Privacy Policy

1. Information We Collect

We collect information in several ways depending on how you use the website.

1.1 Files You Upload

When you upload an image, video, audio file, or other supported media file to Media Manipulator, we may temporarily process that file to provide the requested tool functionality, such as:

• converting a file to another format;
• cropping, trimming, resizing, compressing, filtering, or editing media;
• extracting or displaying metadata;
• removing metadata;
• generating transcripts, captions, summaries, descriptions, or other AI-assisted outputs;
• creating downloadable processed files;
• maintaining temporary session conversion history so you can download recent conversions during your session.

Uploaded files and generated outputs are stored temporarily for a maximum of 24 hours, unless deleted sooner. After that period, they are deleted from our active systems.

1.2 File and Conversion Metadata

We may collect technical information about uploaded files and conversion jobs, including:

• file name;
• file type or MIME type;
• file size;
• file duration, dimensions, bitrate, codec, or other technical properties;
• conversion settings selected by the user;
• generated output format;
• job status, processing errors, and timestamps;
• temporary file identifiers or session identifiers.

We use this information to operate the service, troubleshoot failed conversions, maintain temporary session history, improve performance, detect abuse, and protect the website.

1.3 Content Scanning and Safety Review

All uploads may be subject to automated scanning and classification for security, abuse prevention, brand safety, advertiser protection, and detection or blocking of suspected illegal or prohibited content.

These scans may be used to identify or help prevent content involving, for example:

• suspected child sexual abuse material or exploitation;
• malware, malicious files, or harmful code;
• content that appears to violate applicable law;
• content that violates our Terms of Service or Acceptable Use rules;
• adult, sexually explicit, graphic, violent, or otherwise advertiser-sensitive content.

If content is determined or suspected to be illegal, prohibited, abusive, or unsafe, we may block processing, delete the file, prevent display of previews, restrict access to generated outputs, preserve limited records where legally required, or report the content to appropriate authorities if required by law.

If content is lawful but classified as adult, graphic, violent, or otherwise advertiser-sensitive, we may prevent that content from being displayed or previewed on the website in order to protect users, our brand, and advertisers. In some cases, where lawful and technically available, the user may still be able to download the processed file.

Users are solely responsible for the files they upload and for ensuring they have all rights, permissions, and legal authority necessary to process those files using Media Manipulator.

1.4 Usage Data

When you visit or use Media Manipulator, we may automatically collect usage and device information, such as:

• pages visited;
• tools used;
• buttons clicked;
• approximate location based on IP address;
• browser type and version;
• operating system;
• device type;
• referral source;
• timestamps;
• diagnostic logs;
• error logs;
• performance data;
• analytics events.

We use this information to understand how users use the website, improve features, diagnose issues, prevent abuse, and measure website performance.

1.5 Cookies and Similar Technologies

We and our service providers may use cookies, local storage, pixels, tags, and similar technologies to:

• operate the website;
• remember user preferences;
• maintain session functionality;
• analyze traffic and usage;
• detect abuse or security risks;
• serve and measure advertisements.

You can control cookies through your browser settings. Some features may not work properly if cookies or local storage are disabled.

2. How We Use Information

We use the information we collect to:

• provide media conversion, editing, transcription, metadata, AI analysis, and related tools;
• temporarily store conversion history for up to 24 hours;
• allow users to download recent converted files during a session;
• scan uploads for suspected illegal, prohibited, abusive, or advertiser-sensitive content;
• protect users, advertisers, our website, and our brand;
• prevent fraud, abuse, spam, malware, and security incidents;
• debug errors and improve service reliability;
• analyze traffic and usage trends;
• improve our website, tools, user experience, and performance;
• comply with legal obligations;
• enforce our Terms of Service and Acceptable Use rules.

3. File Storage and Deletion

Uploaded files and generated outputs are stored temporarily for a maximum of 24 hours to support session conversion history and allow users to download recent conversions.

After the temporary retention period expires, uploaded files and generated outputs are deleted from active storage.

We may retain limited technical logs, security records, abuse-prevention records, analytics records, or legal compliance records for longer where reasonably necessary to operate the service, protect against abuse, enforce our policies, comply with law, resolve disputes, or maintain security. These records are not intended to preserve full uploaded media files after the 24-hour temporary storage period.

4. AI Processing

Some Media Manipulator features may use automated systems or AI-assisted tools to process uploaded media, metadata, audio, video, text, transcripts, captions, descriptions, summaries, or other content.

AI-assisted features may be used to:

• transcribe audio or video;
• generate captions;
• summarize content;
• describe images, videos, or audio;
• classify content for safety or brand-suitability;
• detect suspected illegal, prohibited, abusive, adult, violent, graphic, or otherwise advertiser-sensitive content;
• help prevent misuse of the service.

All AI processing used by Media Manipulator is performed locally on our own servers or infrastructure that we control. We do not outsource uploaded files, generated outputs, transcripts, summaries, descriptions, or content-safety scans to third-party AI providers for processing.

This means that when AI features are used, your uploaded files and generated outputs remain within Media Manipulator’s processing environment and are handled according to the storage, retention, deletion, and security practices described in this Privacy Policy.

Uploaded files and generated outputs are stored temporarily for a maximum of 24 hours to support session conversion history and allow users to download recent conversions. After that period, they are deleted from our active systems unless earlier deletion occurs or limited retention is legally required for security, abuse prevention, legal compliance, or enforcement purposes.

AI-generated outputs may be imperfect, incomplete, or inaccurate. Users are responsible for reviewing any AI-generated output before relying on it.

We do not use uploaded files to publicly identify users. We do not claim ownership of uploaded files. We do not sell uploaded files or generated outputs. We do not provide uploaded files or generated outputs to third-party AI providers for model training or AI processing.

5. Advertising

Media Manipulator may display advertisements, including advertisements served by Google AdSense or other advertising partners.

Third-party vendors, including Google, may use cookies to serve ads based on a user’s prior visits to Media Manipulator or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to users based on their visit to Media Manipulator and/or other sites on the Internet.

Users may opt out of personalized advertising by visiting Google’s Ads Settings. Users may also opt out of some third-party vendors’ use of cookies for personalized advertising by visiting industry opt-out pages where available.

Advertising partners may collect or receive information from our website and other websites and use that information to provide measurement services and targeted ads.

We do not control third-party advertising cookies or tracking technologies. Their use is governed by the privacy policies of the third parties that provide them.

6. Analytics

Media Manipulator uses its own first-party analytics, built and operated by us and hosted on our own infrastructure at analytics.media-manipulator.com. It is the primary way we understand which tools are used, where they fail, and what to build next.

We previously used Mixpanel and Firebase Analytics. Both have been removed, as has Firebase Performance monitoring. Firebase is now used only for account sign-in.

6.1 What our analytics collects

When you have consented to analytics, we record events such as:

• pages viewed and how long you were actively engaged with them;
• which tool you used, and the outcome — file selected, upload started or failed, job started, completed or failed, result previewed, download started or completed;
• the file extension, file size, and media kind of the file you processed;
• the tool settings you chose;
• account events: an account was created, signed in to, or signed out of;
• page performance measurements (Core Web Vitals) and client-side errors;
• your device type, browser and version, operating system, viewport size, language, and time zone;
• the referring website and any campaign parameters in the link you arrived through;
• your country, region, and city, derived from your IP address;
• your account tier at the time of each event.

Each event carries an anonymous device identifier and a visit identifier so that a sequence of actions can be understood as one visit. If you are signed in, events are also associated with your account.

6.2 What our analytics never collects

These are technical guarantees enforced in our code, not just policy:

• We do not store your IP address on analytics events. Your IP is used in memory to derive an approximate location and network operator, and is then discarded before the event is recorded.
• We do not collect file names. Only the file extension is recorded.
• We do not collect the contents of your files, transcripts, captions, summaries, or any AI-generated output.
• We do not collect email addresses in event data. Anything resembling an email address is automatically removed, both in your browser and again on our server.
• We do not use cookies for analytics. The identifiers described above are stored in your browser’s local storage, and our analytics endpoint is configured so that your browser cannot send cookies to it at all.
• We do not sell or share your analytics data with anyone.

6.3 How long we keep it

• Individual events and visit records: 13 months, after which they are deleted automatically.
• Device and account records: deleted after 25 months without activity.
• Records of your consent choices: 5 years, because we are required to be able to demonstrate what you agreed to and when.
• Aggregated daily statistics, which contain no identifiers and describe no individual: kept indefinitely.

6.4 Google Analytics 4

We keep a deliberately minimal Google Analytics 4 configuration as an independent cross-check on our own numbers. Exactly three events are sent to Google: a page view, an account sign-up, and a completed job. Nothing else is forwarded, and it is subject to the same consent choice as our first-party analytics.

6.5 If you decline analytics

If you decline, we record no events about you at all. We keep a single count of how many times each page was viewed, broken down by country and date, with no identifier of any kind attached — individually or in combination, a row in that count cannot be traced to a person, a device, or a visit. It exists so that a change in how many people decline cannot be mistaken for a change in how many people visit.

6.6 Identifiers we use regardless of your choice

The anonymous device and visit identifiers described above are created whether or not you consent to analytics, because our API needs them to enforce free-tier limits and to block abuse. That is a strictly necessary purpose and is not analytics: without them we could not offer the tools without an account. What your consent controls is whether we record behavioural events against those identifiers.

7. Legal Basis for Processing

Depending on where you are located, we may process personal information based on one or more legal bases, including:

• providing the service requested by the user;
• our legitimate interests in operating, securing, improving, and monetizing the website;
• compliance with legal obligations;
• user consent where required, including for certain cookies, analytics, personalized advertising, or AI-related processing.

For first-party analytics specifically: in the EEA, the UK and Switzerland we rely on your consent and collect nothing until you have given it. In the United States we rely on notice and your right to opt out, which is available at any time from the footer. Where we cannot determine your location, we treat you as requiring consent.

The anonymous device and visit identifiers used to enforce free-tier limits and prevent abuse rely on our legitimate interest in operating and securing the service, and on providing the service you requested. Records of your consent choices are kept to comply with a legal obligation to be able to demonstrate them.

8. Sharing Information

We may share information with:

• hosting and cloud infrastructure providers;
• file storage and processing providers;
• analytics providers;
• advertising partners;
• security, abuse-detection, and content-safety providers;
• AI processing is performed locally on our own servers or infrastructure that we control, and we do not share uploaded files, generated outputs, transcripts, summaries, descriptions, or content-safety scans with third-party AI providers for AI processing;
• payment processors, if paid accounts are introduced;
• law enforcement, regulators, or authorities when required by law or when necessary to report suspected illegal content;
• professional advisors, such as attorneys, accountants, or security consultants;
• business successors in the event of a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell uploaded files.

9. User Responsibilities

Users are responsible for the content they upload, process, convert, edit, transcribe, summarize, or download through Media Manipulator.

Users must not upload content that:

• they do not own or have permission to process;
• infringes copyrights, trademarks, privacy rights, publicity rights, or other legal rights;
• contains child sexual abuse material or exploitation;
• contains malware, viruses, or harmful code;
• is illegal to possess, process, upload, distribute, or transmit;
• violates our Terms of Service or Acceptable Use rules.

Use of Media Manipulator does not transfer ownership of uploaded content to us.

10. Security

We use reasonable technical and organizational measures designed to protect uploaded files, generated outputs, logs, and other information from unauthorized access, misuse, loss, or disclosure.

However, no online service, storage system, or transmission method is completely secure. Users should avoid uploading highly sensitive, confidential, or legally restricted content unless they understand and accept the risks.

11. Children’s Privacy

Media Manipulator is not intended for children under the age of 13, or the minimum age required by applicable law in the user’s jurisdiction.

We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete it.

12. International Users

Media Manipulator may be operated from the United States or other locations. If you access the website from outside the United States, your information may be processed in countries that may have different data protection laws than your country of residence.

By using Media Manipulator, you understand that your information may be transferred to and processed in the United States or other jurisdictions.

13. Your Choices and Rights

Depending on your location, you may have rights regarding your personal information, such as the right to:

• request access to personal information we maintain about you;
• request correction or deletion;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of certain advertising or analytics technologies;
• request a copy of your information.

You can change your analytics choice at any time from “Cookie settings” in the footer. If you are in the United States, “Do Not Sell or Share My Personal Information” in the footer opts you out of any sharing for advertising purposes.

You can export or delete your analytics data yourself, immediately, from “Cookie settings” in the footer under “Your data”. Export downloads a complete copy of what our analytics holds about you as a file; Delete permanently erases your analytics history and gives your browser a brand-new anonymous ID. If you are signed in, both cover every device linked to your account. Because these tools act immediately, they satisfy the response periods the applicable law allows (30 days under CPRA, one month under the GDPR) by construction. You can also email us using the details below and we will do the same on your behalf within those periods.

One category of records survives deletion: the log of your own consent and opt-out choices. Laws that let you delete your data also require us to be able to prove how we handled your choices (GDPR Article 17(3)(b)), so those records are kept for five years and then deleted. They contain your choices and when you made them — not your browsing activity.

Because uploaded files and generated outputs are temporary and are deleted after a maximum of 24 hours, we may not be able to retrieve or provide access to files after deletion.

14. Do Not Track and Global Privacy Control

Media Manipulator honours Global Privacy Control (GPC). If your browser or an extension sends a GPC signal, we automatically treat it as an opt-out of any sale or sharing of your personal information for advertising purposes, we apply it on every visit — including overriding an advertising opt-in you may have given previously — and we record that we did so.

GPC is an opt-out of sale and sharing. It does not switch off our first-party analytics, because analytics we run on our own domain for our own product decisions is neither a sale nor a share. Analytics is a separate choice, available at any time from “Cookie settings” in the footer.

We do not respond to the older “Do Not Track” browser signal. No standard was ever agreed for how sites should interpret it and no regulator gave it legal effect; GPC is the signal that carries weight, and it is the one we honour.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this page.

If we make material changes, we may provide additional notice, such as by posting a notice on the website.

Your continued use of Media Manipulator after changes are posted means you accept the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or how Media Manipulator handles information, contact us at:

Media Manipulator is a product and service operated by CreaTV Ltd.

CreaTV Ltd.

Operating as Media Manipulator

Colorado, USA

Email: privacy@media-manipulator.com

Website: https://www.media-manipulator.com