Privacy Policy

Service covered

This policy covers VideoTrendKit at videotrendkit.com. The production application is hosted on Vercel and uses Turso Cloud (libSQL) for account data. It provides public effect guides, a local planning workspace and invited accounts. Payment collection and real generation for all 16 effect templates are paused. Earlier development trials are separate from the production service.

Local photos and creative plans

Selecting a photo in the workspace creates a browser-local preview; signing in does not upload it. Removing the photo or leaving the workspace releases that preview, and refreshing clears the selected files. The current workspace does not send photos, audio or edited prompts to a video provider.

You can edit a plan locally, copy it or download a text file. Saving a text draft retains its direction, notes, template and framing in this browser's local storage, without photos. The draft is not uploaded and remains after sign-out until you delete it or clear browser storage. Other people using the same browser profile may see it. Downloaded files remain on your device. If you give a plan or material to another service, that service's rules apply.

Accounts, invitations and credits

We store account information such as name, email address, authentication records and, if supplied through an enabled login provider, a profile-image URL. Email/password authentication stores a password hash, not your readable password. Necessary session cookies maintain your sign-in; analytics consent does not replace these authentication cookies.

Google login is available only when configured and enabled. It requests only OpenID Connect identity, email and basic profile scopes (openid, email, profile), not Gmail, Drive or Google Photos access. For new Google registrations, the returned verified email must match an eligible email-bound invitation. Google sign-in does not bypass admission rules.

An eligible new account may receive 20 site credits once, valid for 7 days. We retain the account-linked grant, expiry and ledger records needed to administer that balance and investigate errors. Production does not offer preview daily check-ins, simulated top-ups or simulated tasks. Credits are not cash, and the service does not currently collect card details or take payment.

Invitations are time-limited, single-use and email-bound. We retain a secret-keyed, one-way normalized-email fingerprint and admission record to prevent invitation reuse and repeated starter rewards, including after account deletion. Gmail dots, plus suffixes and the googlemail alias are normalized for this purpose; other providers retain the full mailbox name. These records are pseudonymous, not anonymous, and are retained separately for as long as needed for abuse prevention. Short-lived authentication rate-limit records and network information help limit abusive requests.

Cookies and browsing statistics

When enabled, Google Analytics 4 and self-hosted Plausible report only allowlisted public pages to help us understand aggregate page views and broad traffic sources. Reported page addresses exclude query strings and URL fragments, and referrers are limited to their origin. Authentication, account, API and photo/prompt workspace pages are excluded from these browsing statistics. They are not given your photos, audio, prompts, reference notes, email address, invite codes or authentication credentials as analytics fields.

When Google Analytics is enabled, the consent banner controls analytics storage. The site uses Basic Consent Mode: it does not load Google Analytics or send Google Analytics requests before you accept, unless a previously saved acceptance applies. The default state is denied. If you accept analytics storage, Google Analytics may use analytics cookies and pseudonymous browser identifiers; aggregate reports do not make every underlying record anonymous. You can change the consent choice through the site's cookie controls when available.

Self-hosted Plausible, when enabled, uses cookieless public-page statistics separately from the Google Analytics consent control. Delivering requests and deriving aggregate reports can still involve network information, including IP addresses. Browser storage may also retain necessary preferences and a consent choice. New first-touch campaign and referrer attribution cookies are paused, independently of analytics consent. The server expires previously issued attribution cookies when they are presented; it does not start a new 30-day attribution cookie. Account-operation records are separate from aggregate browsing analytics.

Providers and retention

Vercel processes production application requests, and Turso Cloud stores the account database. Google processes the identity exchange when Google login is used, and analytics requests when Google Analytics is enabled. The configured self-hosted Plausible service processes its browsing statistics. External source links lead to services with their own privacy policies. No video-provider upload or payment is initiated by editing or exporting a local plan.

Account, session, invitation and credit records persist until managed under their operating purpose by the site operator. Earlier private development records, if any, are not evidence that the production site offers those trial features or has imported their data. Sign-out and removal of a local photo do not delete server records.

Requests and changes

There is no self-service account-deletion or complete account-export workflow yet. For access, correction, deletion or privacy questions, contact the operator who provided your invitation. Necessary anti-abuse fingerprints may remain after deletion; we do not promise immediate erasure of backups or records that must be retained to investigate abuse.

Keep credentials private. We update this page when the service's data handling changes. See the Terms of Service and current pricing information.