Privacy Policy

1. Operator and contact

The operator responsible for HuntClip's personal-data processing is Wei Chen (陈为), an individual operator based in China. This policy covers https://huntclip.com. Privacy and support requests go to support@huntclip.com. Version: 2026-10-16.

2. Data used by this service

We process account email, profile name or image, login credentials and sessions. Password authentication uses password hashes. If you choose Google sign-in, we receive the profile information authorized by that sign-in flow.

For video requests we process your reference photos, selected template, generation settings and necessary prompt instructions, task identifiers, provider responses and resulting media. We also record credit grants and consumption, order amounts, currencies, payment status and transaction references. Support emails or tickets contain the information you choose to send.

Our hosting and application infrastructure may process IP addresses, browser/request information, access times and errors for delivery, security and troubleshooting. Please do not upload identity documents, intimate photos or other highly sensitive material, or place secrets in support messages.

3. Purposes and applicable grounds

Account, generation, credit, payment and support processing is necessary to provide the service you request and administer purchases. Security and limited product statistics support the legitimate operation of the service where that legal basis applies. Records needed for financial compliance, disputes or lawful requests are processed to meet applicable obligations. Processing that legally requires consent will rely on that consent; it may be withdrawn for future processing.

HuntClip does not sell your photos or personal data, use your media to train its own AI models, or publish your media as promotional samples without separate permission. We do not promise that an upstream provider has the same training or retention policy unless it has been verified.

4. Service providers and international processing

Cloudflare Workers, D1 and R2 provide hosting, account/task data storage and media storage. Yir provides access to the requested ByteDance Seedance 2.0 model; Budget permits substitute routes, while other tiers require genuine or original routes. Yir and the providers executing those routes receive the reference images or accessible image URLs, generation instructions and settings necessary to fulfill a request. Resend delivers account and service emails. Stripe or Waffo processes payments; card details are entered into the Stripe or Waffo payment flow. HuntClip does not store complete card numbers or security codes.

Umami Cloud receives the limited statistics described below. These providers operate infrastructure internationally, so processing may occur outside China or your residence. Their own retention, payment and data-handling policies also apply to their services. We do not claim a fixed processing country, a particular certification or a cross-border safeguard agreement we have not verified. We will apply legally required safeguards to transfers for which we are responsible.

Stripe or Waffo processes the default card checkout through its hosted payment page. HuntClip receives payment status and transaction references rather than complete card details. When email signup verification is enabled, Cloudflare Turnstile processes verification signals to help prevent automated registrations; its script loads on the email signup form.

Relevant provider policies: Cloudflare, Stripe, Resend and Umami. Contact us about the provider used for a particular task. Disclosure may also be necessary to handle a lawful authority request or a billing dispute.

5. Cookies, preferences and optional statistics

When support chat is enabled, the official tawk.to widget loads after public-page resources, with deferred loading. Clicking its official button opens in-page chat. This third-party widget may use cookies/local storage and process browser, page and connection information. HuntClip does not automatically supply your account name, email, photos, signed media links or payment references. On studio, administration and settings pages, we hide the widget and disconnect chat. Messages and contact details you choose to submit are processed by tawk.to and our support team to respond to your request, under tawk.to's privacy policy.

Necessary authentication cookies support login and account security; preference cookies or local storage remember language and interface choices. Blocking necessary cookies can prevent sign-in. Clearing browser storage resets stored preferences.

We use Umami Cloud with manual, allowlisted page and event payloads. Statistics contain fixed site information, approved page paths, event names and catalog options such as template, quality, version or pack size. We do not send account emails, account IDs, photos or their URLs, prompts, task/order identifiers, keys, query strings, URL fragments or referrer values in our analytics payloads. The analytics provider receives the network request and may process associated technical information under its policy. We do not enable user identification, session replay or automatic click collection. Where background confirmation statistics are enabled, your generation or checkout request records the statistics preference at submission so completion or confirmed payment can be counted after you close the page. The same payload restrictions apply; account opt-out also blocks pending background statistics. Service expiry reminders are operational emails, not marketing analytics.

You can disable statistics for this browser below. This stores a local opt-out and reloads the page. Browser Do Not Track also disables our collector; enabling statistics here does not override Do Not Track. The choice applies to this browser, not every device, and clearing local storage removes it.

For acquisition measurement, the browser reduces a recognized referral domain or utm_source tag to a fixed category such as ChatGPT, Claude, Perplexity, Grok, Gemini, Copilot, Google, Bing, other referral or direct/unknown. Only this category is stored in this tab’s sessionStorage for up to 30 minutes and included with approved visit and funnel events. Full referring URLs, search questions and raw query parameters are not sent. A category is an attribution hint, not proof of an AI recommendation or a completed purchase. This measurement obeys the same opt-out and Do Not Track choice.

6. Media access and retention

New HuntClip reference photos are stored in private R2 storage and viewed through an owner-checked route. The server creates an object-specific signed link for Yir to read the photo, expiring no later than the photo’s seven-day limit. Anyone who obtains that signed link can read the photo until it expires; the browser does not receive this upstream link. Historical public media links remain compatible and have not been migrated. Do not share media links or upload highly sensitive photos.

New saved videos are held in a separate private R2 bucket and served after an authenticated ownership check. New uploads are retained for 7 days. From October 15, 2026, all new videos are retained for 30 days. Existing tasks keep their original deadline, shown with the result. Application access stops at expiry, while physical deletion through storage lifecycle processing can occur later. This schedule does not cover upstream copies or retroactively alter historical files. See File policy.

Account records remain while the account is active or a support request is being handled. On an erasure request we review and remove data no longer needed; financial records, fraud/dispute evidence and legally required records may need to be retained for the applicable obligation. We do not currently offer a uniform automatic account-deletion schedule. Restricted backup copies may remain until their backup is retired; a restore must respect previously approved erasure requests. Ask support for the handling of your particular records.

7. Security and your rights

We use HTTPS, password hashing, protected server credentials and access checks for account records and new private video delivery. Public-link originals and historical media have the limitations above. No internet service guarantees absolute security. We will handle significant data incidents and notifications as required by applicable law.

Contact support from your account email to request access, correction, a portable copy or deletion, or to object to or restrict applicable processing or withdraw consent. We may verify ownership without asking for your password. We aim to respond within 30 calendar days and apply any shorter mandatory deadline; necessary extensions will be explained. Some records may be retained for legal reasons. You may complain to a competent data-protection authority where applicable. Account erasure is currently a support request, not an automatic settings-page action.

8. Age, external links and changes

HuntClip accounts are for adults aged 18 or older. If a child has provided personal information without authorization, contact support so we can investigate and address it. Only upload other people's images with the required permission.

External trend references and payment/provider sites have their own policies. We publish policy changes with an effective date and announce material processing changes on the site or by account email where appropriate. Updating this policy does not itself obtain consent for a new purpose. Contact: support@huntclip.com.

Guest purchase privacy

For guest purchases, we store the checkout email, payment reference, selected template and photos, generation status, delivery attempts and refund status. An internal random bookkeeping identifier does not create a password login or give access to an existing account. Private purchase links contain a random access credential. The server stores its digest and an encrypted copy for email delivery. On successful access, a secure HttpOnly cookie supports later visits; the credential is removed from the address bar. Do not forward a private link unless you intend to grant access. Statistics, advertising and customer-chat scripts are disabled on private purchase pages. Contact support with your purchase reference for privacy requests; knowing an email alone is not sufficient access proof.