The short version
We collect the bare minimum needed to run the site: your email so you can sign in and re-download your files, your purchase history so we can show you what you own, and basic analytics so we know which designs people love. We do not sell your data. We do not run third-party advertising.
What we collect
- Account info: your email address (always) and your name + profile photo if you sign in with Google.
- Purchase records: credit-pack orders, credits spent, files downloaded, free-file grants.
- Payment metadata: Stripe's customer ID and the Stripe checkout session ID for each order — never your card number, which Stripe handles directly.
- Site usage: page views, broad referrer info, anonymized device class via Vercel Analytics & Speed Insights. No cross-site tracking.
- Server logs: IP address and request metadata, retained for ~30 days for abuse detection.
What we don't collect
- Full card numbers (Stripe holds those).
- Browsing data from other websites.
- Phone numbers, addresses, or other personal info beyond what's above.
Third parties we share with
We hand off specific data to a small set of providers, only as needed to run the site:
- Stripe (payment processing) — name, email, card details you enter.
- Resend (transactional email) — your email + the magic-link token.
- Google (OAuth sign-in, optional) — your Google profile info, only if you choose Google sign-in.
- Vercel (hosting, analytics, file storage) — site traffic + the cookie that keeps you signed in.
- Neon (Postgres database) — your account row and order history.
- AI providers (Anthropic, Runway, OpenAI) — only used by site admins generating new designs; your account info is never sent to them.
Cookies
We use a session cookie to keep you signed in (set by Auth.js, our authentication library) and a CSRF cookie for form security. Vercel Analytics uses a privacy-preserving cookie-less measurement system. We don't use marketing or tracking cookies.
Your rights
You can:
- Download your account data — email hello@cutfilevault.com and we'll send a JSON export within 7 days.
- Delete your account from the account settings page (or by emailing us). This permanently removes your CutFileVault profile, library, credit ledger, and order history. Stripe retains a separate copy of payment records on their side as required by their own financial-services regulations; we have no control over that retention.
- Opt out of analytics by enabling "Do Not Track" or installing a content blocker; we won't penalize you.
If you're in the EU/UK (GDPR) or California (CCPA), you have additional rights to access, correct, or restrict processing of your data. Contact us using the email above.
Children
The site isn't directed at children under 13. If you believe a minor created an account, email us and we'll delete it.
Changes
We'll update this page when our practices change and revise the "last updated" date above. Material changes will be announced by email to active customers.
Contact
Questions, requests, or complaints: hello@cutfilevault.com.