Privacy Policy

Last updated: 18 October 2026

1. Who we are

VODSpark is run by Elias Alsos, a private individual based in Norway, who is the data controller for VODSpark. If you have a question about your data, email [email protected]. This policy covers the hosted VODSpark website. Please also read our Terms of Service.

2. What we collect

Account details

• Your email address and the display name you choose.
• Your password, stored only as a scrypt hash. We never store the password itself.
• Your plan, your settings, and monthly usage counts (processing minutes and AI reviews used).

Your videos and clips

• Links you paste, and details about those videos such as title, streamer name and length.
• Source videos you upload or that we download from a link you give us.
• What we make from them: extracted audio, transcripts, thumbnails and still frames, candidate clips, your edits and exported clips.
• On the Pro plan, the logo and brand name you upload for your watermark.

Billing

• If you subscribe, Stripe gives us identifiers for your Stripe customer record and subscription, and your subscription status. Your card details are entered on Stripe's checkout page and handled by Stripe, not by VODSpark.
• If tax is calculated at checkout, Stripe also asks for your billing address. Stripe keeps it with your payment details. You can update your email and address in the Stripe billing portal.

Technical data

• A session cookie that keeps you signed in (see Cookies).
• Your IP address and the email you try to sign in with are used to rate-limit failed sign-in attempts. These counters are kept in the server's memory only.
• VODSpark doesn't keep its own log of the pages you visit. Cloudflare, which carries the traffic, may keep short-lived standard request logs (such as IP address, time and page requested) for security.

3. How we use it

• To run VODSpark for you: download or receive your videos, transcribe them, find moments, render clips and keep your files available to you.
• To manage your account, enforce plan limits and watermark rules, and process payments.
• To keep the service secure and working.

Transcription runs on our own servers; your audio is not sent to a third-party transcription service. We don't sell your data and we don't use it for advertising. The site doesn't currently include advertising or analytics trackers.

Legal basis (GDPR): we use your data to provide the service you signed up for (contract); to keep the service secure and prevent abuse, such as rate-limiting sign-in attempts (legitimate interests); and to keep payment records for as long as Norwegian bookkeeping law requires (legal obligation).

4. Who else handles your data

When you paste a link, our servers fetch that video from the site it's on (for example Kick, Twitch or YouTube). That site sees a request from our server, not from you. We may also disclose data if the law requires it.

5. Optional AI clip review

VODSpark can ask Anthropic's Claude to review each candidate clip like an editor would. This only happens when the service has AI review turned on and your plan includes AI reviews (the Free plan doesn't). For each clip reviewed, we send:

• the timestamped transcript of the clip, plus about 15 seconds of transcript before and after it;
• a few still frames from the video (images only; no video file and no audio);
• the streamer's name, the platform, and the clip's start time, end time and length.

Anthropic returns a verdict, scores and a suggested title, which we store with the clip. Under Anthropic's commercial terms, data sent through their API isn't used to train their models, and Anthropic deletes it within 30 days unless a longer period is needed to enforce their usage policies or by law (see privacy.anthropic.com).

6. Emails

We only email you to confirm your address and to reset your password when you ask. These emails are sent through Resend. We don't send marketing email.

7. Cookies

VODSpark sets one cookie: a session cookie that keeps you signed in. It is HttpOnly (page scripts can't read it), SameSite=Lax, and sent only over HTTPS on the live site. Signing out or changing your password ends sessions. We don't use advertising or tracking cookies.

8. How long we keep it

Source videos and working files (such as extracted audio) are deleted automatically once a project is older than your plan's retention period. The check runs every few hours. Current retention periods:

Transcripts, thumbnails, your edits and exported clips are kept until you delete them or your account. Account details are kept until you delete your account.

When you delete something, it's removed from our live systems straight away. If a copy exists in a backup, it's deleted automatically within 30 days.

9. Deleting your account

You can delete your account at any time under Settings → Delete account. This:

• cancels your Stripe subscription;
• stops any work still running for you;
• deletes your projects, source videos, transcripts, clips, exports, stored files and account records.

Stripe keeps its own records of past payments as it is required to.

10. Security

• Passwords are hashed with scrypt. Verification and reset links are single-use, stored only as hashes, and expire (reset links after 1 hour, verification links after 2 days).
• Changing or resetting your password signs out your other sessions.
• Files are kept per account in private storage, and download links expire after an hour.

No system is perfectly secure. If we learn of a breach affecting your data, we will report it to the Norwegian Data Protection Authority (Datatilsynet) within 72 hours where the law requires, and tell you without undue delay if it puts you at high risk.

11. Your choices and rights

• You can delete individual projects, or your whole account, yourself in the app.
• To ask for a copy of your data, or to correct it, email [email protected]. We'll reply within one month.
• Under the GDPR you can also ask us to delete or restrict your data, object to how we use it, or get it in a portable format. If you think we've handled your data wrongly, you can complain to Datatilsynet (datatilsynet.no) or the authority where you live.
• VODSpark is not meant for anyone under 13.

12. Changes and contact

If we change this policy in a way that matters, we will tell you before it takes effect by email and with a notice in the app.

Elias Alsos, Norway · [email protected]. Governing law: Norway.