Privacy Policy

NinjaClips is operated from the United Kingdom. This policy explains how we handle personal data under the UK GDPR and the Data Protection Act 2018. For that data, NinjaClips is the controller.

NinjaClips is a trading name of NinjaClips Ltd, registered in England and Wales, company number 17477524. Registered office: Unit A, 82 James Carter Road, Mildenhall, IP28 7DE.

What we collect

Account data. Your email address, and a display name, handle and avatar if you set them. If you sign in with Google, we receive your email address and basic profile from Google, not your password.
Files you submit to the scene tools, and the outputs generated from them.
Usage data. Jobs run, features used, pages viewed, and the credit balances and movements kept from when the site used credits.
Marketplace data. Listings, purchases, payouts, and the storefront details you choose to publish.
Verified accounts. If you verify a YouTube channel or TikTok account on your store, that account's ID, handle and profile picture.
Billing data. Payment status, customer identifiers, the last four digits of a card and its expiry. We never receive or store your full card number.
Technical data. IP address, device and browser information, and logs, collected to keep the service secure and working.
Support data. What you tell us when you get in touch.

Why we hold it, and on what basis

To provide the service — running jobs, keeping your account, delivering purchases, paying sellers. Basis: performance of our contract with you.
To take payment and prevent fraud. Basis: contract, and our legitimate interest in not being defrauded.
To keep the service secure and reliable — logging, rate limiting, abuse investigation. Basis: legitimate interests.
To understand how the product is used so we can improve it. Basis: legitimate interests, or your consent where analytics cookies require it.
To meet legal obligations — tax, accounting, and responding to lawful requests. Basis: legal obligation.
To send service emails. Basis: contract. Marketing email, if we ever send it, goes only to people who opted in, and every message carries an unsubscribe link.

We do not sell personal data, and we do not share it for advertising.

Files you submit

Files you submit to the scene tools are processed to produce the outputs you asked for. They are stored so that you and the processing infrastructure can access them while the work runs and while the results remain available in your account, and they may pass through our hosting, storage and processing providers as part of that.

We do not use your files to train models, and we do not publish them or make them available to other users. Staff access is limited to what is needed to investigate a fault or a report of abuse. You can delete a job and its outputs from your account, and deletion removes them from active storage; residual copies in backups age out on the normal backup cycle.

Editors we rank

This part is for people who post anime edits publicly on TikTok or YouTube, whether or not you have a NinjaClips account.

What we show: your handle, your public profile picture (shown from TikTok's own servers, never copied), your public follower count, the public view and like counts of your public edits, the characters and songs those edits use, and figures we work out from them: your typical edit, your best edit, and your rank overall and for each character. We never show contact details, private posts, or anything about an account that is not ranked: every name below the ranking gets the same “Not ranked yet”.

Where it comes from: public profiles and public posts on TikTok and YouTube, read by our systems and kept up to date, and, when you connect your TikTok, the list of your public videos TikTok gives us with your permission.

Why, and on what basis: legitimate interests. We run a public index and ranking of anime edits that helps fans find editors and helps editors see where they stand. You chose to publish this work publicly, we show only public facts, and you can opt out at any time. You can ask us for our assessment.

Paid song promos: if you claim your page, we use your public posting pattern, like how often you post and whether your views are rising, to decide whether to offer you paid song promos (18 and over) and who we invite first. We never invite or contact anyone who has not claimed their page, and paid posts never move a rank.

Who sees it: anyone visiting NinjaClips, and the companies that run the site for us. Members can also add you as a rival and get your public numbers in their weekly email. We do not sell it or give editor lists to anyone.

How long: while your posts are public. A deleted or private post stops showing once our systems see it is gone. We keep daily readings of your public counts for 12 months to show change over time.

Remove your page: email [email protected] and we will remove it within 7 days. We then keep only your handle on a do-not-add list, so we never add you back. If you are under 18, or the parent of an editor who is, email us and we remove it straight away.

Wrong fact? Use Report a wrong fact, or email us.

Why we didn't message you: we hold no contact details for editors who have not signed up, and a message would be more intrusive than this notice. Your other rights, and how to complain to the ICO, are under “Your rights” below.

YouTube verification and Google data

If you verify your YouTube channel by signing in with Google, NinjaClips uses YouTube API Services. With your permission, we ask YouTube once which channel your Google account manages, and receive its channel ID, handle, name and profile picture. We keep the channel ID, handle and profile picture. That is the only Google user data this feature accesses.

We use it only to show your channel as verified on your NinjaClips store and to show your channel's public videos there. We do not use it for advertising and we do not sell it. It reaches no one else except the providers that run the service for us (hosting, database and storage), for that purpose.

The access Google grants is used for that one request and then discarded: we store no Google access or refresh token and keep no ongoing access to your Google or YouTube account. The channel details stay while your account is open and are deleted with it. You can ask us to remove them sooner at [email protected], and you can revoke NinjaClips' access at any time in your Google security settings.

NinjaClips' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's own handling of your data is covered by the Google Privacy Policy, and using YouTube verification means you also agree to the YouTube Terms of Service.

TikTok verification

If you verify your TikTok account by logging in with TikTok, we receive, with your permission, your TikTok account ID, username, display name and profile picture, and the list of your public videos: their IDs, captions, cover images, lengths, posting dates and view, like, comment and share counts.

We use them to show your account as verified on your NinjaClips store and to show your videos there, each linking back to TikTok, and to count your edits for your editor rank and the paid promo list. We never download, re-upload, change or post videos. We do not use this data for advertising and we do not sell it. It reaches no one else except the providers that run the service for us (hosting, database and storage), for that purpose.

While your TikTok stays connected, we read that same list again once a day, so your rank and store stay current without you asking. For that we keep the refresh token TikTok gives us, encrypted, and never the access token. TikTok's refresh token lasts a year; we delete it if you remove your TikTok from NinjaClips or delete your account, and it stops working as soon as you remove NinjaClips' access in the TikTok app's settings. We keep the account ID, username and profile picture, and the details of the videos on your store, while your account is open, and delete them with it. You can ask us to remove them sooner at [email protected].

Who processes data for us

We keep the list short and use established providers. By role, these cover application hosting, database, object storage, video processing infrastructure, payments, transactional email, error monitoring and product analytics. Each acts on our instructions under a data processing agreement, and receives only what its role requires.

Payments are handled by Stripe, which acts as an independent controller for its own compliance purposes and processes your card details directly. Sellers who take payouts complete onboarding with Stripe, including any identity checks Stripe requires.

Cookies

We set cookies that are strictly necessary to sign you in, keep your session, and protect the service. These do not require consent. Where we use analytics cookies, we ask first, and you can change your answer at any time. Blocking non-essential cookies does not restrict your access.

International transfers

Some providers operate outside the UK. Where data is transferred, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, together with appropriate safeguards.

How long we keep things

Account data — while your account is open, then removed on closure other than what we must keep.
Files and outputs — while they remain available in your account, or until you delete them.
Billing and tax records — six years, as UK tax law requires.
Security logs — a short rolling window, kept only as long as useful for security.
Support email — while needed to handle the matter and any follow-up.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Where we rely on consent, you can withdraw it at any time. Email [email protected] and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can fix it.

Security

Access to production systems is restricted and authenticated, data is encrypted in transit, and stored files are held in private storage that is not publicly listable. No service can promise perfect security, and we will tell you and the regulator without undue delay if a breach affects your data.

Children

NinjaClips is not for under-16s. We do not knowingly collect their data, and we will delete an account promptly if we learn it belongs to one.

Changes

We may update this policy. The date above always shows the current version, and we will give notice of material changes in the product or by email.

Contact

Any privacy question, request or complaint: [email protected].