Privacy policy

Who runs this service

The service is run by ax0rz0 software, which is ax0rz0, an individual. This policy covers the axclip service at clippyapi.ax0rz0.xyz: this website, the account portal, the clip viewer and the uploads sent by the axclip app.

What the service collects

• Your Steam id. When you sign in with Steam, Steam tells the service your Steam id, which is a number. The service never sees your Steam password. No email address or phone number is collected.
• Your display name. You choose it when you ask for access, and you can change it later.
• Your request note. An optional note of up to 300 characters that you can write when you ask for access.
• Your agreement to the terms. Which version of the terms and this policy you accepted, and when.
• Your devices. When you link the axclip app, the service stores the PC name and app version the app reports, and when the link was made and last used. The app's sign-in key is stored only as a one-way SHA-256 hash.
• A network tag. The database does not store IP addresses. Where it needs to tell networks apart, it stores a short tag made from the address with a secret key. The tag lets the owner see that two requests came from the same network without keeping the address.
• Your clips. The video files you upload, with their size, dimensions, length, and upload and expiry times. A clip may contain whatever was on your screen, the sound playing on your PC and, if you switch it on in the app, your microphone.
• A fingerprint of each clip. A SHA-256 fingerprint is worked out from each clip file. It is used to check the file is intact and to recognise the same file again if it has to be removed.
• An audit log. A record of actions taken by the owner, such as approving or denying a request, suspending an account, removing a clip or changing the terms. Each entry has the time, what it was about, a reason if one was given, and a network tag.

Why it is collected

To run the service, to decide who gets access, to show your clips to the people you give the link to, and to prevent abuse. It is not used for anything else.

How long it is kept

• Clips are deleted when their share time ends, which is never later than 30 days after upload, or sooner if you delete them or the owner removes them. The link stops working at that moment, and a routine clean-up removes the file shortly after.
• Sign-in sessions on the website last at most 12 hours, and end after 2 hours without activity or when you sign out.
• Device records are deleted when you unlink the device, or after 180 days without being used.
• Audit log entries are deleted after 365 days.
• Your account is kept until you delete it. An account that signed in but never asked for access is removed after 30 days without activity.
• Short-lived records used while signing in, such as the code that links the app, expire within minutes and are cleared out by the same routine clean-up.

When you delete your account, your clips (including the files), devices, sessions and account details are deleted straight away. Audit log entries that mention your account can remain until they are 365 days old.

Who can see your clips

Anyone who has the link to a clip can watch and download it until the link ends. Links are long random strings that cannot be guessed. Clips are not listed or searchable, and the pages ask search engines not to index them. The owner can see every clip so that harmful content can be removed. Nobody else can. If you post a link in public, anyone can open it.

Sharing your data

• Your data is not sold, and there is no advertising.
• There are no analytics and no third-party trackers. The pages load nothing from other websites.
• Steam receives your sign-in request when you choose Sign in with Steam. Steam's own privacy policy applies to that.
• The website host keeps standard access logs that include IP addresses, for a limited time.
• The Support and Download links lead to other websites, which have their own policies.

Cookies

Only the essential sign-in cookies are used. One keeps you signed in for up to 12 hours. The other lives for 10 minutes while you sign in with Steam, and protects that sign-in from forgery. There are no tracking or advertising cookies, so there is no cookie banner.

Security

Connections use HTTPS. Clip links, sign-in keys and session ids are long random values, and only one-way hashes of the keys and session ids are stored. Each account can only see its own clips, devices and details. No service is perfectly secure, so please do not upload anything you would not be comfortable with someone who has the link seeing.

Your choices

You can delete any clip, change how long a link lasts, unlink a PC, or delete your whole account yourself, in the axclip app or in your account on this website. To ask what the service holds about you, or to ask for anything else about your data, use the contact details below. Nothing in this policy limits any right you have under law.

The service is for people aged 13 or older.

Changes

This policy has a version number and a date at the top. When it changes in a way that matters, the version goes up and you will be asked to accept the new version before you next upload.

Contact

contactax0rz0@gmail.com