Privacy Policy

The short version

• Your clips are rendered in your own browser. No video is uploaded to us or stored by us.
• You can browse and download the free templates without an account.
• We use no analytics, no advertising and no tracking cookies.
• If you sign in, we keep your Google name, email and profile picture, and, for Pro, a list of the clips you finished.
• We never see or store payment card details.

Who is responsible

The controller of your personal data is Viacheslav Sierbov, an individual based in Ukraine, who operates Modisign at modisign.app. Contact: support@modisign.app.

What we collect and why

When you visit. Like any website, the servers that deliver Modisign receive your IP address, browser type and the pages you request. Our hosting providers process this to deliver the site and protect it from abuse. We do not build visitor profiles from it. Legal basis: our legitimate interest in running a working, secure website.

When you sign in with Google. Google tells us your name, email address, profile picture address and your Google account identifier. We store these to create your account and show it to you. We also store the sign-in tokens Google issues, in encrypted form. We do not get access to your Gmail, Drive, contacts or anything else in your Google account. Legal basis: performing our contract with you (the account you asked for).

While you are signed in. Each sign-in creates a session record holding your IP address, your browser’s user-agent string and an expiry time. Legal basis: performing our contract with you, and our legitimate interest in keeping accounts secure.

Clip history (Pro). When a Pro account finishes a download, we save one row: the clip’s title text, the template name, the address of the template with your settings (which includes the text and colors you chose) and the time. This is what lets you reopen and re-download a clip from your account. The video file itself is not saved. Free template downloads are not recorded at all. Legal basis: performing our contract with you.

Your plan. We store whether your account has Pro. When Pro goes on sale, our payment provider Paddle will tell us whether your subscription is active and give us the identifiers we need to match the subscription to your account. Legal basis: performing our contract with you.

When you email us. We keep your message and email address to answer you. Legal basis: our legitimate interest in handling requests, or performing our contract with you.

What we do not collect

• Your videos. Rendering and encoding happen on your device. The finished file goes from your browser to your downloads, never to our servers.
• Payment card data. Payments will be handled entirely by Paddle. Card numbers never reach us.
• Analytics or advertising data. There are no analytics scripts, ad pixels or fingerprinting on the site.
• Passwords. Sign-in is through Google only.

We do not sell personal data, and we do not use it for automated decisions about you.

Cookies and browser storage

We set cookies only for sign-in, so no consent banner is needed. Visitors who never sign in get no cookies from us. We do not use local storage.

• better-auth.session_token: keeps you signed in. Lasts up to 7 days and is renewed while you keep using the site; removed when you sign out.
• better-auth.state: protects the Google sign-in step. Lasts 5 minutes.

On the live site these names carry a __Secure- prefix. Google may set its own cookies on its own pages while you sign in.

Who else receives data

These companies process data for us or receive requests from your browser when you use Modisign:

• Vercel hosts the website and receives every page request (IP address, browser details, requested pages).
• Hetzner hosts our API server and database in the European Union, where all account data, sessions and clip history are stored.
• Cloudflare provides DNS and the secure connection in front of our API, and sees the requests that pass through it.
• Google (sign-in) authenticates you when you choose to sign in, and serves your profile picture on your account page.
• Google Fonts: the template previews load their fonts directly from Google, so your browser sends Google your IP address and browser details whenever a preview is shown, including when a clip is rendered. The website’s own fonts are served from our site and involve no request to Google.
• jsDelivr: the previews load two open-source animation scripts (the HyperFrames runtime and GSAP) from the jsDelivr content delivery network, which receives your IP address and browser details.
• Paddle (when Pro goes on sale) is the merchant of record for payments. Paddle collects your payment details, billing country and email at checkout, calculates tax and issues invoices, and acts as an independent controller of that data under its own privacy policy.

We may also disclose data when the law requires it.

How long we keep it

• Account and clip history: until you ask us to delete your account. Deleting an account also deletes its sessions, stored sign-in tokens and clip history.
• Sessions: a session expires 7 days after it was last renewed and is deleted when you sign out.
• Emails to support: for as long as needed to handle the request and any follow-up, normally no more than two years.
• Payment records: kept by Paddle for as long as tax and accounting law requires.

International transfers

Account data is stored in the European Union. Modisign is operated from Ukraine, so data may be accessed from there to run the service and answer requests. Vercel, Cloudflare, Google, jsDelivr and Paddle operate globally and may process data in other countries, including the United States. Where personal data leaves the European Economic Area or the United Kingdom, the transfer relies on safeguards such as the European Commission’s standard contractual clauses or the provider’s participation in the EU-US Data Privacy Framework.

Your rights

Wherever you live, you can ask us for a copy of your data, to correct it, or to delete it. Under the GDPR and similar laws you also have the right to restrict or object to processing, to receive your data in a portable format, and to complain to the data protection authority where you live.

The product does not yet have a delete button. To delete your account, or to use any other right, email support@modisign.app from the address of your Google account. We reply within 30 days and do not charge for it.

Children

Modisign is not directed at children. You must be at least 16 to create an account. If you believe a child has given us personal data, email us and we will delete it.

Changes to this policy

When we change what we collect or who receives it, we update this page and its effective date. If a change is significant, we will also email account holders.

Contact

Privacy questions and requests: support@modisign.app.