Privacy

Last updated 2026-07-28

What VidKeep stores and what it does not. Short version: no account, no email, no link history.

What we do not collect

We do not ask for an email address, we do not run an account system, and we do not place advertising or tracking pixels. We do not sell or share data, because we do not gather the kind of data that would be worth selling.

Your links

The link you paste is used to read the media and is not stored. When something fails, our error log records the type of failure together with a truncated SHA-256 hash of the link — a fingerprint that lets us count how often a failure happens without revealing what was requested. The link itself is not written down anywhere.

Your files

Most downloads go straight from the source to your device and never touch our server. When a quality requires video and audio to be merged, that is done on our server: a temporary file is created, sent to you, and deleted immediately afterwards. Nothing is archived and there is no library of past downloads.

What is stored in your browser

Three things, all in your browser’s local storage, all removable by clearing site data:

• vk_license — your Pro licence key, so the browser stays unlocked
• vk_lang — the language you picked, so the site stops guessing
• vk_theme — light or dark preference

These are functional, not analytical. Nothing about them is transmitted for profiling.

Payments

Pro is paid in USDT through USDPAY, our payment processor. They handle the crypto checkout and tell us only that a given order was paid. We never receive your wallet keys. A licence key is anonymous: it identifies a paid plan, not a person.

Infrastructure

The site is served through Cloudflare, which processes connection data such as IP addresses in order to route and protect traffic, under their own privacy terms.

Who else touches the data

Three parties, each for one job:

• Cloudflare — routes and protects traffic; sees connection data such as IP addresses
• USDPAY — runs the crypto checkout; tells us only that an order was paid
• the hosting provider — the server runs in Kazakhstan, where merged files exist for seconds

Kazakhstan is not covered by an EU adequacy decision, so transfers there rely on the standard contractual clauses. In practice what reaches the server is a link and, briefly, a media file — not an identity.

How long anything is kept

• Media files: deleted immediately after they are sent — seconds
• Error log (failure type + truncated hash): rotated, kept no longer than needed to fix the fault
• Licence records: the key, its plan and its expiry — kept while the licence is valid, since that is what proves you paid
• Links: never written down

Your rights

If the GDPR applies to you, you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your national supervisory authority.

Because we hold no account and no personal profile, there is usually nothing to export or erase — a licence key identifies a paid plan, not a person. If you believe we hold data about you, write to [email protected] and we will answer.