Privacy policy

Who runs this site

This site is run by the manager of the campaign named below. It is not open to the public: only people who receive a login from that manager can use it. Questions, and requests about your data, go to the same person.

ClipFeed · Write to the campaign manager in the messages of this site.

What the site holds

• Clipper accounts a login name, a display name, the chosen language, and the password stored as a one way hash, never in clear.
• Campaign accounts the Instagram usernames of the campaign's accounts and of the accounts clippers declare. To have an account connected, a clipper may send his Instagram login to Kora in a private message: it is kept encrypted, only the administrator reads it, and he erases it once it is no longer needed.
• The work itself the campaign videos, the clips generated from them, their titles and captions, and the transcription used to cut them.
• Posts the link of each published post, the account it was posted from, the clipper who sent it and the time it arrived.
• Messages the messages exchanged between the manager and a clipper on this site.
• Connected Instagram accounts when the manager connects one of their own professional accounts for automatic posting: its Instagram identifier, its handle and the access token Meta issues, plus the identifier and the link of each post the site publishes on it.

Instagram data, and what is done with it

Automatic posting uses Meta's official Instagram API, and only on accounts whose owner signed in and accepted it. The access token is used for one thing: to publish a clip and read back the link of the post it created. Nothing else is read, no follower list, no message, no data belonging to anybody else.

A clip queued for publishing is served at a signed address, valid a few hours, so that Meta can download the file. Nothing on this site is otherwise reachable without signing in.

Nothing here is sold, rented, shared with an advertiser or handed to any third party. There is no analytics service, no advertising script and no tracker on this site.

Audience measurement

The site counts its own pages so the manager knows how many people come. It is counted here, on this server, in aggregate: a day, a page, a number. No outside company, no script in the page, no cookie for it, and no IP address is written down.

A visitor is counted once a day through a fingerprint of the connection, mixed with a secret that is thrown away and replaced every night, so the same person on two different days cannot be linked, not by anybody, us included. These counters are deleted after 45 days.

Cookies

Two, both necessary: one that keeps you signed in, and one that remembers the language you picked. Neither follows you anywhere else.

How long it is kept

• Accounts, posts and messages stay as long as the account exists on this site.
• A rendered clip file is deleted three weeks after the post it belongs to was accepted. The record of the post stays.
• The access token of a connected Instagram account is deleted the moment that account is disconnected, and immediately when Meta tells the site the app was removed from it.

Earnings system (clippers' accounts)

When an admin connects a clipper's professional Instagram account through Meta's official login, the site keeps: the account's Instagram identifier, its username, its type, the access token (encrypted with AES-256-GCM, never shown nor written in a log), the permissions granted and the expiry date. With that token the site only reads the account's list of posts (to confirm a submitted link belongs to it) and the "views" insight of each submitted post. Nothing else.

For withdrawals, the site keeps the payout address and the Discord name the clipper gives, copied into each request. No payment is processed by the site.

Every sensitive action (account validation, withdrawal, adjustment, role change) is written in an audit log, with no password and no token.

Terms of use · Data deletion

Having your data removed

A clipper asks the campaign manager, on Discord or in the messages of this site, and their account and everything attached to it is deleted.

The owner of a connected Instagram account has two ways: press Disconnect on the Auto posting page, or remove ClipFeed from Instagram, in Settings, Website permissions, Apps and websites. Either way the token and the connection are erased from this site.

Security

The site is served over HTTPS only. Passwords are hashed. The database and the files live on a private volume that only this site can reach.

Changes

If this policy changes, the date at the top changes with it.