Privacy Policy
Last updated: April 15, 2026
Clapper Cast respects your privacy. This policy explains what data we collect, how we use it, and what choices you have.
Information we collect
- Account information. Email address and a bcrypt-hashed password you create at sign-up.
- Authentication. A random, server-side session ID stored in the
cc_sidcookie. The cookie itself contains no personal data — it just maps to a row in our session table. - Recording metadata. Which Clapper username you recorded, when, the duration, and the resulting file size.
- Recording files. The actual MP4 bytes are stored on our servers under your account. Only you can download them through the web interface. We do not routinely view recording contents but may inspect a specific file in response to a takedown request, an abuse report, or a court order.
- Billing information. Your Stripe customer ID. Card numbers and other payment instruments are handled directly by Stripe and never touch our servers.
- Server logs. IP addresses and request paths in operational logs, kept for up to 30 days for debugging and abuse-prevention.
How we use your information
- To provide the Service: authenticate you, run recordings on your behalf, deliver downloads.
- To bill you (Pro subscribers).
- To enforce quotas and prevent abuse.
- To send transactional email (password resets, billing receipts). We do not send marketing email.
- To respond to legal requests, takedown notices, or law-enforcement orders we are required to comply with.
Third-party services
- Stripe (payments) — see stripe.com/privacy.
- Cloudflare (CDN, DNS) — see cloudflare.com/privacypolicy.
- The recording engine connects to Clapper's TRTC servers using a credential generated for our service account; Clapper sees only that account's identity, not yours.
Cookies
We use a single first-party session cookie (cc_sid) to keep you signed in. We do not use third-party advertising cookies, analytics cookies, or trackers.
Your rights
Subject to applicable law (including GDPR for EU residents and CCPA for California residents), you can:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data — request at support@clappercast.io.
- Export your data in a portable format.
- Object to specific processing, where applicable.
We respond to verified requests within 30 days.
Data retention
Account records are kept while your account is active. Recordings are auto-deleted on the schedule defined in the Terms (5 days for Free, 60 days for Pro). On account deletion we remove your account row, all sessions, all recording metadata, and all recording files. Stripe customer records are retained per Stripe's policy.
Security
Passwords are stored using bcrypt with per-user salt. Sessions are HTTP-only cookies tied to server-side state. All traffic is over HTTPS in production. We don't claim a perfect-security guarantee — no service can — but we follow standard best practices.
Children
The Service is not directed at users under 18. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
International transfers
Our servers are located in United States. If you access the Service from elsewhere, your data is transferred to United States for processing.
Contact
Privacy questions or requests: legal@clappercast.io