Privacy Policy

The short version

We do not know who you are. There is no account, no sign-up, no email address to hand over and no profile of you anywhere in our systems. KlipJar itself sets no cookies. The few things it keeps on your device (your language, your lists, a list of what you saved) are there only so those features work, and they never leave your device.

Running a free website does involve a few outside services, and you should know which: Cloudflare (our network and security provider), Adsterra (the ad network behind the single ad on our pages, which runs in an isolated frame), and a proxy network we use to reach the platforms. Each is described below, along with what it can and cannot see.

What we do not collect

• No accounts, names, email addresses or passwords.
• No payment details — the site is free. (Optional tips go through Ko-fi, on Ko-fi’s own site.)
• No history of the links you paste, and no record of which files you download.
• No fingerprinting, no cross-site tracking by KlipJar, and no selling or sharing of data with data brokers.

What happens when you paste a link

The link is sent over HTTPS to our server (klipjar.com/api/extract). The server asks the platform which files that public post publishes and sends the file addresses back to your browser. The link is used to answer that request. A link that works is not stored; a link that fails is kept for 14 days so we can fix the problem (see “What our logs contain” below).

To reach the platforms reliably, our server makes those requests through a residential proxy network operated by DataImpulse. The proxy provider handles the request to the platform, so it sees the address of the public post being looked up — but not your IP address, and nothing that identifies you.

How the download reaches you

For most platforms (for example X and Reddit) your browser downloads the file directly from the platform’s own servers; the video never touches ours.

TikTok, Pinterest, and Reddit images and GIFs do not let a browser fetch their files directly, and Facebook often does not either. For those, our server fetches the file on your request and streams it straight through to you as it arrives. It is not saved to disk, not kept, and not looked at.

When a download needs separate video and audio joined, or converting to MP3, that work happens inside your own browser on your own device.

What our logs contain, and for how long

Our web server and our API keep ordinary technical logs: the time, your IP address, the page or API path requested, the response status and your browser’s user-agent string. For API requests the query string — which can contain a post address — is removed before anything is written, and the API additionally records only the platform involved (for example tiktok.com) and how many files were found.

The IP address is there to stop abuse — rate limiting, so one automated client cannot take the service down for everyone. Logs are capped in size and overwritten automatically as new ones arrive — at current traffic they cover at most the last couple of months. They are not archived, mined, profiled, sold or combined with anything else.

Since 27 October 2026 we also keep a few small records that help us keep KlipJar working. None of them says who you are:

• Daily counts: for each platform, how many links were looked up, how many worked, how many failed and why (an error code), and how many files our server relayed. Numbers only: no links, no IP addresses, no browser details.
• Failed links: when a lookup fails, we keep the address of that post, with tracking parameters removed, together with the time, the platform and the error code, so we can find out why it failed and fix it. It is stored without your IP address or browser details, separately from the technical logs, and deleted automatically after 14 days. Links that work are not recorded.
• Links you report: when a link fails, you can tap “Report this link” and add a short note. Nothing is sent unless you tap Send. We keep the link (tracking parameters removed), your note, the platform, the error code and the time for 30 days, without your IP address or browser details, so we can fix the problem.

We use these only to find and fix problems and to see which platforms need work; that is our legitimate interest in running a reliable service. They are not shared, sold or used to profile anyone. A post address can contain the name of the account that published it; if it is your account and you want a failed link removed sooner, write to us.

Cloudflare

All traffic to klipjar.com passes through Cloudflare, which delivers the pages and protects the site from attacks. To do that, Cloudflare necessarily processes your IP address and request details. When traffic looks automated, Cloudflare may run a short browser check and set a strictly necessary security cookie. We may also use Cloudflare Web Analytics, which counts visits and measures page speed without cookies and without identifying individual visitors. Cloudflare’s handling of this data is described in its own privacy policy at cloudflare.com/privacypolicy.

Advertising

KlipJar is free, and a single advertising slot helps pay for the servers. The ads are supplied by Adsterra. Their code never runs on our pages: it is loaded only inside an isolated, sandboxed frame on a separate address (ads.klipjar.com). From there it cannot read the page you are on, cannot see the links you paste or the files you download, and cannot redirect your page or start downloads. An ad opens a new tab only if you click it.

Inside that frame, Adsterra and the advertisers it works with may process your IP address, approximate location and device and browser details, and may set cookies on their own domains, in order to choose, show and measure ads. That processing is governed by Adsterra’s privacy policy at adsterra.com/privacy-policy. You can block or clear third-party cookies in your browser settings, or use a content blocker; the downloader works the same either way.

Your choice comes first. In the EU and EEA, the UK, Switzerland, Brazil, Turkey and India, and whenever we can’t tell which country you are in, the ad frame is not loaded at all until you choose “Allow ads”. Everywhere else the ad is shown unless you turn it off, and a browser Global Privacy Control signal counts as “No ads”. You can change your choice at any time with “Privacy choices” at the bottom of every page; turning ads off removes the frame straight away. Saying no changes nothing else: every feature works the same.

In the app added to your Home Screen, we ask once each time you open it. Where we ask before showing ads, a “No ads” is remembered for six months before we ask again. If you have supported KlipJar with a tip, tap “I’ve already supported KlipJar” and ads stay off on that device without further questions. We don’t check: the note is kept on your device only, and we hold no payment or email details.

To know whether to ask first, the page asks Cloudflare which country your connection comes from (Cloudflare’s own address on klipjar.com, /cdn-cgi/trace). It sets no cookie, the answer stays in your browser for that visit, and we keep nothing.

We cannot check every ad an ad network serves. If you see an ad that is misleading or harmful, tell us at [email protected] and we will report it and block it where we can.

Storage on your device

KlipJar itself sets no cookies and no identifier, and nothing below is ever sent to us. It keeps a few things in your browser’s own storage, only so the features you use work:

• the language you picked, so the site stays in that language;
• your Lists, the links and files you set aside to download later;
• a short list of what you saved (up to the last 60, for up to 90 days: title, platform, the post’s link, quality and when; no file links), shown in Library and used to mark the qualities you already downloaded;
• whether you closed the “Add to Home Screen” tip, so it doesn’t come back;
• your ad choice (allow or no ads, the date, and the policy version it applies to), so we don’t ask on every page, and, in the Home Screen app, a note that you were already asked in this session;
• only if you tap “I’ve already supported KlipJar”, a note saying so and the date, so ads stay off on that device;
• offline copies of KlipJar’s own pages and files, so the site opens fast and works as an installed app;
• only if you turn it on, a private copy of your recent saves on a phone or the installed app (off by default).

Because these exist only to provide what you asked for, they need no consent. You can remove them at any time: delete a list or clear Library on those pages, or clear this site’s data in your browser settings. Your light or dark preference is held in the page’s memory only and disappears when you close the tab.

The only cookies that can appear while you use the site are the ones described above: Cloudflare’s security cookie, and, only when the ad frame is shown, cookies the ad network sets inside it.

Links to other sites, and the browser extension

Links to Ko-fi, the Chrome Web Store and Firefox Add-ons take you to sites with their own privacy policies; nothing is shared with them by us. The KlipJar browser extension is covered by its own policy at klipjar.com/extension-privacy.

Children

KlipJar is a general-audience utility and is not directed at children. We do not knowingly collect information from children.

Your rights, and how to reach us

Because we hold no account or profile, there is usually nothing of yours with us to hand over or erase beyond short-lived log lines. You can still ask: access, correction, deletion and objection requests are answered, and where the law gives you those rights (for example under the GDPR) we honour them. Requests about data held by Cloudflare or Adsterra are best sent to them directly, and we will help if you ask.

KlipJar is operated by BeyondITL Inc. For any privacy question, write to [email protected] and you will get a reply from a person.

Changes to this policy

When the way KlipJar handles data changes, this page changes first, and the date below is updated. A new service that can see visitor data is named here before it goes live.