least 7 years for tax and accounting purposes, even after account deletion. Records are dissociated from your account where legally permitted.

• Access: your dashboard shows your jobs, credits, and purchases. Email us for anything else we hold.
• Delete: the "Delete my account" button in the dashboard wipes your stored objects, your database records, and your authentication identity in a single action.
• Export: email us and we'll send your data in a machine-readable format within 30 days.

Passwords are not stored anywhere; sign-in uses passwordless email codes and OAuth. Payment card details never reach our servers (Stripe Checkout). Sensitive secrets are encrypted at rest by our infrastructure providers. We use HTTPS on every endpoint.

We use a single first-party session cookie to keep you signed in. No advertising or tracking cookies.

Privacy questions or data requests: getburps@proton.me.

We may update this policy as the service evolves. Material changes will be announced via email and reflected in the Effective date at the top of this page.