Privacy Policy

Last updated: May 11, 2026

VidSnag ("we", "our", "us") respects your privacy. This page explains what we collect, why we collect it, and your rights over your data. By using vidsnag.com you agree to this policy.

Information we collect
  • Account info: email address, first and last name, optional phone number, and password (stored hashed — we never see your plain password).
  • Download history: the URLs you submit, file format requested, timestamps, and success/failure status. Used to enforce free-tier limits and show your history page.
  • Social-account cookies: if you connect an Instagram / TikTok / Facebook / etc. account, the session cookies are stored encrypted on our server, scoped to your user ID only. Used solely to download private content you have access to.
  • Technical data: IP address, browser User-Agent, and standard server logs — used for rate limiting, spam protection, and debugging.
  • Cookies (browser): authentication cookie (keeps you logged in), anti-forgery cookie (CSRF protection), and a theme preference. No tracking or advertising cookies.
How we use your information
  • To provide the download service and your personal download history.
  • To send essential transactional emails — account verification, password reset, welcome email, and reCAPTCHA-protected contact replies.
  • To enforce daily download limits for free-tier users.
  • To detect and block abusive behavior (spam, bot traffic, brute-force login).

We do not sell, rent, or share your data with advertisers, data brokers, or any third party for marketing.

Third-party services

VidSnag relies on a small number of external services to function:

  • Google reCAPTCHA v2 — protects the contact and registration forms from bots. Subject to Google's Privacy Policy.
  • Gmail SMTP — delivers transactional emails. The "From" address is [email protected].
  • yt-dlp — open-source tool used to extract media from public URLs. yt-dlp runs on our server; the source platforms (YouTube, Instagram, etc.) see requests from our server IP, not yours.
  • Hetzner Cloud (EU) — hosts our server in Germany. Subject to GDPR.
Data retention
  • Account & download history — kept while your account is active. Deleted on account closure.
  • Downloaded files — temporary. Removed from our server within minutes of you downloading them.
  • Server logs — rotated automatically, typically held for 7 days.
  • Daily database backups — last 7 days, then automatically deleted.
Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data (update your name / phone in your profile any time).
  • Delete your account and all associated data.
  • Export your data in a portable format.
  • Disconnect any linked social account (revokes our stored cookies for that platform).

To exercise any of these rights, contact us via the contact form.

Security

Passwords are hashed using ASP.NET Identity's PBKDF2 implementation. All traffic is served over HTTPS (TLS 1.3) via Let's Encrypt. Authentication cookies are HttpOnly and Secure. Failed-login lockout is enabled to deter brute-force attacks. While no online service is 100% secure, we treat your data with care.

Children's privacy

VidSnag is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has registered, please contact us and we will delete the account immediately.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the service after a change constitutes acceptance.

Contact

Questions about this policy? Reach out via the contact form.