Privacy

• Your account. Google or Apple supplies an account identifier and the name, email address and profile photo available from that provider. Apple may supply a private relay email address. If you sign in with an emailed link instead, Cuts stores your email address and a one-time sign-in token that expires after 15 minutes. Cuts stores account and sign-in tokens to authenticate you. Cuts never receives your Google or Apple password.
• What you upload. Video, image, audio and PDF files, and the thumbnails, review copies, waveforms and preview images made from them, plus titles, descriptions and due dates.
• What you write. Comments and replies, drawings on frames, reviews (Approved, Changes requested, Rejected), projects, folders, member invitations and roles, and share links.
• While a video is open. Your name and photo are shown to the other members viewing the same video at the same time. Presence updates identify connected viewers.

Cuts does not use advertising trackers. When a project enables forensic watermarking, Cuts records viewing sessions as described below. These records are linked to your account.

A project owner or administrator can enable a visible watermark showing your name or email on protected video. On unprotected video, they can enable a faint session-specific pattern intended to help identify a viewing session from a copied frame. Cuts stores the pattern identifier, your user ID, the video and project IDs, the share-link ID where applicable, the session start time, your browser's user-agent information and a keyed hash of your IP address. That hash is a security identifier, not anonymous data. The operator can compare captures against these records when investigating a suspected leak. A match is evidence to assess, not proof that you shared a copy.

Watermark session records do not expire automatically and survive deletion of a video, project, link or account. Contact tauren237@gmail.com to request their review or removal. Records needed for an active security investigation or a legal obligation may be retained. Cuts does not promise that watermarking or the anti-piracy / anti-screenshot feature prevents every recording or identifies every copy.

Cuts stores notification events, their participants, read and email-delivery state, and your email preferences. Email and push notifications can contain project names, video titles and comment text. If you enable push, Cuts stores your device subscription and delivery keys. You can change email preferences in Settings or use the unsubscribe link, and revoke push permission in your browser.

Dictation asks for microphone permission. Where available, your browser provides speech recognition under its own service terms. Otherwise, Cuts sends a short recording to Cloudflare Workers AI for transcription. Cuts does not save that audio in its media storage; the returned text stays in the composer until you submit it as a comment.

• Account, project and comment data: a Cloudflare D1 database.
• New video uploads: a private Backblaze B2 bucket, delivered to viewers through Cloudflare.
• Older uploads and generated files (thumbnails, review copies): Cloudflare R2.
• Storage Node (private beta): if you pair your own computer, your new uploads and their review copies stay on that computer, and Cuts stores only references to them and their metadata.

• Project members see the project's videos, comments, drawings and reviews, and each other's names, emails and photos. What a member can change depends on their role.
• Anyone with a share link can sign in to watch that video and read its comments. Depending on the link settings, they can also comment, submit a review or download media. Signing in identifies the viewer; it does not make a forwarded link private to its original recipient. A link can expire or be turned off.
• The operator can access stored data to run, secure and fix the service, and does not sell your personal information. Data is processed by the services listed below and may be disclosed when required by law or to investigate misuse. Relevant watermark findings may be shared with the affected project owner to investigate unauthorized copies.

• A session cookie keeps you signed in; short-lived cookies protect Google and Apple sign-in. A capability cookie remembers FairPlay support.
• A time-zone cookie lets the server show due dates and times in your time zone.
• Preferences such as theme, sidebar state, recent projects, playback position and keyboard shortcuts are kept in your browser's local storage and stay on your device.

• Google and Apple, for sign-in. Apple also supplies the protected-playback technology used by compatible devices.
• Cloudflare, which hosts the app, database, media delivery, transactional email and fallback dictation processing. Like any host it handles your IP address with each request, and it keeps the app's request logs (the address requested and technical details of the request) for operations and debugging under the configured logging settings. Cuts uses Cloudflare's IP-based time zone until your browser reports its own.
• Backblaze, which stores new cloud uploads.
• Your browser or device push service, if you enable push notifications. Apple private relay handles mail sent to a Hide My Email address.

The Mac app uses the same account and service as the website. It keeps a local session and app preferences. Update checks contact Cuts' update feed and download host, which receive request information such as your IP address. Sign-in opens Apple's system browser flow and passes a short-lived sign-in token back to the app.

• Deleting a video removes it from Cuts along with its comments, drawings, reviews and share links; deleting a project does the same for everything in it.
• Cuts attempts to remove the original and supported preview files after deletion. Shared files and failed deletions can remain. Protected streaming renditions are not yet included in automatic file cleanup. Media on your own Storage Node stays there until you remove it.
• To request access, correction or deletion of your account data, email tauren237@gmail.com. We may ask you to verify your account. If you use Apple Hide My Email, include your Cuts relay address, but never send a password. The operator handles account deletion requests manually.

Questions or requests: tauren237@gmail.com.