Privacy Policy

1. General provisions

This Privacy Policy (the “Policy”) describes how Clipline (the “Service”) processes and protects personal data of users of the website and web application.

Personal data operator: ИП Кулагин Алексей Иванович, ИНН 503207231772, ОГРНИП 325774600837477. Correspondence address is available on request at hello@clipline.ru.

Contact for personal data requests: hello@clipline.ru.

By using the Service, registering, or submitting data through forms, you confirm that you have read this Policy.

2. Data we process

We may process the following categories of personal data:

• registration data: email, password (hashed), role (coach/athlete), first name, last name, phone;
• profile data: avatar, public name, bio, profile metadata;
• user content: uploaded video, audio notes, text and graphic annotations, file names;
• access data: named access lists by email, secret guest-view links;
• billing data: plan, subscription status, transaction identifiers (we do not store full card details);
• technical data: IP address, browser and device data, error logs, session identifiers;
• data contained in video and audio, including image and voice of users and third parties (including minors) if present in uploaded content.

3. Purposes

Personal data is processed to:

• register, authenticate, and provide access to the Service;
• provide video review, storage, sharing, and collaboration;
• process subscriptions and payments;
• provide support, security, and abuse prevention;
• comply with Russian law;
• send service notices related to the account.

4. Legal bases

Processing is based on:

• consent of the data subject (on registration and where otherwise required);
• entering into and performing a contract (terms of use, public offer);
• the operator’s legitimate interests (security and availability of the Service), subject to the data subject’s rights;
• legal duties under Russian law.

5. Processing operations

The operator collects, records, organizes, stores, updates, extracts, uses, transfers (provides, grants access), anonymizes, blocks, and deletes personal data using automated and non-automated means.

6. Retention

Personal data is stored no longer than needed for the processing purposes, unless a longer period is required by law or contract.

Account data is kept until the account is deleted or the Service is no longer used, subject to periods needed to meet obligations (including accounting and tax).

User content is deleted when the account or the relevant materials are deleted, unless needed for disputes or required by law.

7. Recipients

To operate the Service, personal data may be made available to the following processors as needed to provide the service:

• Tochka bank — to accept subscription payments via SBP;
• cloud storage providers (S3-compatible) — to store and deliver video, audio, and images;
• hosting and API infrastructure — to run the backend and database;
• Google LLC (Google Analytics) — website analytics after the user consents to analytics cookies (cross-border transfer to the USA).

Each processor is bound by a contract or other legal safeguards under 152-FZ.

Cross-border transfer of personal data is not performed except where strictly necessary to provide the service and with a valid legal basis.

8. Cookies and localStorage

The Service uses cookies and browser storage. Consent is requested via the site banner before optional cookies are used.

• cookie `clipline_access_token` — session JWT (HttpOnly, Secure in production, SameSite=Lax); required for auth;
• cookie `clipline_has_session` — session presence flag for UI routing (SameSite=Lax); required for the Service;
• localStorage `clipline_cookie_consent` — stored cookie-consent choice;
• sessionStorage — temporary video-sharing helpers for the browser session;

Necessary cookies and auth mechanisms are not used for advertising profiling and do not require separate consent.

Yandex.Metrica (including the counter and, if enabled, session replay) and Google Analytics load only after consent to analytics cookies. Google Analytics involves transfer of technical visit data to Google LLC (USA). Declining analytics does not affect core features. You can withdraw consent via the cookie banner (clear the saved choice) or by email.

9. Minors

The Service is intended for coaches, athletes, and sports organizations. Users under 18 should use the Service only with consent of a legal representative.

By uploading video or audio containing images or voice of minors, the user confirms they have the required consents or another legal basis.

Public sharing of materials with personal data of minors is prohibited without consent of their legal representatives.

10. Data subject rights

You may:

• obtain information about processing of your personal data;
• request correction, blocking, or deletion if data is incomplete, outdated, or processed unlawfully;
• withdraw consent to processing;
• appeal the operator’s actions to Roskomnadzor or a court.

To exercise these rights, email hello@clipline.ru with your account email and request. Review takes up to 30 days unless another period is set by law.

You can request account and related data deletion in profile settings or by email.

11. Security measures

The operator applies organizational and technical measures: access control, password hashing, HTTPS, isolated cloud media storage, and token-based API access.

12. Policy changes

The operator may update this Policy. The current version is published at /privacy. Last updated: 2026-08-05.

Material changes may be announced in the Service UI or by email.