Cuttboard
Privacy Policy
Effective 1 November 2026
- Your videos are yours. Projects and files are private to your account. We don't look at them, and we don't use them to train AI.
- No ads, no tracking. No advertising or analytics cookies, no third-party trackers, and we never sell or share your data for advertising. We count visits on our own server, without cookies (section 2).
- Only what the editor needs: your Google name and email, your projects and files, and what it takes to bill Pro.
- Delete it all, any time: Delete account in the account menu erases your account, projects and cloud files.
1. Who we are
Cuttboard (cuttboard.com) is a browser video editor run by Solomon Mithra, a sole proprietor in California, USA, trading as Cuttboard (“Cuttboard”, “we”, “us”). We decide how your personal data is used, so under the EU and UK GDPR we are its controller.
Questions or requests: support@cuttboard.com.
This policy covers cuttboard.com and the Cuttboard app. Our Terms of Service cover how you may use them.
2. What we collect and why
Your account
You sign in with Google. Google tells us your name, your email address (and that Google has verified it) and your Google account ID. We store those three things to create your account, sign you in and contact you about it. Google also sends a link to your profile photo; we don't keep it. We never see your Google password, and we don't ask for access to your Gmail, Drive, contacts or anything else in your Google account.
You need a Google name and email address to have an account. Everything else below is up to you: it depends on what you do in Cuttboard.
Your projects and files
- Projects: each project's name, its layers and edits (including any text you type), a small thumbnail, and when it was created and changed. They are stored in our database so they open on any computer.
- Media files: files you import are kept in your browser's storage on your device, so editing never waits for the network. While your plan's cloud storage has room, a copy is also uploaded to our file storage with its name, type and size, so the project works on your other devices.
- Exports are made in your browser and saved straight to your device. We don't receive them.
- Voiceovers use your microphone only while you record, and only after your browser asks you. The recording becomes a media file like any other.
Your projects and files are private: only your signed-in account can open them. Cuttboard has no feature for sharing them with other people. We don't look at them, except when you ask us to help with a problem, when we must investigate a report that breaks our Terms, or when the law requires it.
AI features, when you use them
- Auto captions: your browser sends the clip's sound (as plain 16 kHz mono audio, in pieces of up to about two minutes) to our server, which passes it to Cloudflare Workers AI to be transcribed by OpenAI's Whisper model. The text comes back and becomes caption layers in your project.
- AI voices: the text you type and the voice you pick go to Cloudflare Workers AI, where Deepgram's Aura-2 model turns them into speech. The audio comes back as a new media file, with a tag in its metadata saying it's AI-generated.
- We don't store the sound or text sent for these requests, only the results you keep in your project. We do count the seconds captioned and characters spoken each month, for your plan's allowance.
- Cloudflare doesn't keep what we send once it has answered, and doesn't use it to train AI models.
- Remove background and noise reduction run entirely on your device. Nothing is sent anywhere.
Payments
Upgrading takes you to a checkout page run by Stripe. Pro is sold through Stripe's merchant-of-record service: the seller at checkout is Link, Stripe's payment service, and the purchase shows as “Sold through Link”. Stripe and Link collect your payment details, name and billing address, work out and pay the tax, send your receipts, and answer payment questions.
We create a Stripe customer record with your email address and your Cuttboard account ID. Your name, billing address and card brand and last four digits are visible to us in our Stripe account, but Cuttboard itself stores only your Stripe customer and subscription IDs and whether Pro is active. We never see your full card number. When you upgrade, we also record on your subscription in Stripe that you agreed to Pro's renewal terms, and when, as California law requires.
Technical data
Cuttboard runs on Cloudflare. To deliver and protect the site, Cloudflare processes your IP address, browser and device type, the addresses requested, times, and errors. Our server keeps its request and error logs for up to 7 days. Your browser may also send Cloudflare reports of network errors so the site stays reachable. We use this data to run, secure and fix Cuttboard, not to build a profile of you.
To count visits, our server records for each page view: the page, the site that linked to it, your country, your device and browser type, and a visitor code. The visitor code is made by scrambling your IP address and browser together with the date and a secret key, so it counts visitors per day but can't be turned back into your IP address or used to follow you from one day to the next. Your IP address itself is not kept. These counts stay in Cloudflare's analytics storage, only we can see them, and they are deleted after 3 months.
Messages
If you email us, we keep the conversation so we can help you.
3. Cookies and browser storage
We use only what the app needs to work and to remember your editor layout. There are no analytics or advertising cookies, so there is no cookie banner.
| Name | What it does | How long |
|---|---|---|
cb_session (cookie) | Keeps you signed in. | 30 days, or until you log out |
cb_oauth (cookie) | Protects a Google sign-in while it's in progress. | 10 minutes |
Cloudflare security cookies, such as __cf_bm | Set by Cloudflare only if it needs to tell people from bots or stop an attack. | About 30 minutes |
cuttboard-* (local storage) | Remembers your editor layout: sidebar, panel sizes, rulers, scopes and export loudness. | Until you clear this site's data |
smallScreenOk, reloadedForDeploy (session storage) | Remembers that you dismissed the small-screen notice, and reloads once after we update the app. | Until you close the tab |
| Imported media (browser file storage) | Keeps your files on your device so editing is instant. | Until you clear this site's data |
Stripe's checkout page is on Stripe's own site and sets its own cookies there, under Stripe's privacy policy.
4. How we use your data
- To run Cuttboard for you: sign-in, saving projects, storing files, AI features you use, plan limits and billing.
- To keep it secure: blocking abuse, investigating reports, enforcing our Terms.
- To fix and improve it, using error logs.
- To talk to you about your account, such as changes to our terms or your subscription. We don't send marketing email.
- To meet legal duties, such as tax records, consent records and lawful requests.
We don't sell your personal data. We don't “share” it for cross-context behavioral advertising (as California law defines it), we don't use it for targeted ads, and we don't use your content to train AI models. We make no decisions about you by automated means that have legal or similarly significant effects.
Legal bases (EEA, UK and Switzerland)
- Contract: your account, projects, files, AI features you ask for, and Pro billing.
- Legitimate interests: security, abuse prevention, logs to fix problems, counting visits, and defending legal claims. You can object to these; see section 8.
- Legal obligation: tax and accounting records, consent records, and lawful requests from authorities.
5. Who processes your data
We use a few providers to run Cuttboard. They may use your data only to provide their service.
| Provider | What for |
|---|---|
| Cloudflare, Inc. (USA) | Hosting, database, file storage, AI captions and voices, logs, visit counts and security. |
| Google LLC (USA) | Sign in with Google. Google's own privacy policy covers your Google account. |
| Stripe, Inc. and its affiliates, including Link (USA) | Payments, tax, receipts, fraud prevention and subscriptions. Link is the seller of Pro at checkout. Stripe and Link handle payment data under Stripe's privacy policy. |
We may also disclose data when the law requires it (after checking the request is valid, and telling you unless we're not allowed to), to protect anyone's safety or rights, or to a buyer of Cuttboard, who must keep this policy's promises or tell you first.
6. Where your data is processed
We are in the United States, and our providers process data in the US and other countries where they operate. For data from the EEA, UK and Switzerland, they protect it with recognized safeguards such as the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses.
7. How long we keep it
- Account, projects, cloud files and usage counts: until you delete them or your account.
- Deleting your account removes your account, projects, cloud files and usage counts at once. Our database provider's point-in-time recovery can hold a copy for up to 30 days, after which it's gone.
- Sign-in sessions: until you log out or they expire after 30 days.
- Files in your browser: on your device until you clear this site's data.
- Server logs: up to 7 days.
- Visit counts: 3 months.
- Payment and consent records: kept in Stripe for as long as tax, financial and consumer laws require, even after you delete your account. To have Stripe delete your payment data, contact Link support or email us and we'll pass the request on.
- Emails with us: until your question is resolved, and up to two years after.
8. Your rights
Wherever you live, you can ask us to:
- give you a copy of your personal data, in a portable format;
- correct it;
- delete it (or use Delete account in the account menu, which is instant);
- stop or limit some uses of it (in the EEA, UK and Switzerland, you can object to uses based on legitimate interests).
Email support@cuttboard.com from your account's email address so we know it's you. We answer within 30 days. We won't treat you differently for using these rights.
If you're in the EEA, UK or Switzerland, you can also complain to your data protection authority.
California residents: we don't sell or share personal information, and we don't use sensitive personal information to infer things about you. We don't disclose personal information to others for their direct marketing.
9. Do Not Track and Global Privacy Control
We don't track you across other websites, and we don't let anyone else collect data about your activity across sites through Cuttboard. So Cuttboard works the same whether or not your browser sends Do Not Track. We treat a Global Privacy Control signal as a request not to sell or share your data, which we already never do.
10. Children
Cuttboard is not for children under 13, or under the minimum age where you live if that is higher. We don't knowingly collect data from them. If you think a child under that age has an account, email us and we'll delete it.
11. Security
All traffic uses HTTPS. Sign-in goes through Google with checks against forged requests, we store only a hash of each session token, and your files are served only to your signed-in account. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.
12. Data from Google
Cuttboard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google name, email address and account ID only to sign you in and run your account. We don't sell them, use them for ads, or use them to train AI models, and no person reads them except to keep Cuttboard secure, to comply with the law, or with your permission.
13. Changes to this policy
When we change this policy, we'll update the date at the top. If a change matters, we'll tell you by email or in the app before it takes effect.
14. Contact
Solomon Mithra, trading as Cuttboard, California, USA
support@cuttboard.com