Privacy Policy

Last updated: October 7, 2026

Summary: QuickMovie never uploads your video, image or audio files to a server — all editing and encoding happens inside your browser. You can edit without logging in; exporting or saving requires an email account. Payments are handled by PayPal and we never store your card details.

1. Personal information we collect

QuickMovie (the "Service") is a browser-based video editor provided by Bookdabang Inc. (the "Company"). Editing itself needs no account, but exporting MP4 and saving .qm are for registered users, so we collect the following.

At sign-up: email, password (stored only as an irreversible hash), nickname (optional), time you agreed to the terms/privacy policy, and your language
Collected automatically: IP address at sign-up/login, browser and device info (User-Agent), referrer, and export/save activity
When you pay: plan, payment status, PayPal subscription ID and period. Card details are handled directly by PayPal; the Company does not store them.

Purpose: identifying members and keeping them logged in, managing paid plans, preventing abuse, improving the Service. Retention: deleted promptly when you close your account; payment and subscription records may be kept for 5 years as required by consumer protection law.

2. Files and content we process

Video, image and audio files: Media you add is processed entirely in your browser's memory and is never sent to or stored on the Company's servers. Export/encoding also happens on your own device.
Auto captions (STT): The speech-recognition model downloads once and is cached by your browser; recognition itself runs on your device. Audio is never transmitted to a server.
Webpage → Shorts: A page URL you enter is sent only to the proxy (e.g. a Cloudflare Worker) that you yourself configure, in order to fetch that page's text and images. The Company does not separately collect or log this URL or the fetched content.

⚠️ Voice cloning — the one exception that leaves your browser.

If you use this feature, the voice sample you record or upload, and the text you want spoken, are sent to an external public Hugging Face Space you configure (run by a third party, not the Company) for processing. This is the only feature in the Service where media leaves your browser — nothing is sent unless you use it. If you enter a Hugging Face token, that token is sent to that Space and to Hugging Face as well. The Company does not operate that external Space and is not responsible for how it handles data there — check that Space's own policy before using it. If the voice isn't your own, you must have the speaker's explicit consent.

3. What's stored in your browser (localStorage)

The following is stored only in your browser and is never sent to the Company's servers. Clearing your browser data removes it.

Whether you've collapsed the top banner
The session token that keeps you logged in
The proxy address you configured for Webpage → Shorts
Scene drafts you explicitly saved with "Save draft" (including thumbnail images, up to 8 drafts)
Voice samples, Hugging Face token and Space address you saved for voice cloning (if you used it)

4. Cookies, ads & analytics

The Service uses browser storage (localStorage) to keep you logged in and remember settings such as theme and saved email; this is strictly necessary for the Service. The Service also keeps your 3 most recent projects (including video, image and audio files, up to 2 GB in total) in your browser's IndexedDB "History". They stay on your device and are never uploaded; the oldest are deleted automatically when the limit is exceeded, and you can delete them yourself from the History list. We use Google Analytics 4 for visit statistics. It records usage events such as page views, clicks and video exports, plus approximate region, device and referral source, as statistics only; we do not collect your videos, photos, audio, subtitles or email address through it. Ad personalization and Google signals are turned off, and for visitors in Europe (EEA, UK, Switzerland) analytics cookies are used only after you consent. To opt out, block cookies in your browser or install the Google Analytics opt-out add-on.

Ads: Reading pages such as the blog and About page (not the editor) may show ads, for example Google AdSense. When ads are shown, Google and its advertising partners may use cookies to serve ads based on your previous visits; we ask for your consent on your first visit, and no ad cookies are used if you decline. You can turn off personalized ads at Google Ads Settings or opt out at aboutads.info. See how Google uses data.

5. Third-party services

The Service loads fonts, libraries and model files from the following third parties. This can expose standard web request data (such as your IP address) to them, subject to their own policies.

Google Fonts (fonts.googleapis.com, fonts.gstatic.com)
Google Analytics (www.googletagmanager.com, www.google-analytics.com) — visit statistics
Supabase — hosts the member and payment-history database (processor of member data)
Netlify — hosts the site and server functions
PayPal — processes paid subscriptions (only when you pay)
jsDelivr CDN — the mp4-muxer, transformers.js and @gradio/client libraries
Hugging Face — auto-caption (STT) model files, and — only if you use voice cloning — the public Space that processes your voice sample and text (default: hasanbasbunar/Voice-Cloning-XTTS-v2)

6. Children's privacy

The Service does not knowingly collect personal information from children.

7. Changes to this policy

This policy may be updated as the Service evolves or the law changes; updates will be posted on this page.

8. Contact

For privacy questions, reach us via bookdabanginc.com.