ClipStack
Legal

Privacy Policy

Last updated:

TL;DR — the short version
  • We collect only what's needed to run the service.
  • We do not sell your data. Ever.
  • We do not use your saved articles for advertising.
  • You can export or delete all your data at any time.
  • The Chrome extension only reads a page when you click Save.

ClipStack (“we”, “us”, “our”) operates the ClipStack Chrome extension and web app at clipstack.one. This policy explains what data we collect, why, and how you can control it.

1. Data We Collect

  • Account information: When you sign in with Google we receive your name, email address, and profile picture from Google. We store these to identify your account.
  • Saved articles: When you click Save on a page, the extension sends us the URL, page title, and extracted article text. We store this on our servers so you can access it from any device.
  • Tags, highlights & notes: Any tags, text highlights, or notes you create are stored and associated with your account.
  • Usage data: We collect basic server logs (IP address, request timestamps, HTTP status codes) for security and debugging. These are retained for 30 days and then deleted.
  • Payment information: If you subscribe to Pro, payment is processed by Stripe. We never see or store your full card number. We store your Stripe customer ID and subscription status.

2. What We Do NOT Collect

We do not track your browsing history. The Chrome extension requests the activeTab permission, which means it can only read a page's content when you explicitly click the ClipStack Save button — not passively in the background. We do not read other tabs, other windows, or any data you haven't chosen to save.

3. How We Use Your Data

  • To provide the service: Storing and displaying your saved articles, search index, tags, and highlights.
  • To improve the service: Aggregated, anonymised usage patterns (e.g. how many articles are saved per day) help us prioritise features.
  • To send you emails: Account-related emails only (e.g. password reset, billing receipts). No marketing unless you opt in.
  • AI summaries (Pro): Article text is sent to OpenAI's API to generate a summary. OpenAI's data retention policy applies. We do not use your articles to train AI models.

4. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with sub-processors needed to operate the service: Google (authentication), Stripe (payments), Vercel (hosting), and OpenAI (AI summaries, Pro only). Each is bound by their own privacy commitments. We may disclose data if required by law.

5. Data Retention

We keep your data for as long as your account is active. If you delete your account, all your saved articles, highlights, tags, and personal information are permanently deleted within 30 days. Anonymised aggregate statistics may be retained indefinitely.

6. Your Rights

You have the right to access, correct, export, or delete your data at any time. Go to Settings → Data to export a full JSON or CSV of your library, or to delete your account entirely. If you need help or want to exercise a right not covered by the settings page (e.g. GDPR data portability requests), email hello@clipstack.one.

7. Cookies & Storage

We use a single session cookie (authjs.session-token) to keep you logged in. We do not use third-party tracking cookies or advertising cookies. The Chrome extension uses chrome.storage.local to remember your session — this data stays on your device.

8. Security

All data is transmitted over HTTPS. Passwords are not stored — authentication is handled entirely by Google OAuth. We apply industry-standard security practices including access controls, encrypted storage, and regular dependency audits. Despite our efforts, no system is 100% secure; please notify us immediately at hello@clipstack.one if you discover a security issue.

9. Children's Privacy

ClipStack is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy. If changes are material we will notify you by email or in-app banner at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

11. Contact

Data controller: ClipStack (solo founder project). For any privacy questions or requests: hello@clipstack.one. We aim to respond within 48 hours.