Privacy Policy

1. Summary

• There are no accounts, no sign-ups, and no passwords.
• We do not ask for your social-media credentials, cookies, or tokens, and we cannot accept them.
• No analytics or behavioural-tracking scripts of our own are loaded.
• Advertising is served by third-party networks and may set their own cookies or identifiers — see section 7.
• The link you paste is processed to produce your download, then discarded with the temporary file.
• Downloaded files are deleted automatically after a short retention period.

2. Who is responsible

This service is run by a private individual, not a company, so no company name or postal address is published here. The operator is the data controller and answers privacy questions at copyright@vgrab.cc.

3. What we collect

3.1 Information you submit

• The video URL you paste, and the format you select.

3.2 Information generated by using the service

• A randomly generated job identifier and access token, held in server memory while the job exists.
• Technical request data: IP address, user agent, requested path, timestamp, and a per-request correlation identifier. This is needed to serve requests, apply rate limits, and diagnose faults.
• The output file produced by the engine, stored temporarily on the server.

3.3 What we do not collect

• No name, email address, phone number, or postal address (unless you email us voluntarily).
• No account credentials, session cookies, or authentication tokens for any platform.
• No payment data — the service is free to use and has no checkout.
• Recent activity for abuse control: when a link is submitted we record the IP address, the link, the chosen format, the outcome and the time in a database table on the same server. Rows are deleted automatically 7 days after they are created, and the operator sees the last 24 hours in a password-protected panel. The data is never used for advertising and never shared with anyone.
• No advertising identifiers or cross-site profiles created by us. The third-party ad network described in section 7 may set its own identifiers.
• No precise location data.

4. Why we process it (purposes and legal bases)

• To deliver the download you requested — performance of the service you asked for, or our legitimate interest in operating the service.
• To protect the service from abuse (rate limiting, blocking attacks, enforcing size and time limits) — our legitimate interest in keeping the service available and secure.
• To diagnose failures — our legitimate interest in maintaining a working service.
• To comply with legal obligations — where applicable law requires it.

5. How long we keep it

• Downloaded files: deleted automatically after the retention window configured by the operator (default: 30 minutes after the download completes). The page shows the expiry time.
• Job state: held in server memory only, and lost when the process restarts.
• Application logs: written to the hosting platform's log file and rotated by it, which keeps a few days of history. Logs record the source domain and technical status, not the full URL with its query string.
• Server access logs: kept by Hostinger for the period in its own policy, which this site does not control.

6. Cookies and local storage

This site itself sets no cookies and stores nothing in your browser's local storage or session storage. The web server sets only what is strictly necessary to serve a request.

The advertising networks described in section 7 load with the page; the sponsored tab opens only when you press the download button. They may set their own cookies or read device identifiers to measure and target ads. Those cookies are controlled by those networks, not by us. Where the law requires consent for advertising cookies (for example in the EEA and the UK), the operator must obtain it before the ad loads; this template does not include a consent banner, so that requirement is the operator's to implement.

7. Third-party services

• Source platforms (Facebook, Instagram, TikTok, or others): your request is fulfilled by the server, which contacts the platform directly. The platform sees the server's IP address, not yours. Your link is not shared with any other party.
• Thumbnail images: if a preview image is shown, your browser loads it from the source platform's content delivery network. That request reveals your IP address to that platform, as it would if you visited the site directly.
• Advertising networks — Adsterra (highrevenueformat.com) and ProfitableRateCPM (profitableratecpmnetwork.com): display banners (728×90 or 320×50 at the top, 160×600 in the desktop margin, 300×250 next to the results), a native widget under the FAQ, a mobile bar shown only after a first successful download and dismissible, a popunder that may open a sponsored tab in the background, a social bar overlay loaded after the first successful download, and — only if the popunder fails to load — a sponsored link in a new tab. The popunder is loaded only after the download options appear, once per page view, so it never interrupts someone who is just pasting a link. Those networks receive your IP address, user agent, and the page address, and may set cookies or use device identifiers to measure and target advertising. Their practices are governed by their own policies — Adsterra publishes one at adsterra.com/privacy-policy, and ProfitableRateCPM publishes one on its own site. If you use a content or ad blocker the advertisements simply do not load and the rest of the site works normally.
• Hosting provider — Hostinger: processes requests and keeps standard server logs on our behalf.

We do not sell personal data ourselves. The advertising network described above operates independently and may use data for advertising as described in its own policy; where consent is required for that, the operator must collect it.

8. Security

Traffic is served over HTTPS. Downloaded files live in unpredictable, per-job directories that are not publicly listable; access requires an unguessable token. Files are deleted on a schedule. No system can be perfectly secure, and we cannot guarantee that unauthorised access will never occur, but we take reasonable technical and organisational measures appropriate to the low sensitivity of the data processed.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Because this service keeps almost nothing that identifies you, we may be unable to locate any data relating to you — we will tell you honestly if that is the case.

To exercise a right, contact copyright@vgrab.cc. You may also complain to the data protection authority in your own country.

10. Children

The service is not directed at children under 13 (or the minimum digital-consent age in your country, if higher) and we do not knowingly process their personal data.

11. International transfers

The service is hosted by Hostinger in Frankfurt, Germany (European Union). If you access it from elsewhere, your request data will be transferred to and processed there. Hosting inside the European Union means no international transfer is needed for visitors in the EU; for visitors elsewhere the hosting provider's data processing terms apply.

12. Changes to this policy

We may update this policy; the "Last updated" date will change. Material changes will be flagged on this page.

13. Contact

Privacy questions and requests: copyright@vgrab.cc. The operator of this website is the data controller; no company is involved, so no company name or postal address is published.