1. Who we are
Clippers (clippers.nl) is the data controller for the personal data you share with us through the platform. This English version is provided for reference; the Dutch version at clippers.nl/privacy is the authoritative text.
2. What data we process
We process your name, email address, linked social accounts, submitted clips, view statistics and payout details (including IBAN and account holder name).
3. Linked social media accounts
When you link a YouTube channel, Clippers asks for your consent once through Google using the youtube.readonly scope. We use that consent for exactly one call (channels.list with mine=true) to establish which channel belongs to your Google account. Immediately afterwards we revoke the access token with Google. We do not request offline access and never receive or store a refresh token; the access token is never written to storage. From your channel we keep only the channel ID, title, handle and avatar URL, all of which are publicly visible on your own channel page. We display these on your profile so you can see which channel is linked. Your clips and view counts are read afterwards using a public API key, without any access to your Google account.
4. Why we process it
We use your data to run campaigns, verify views, pay you out and improve the platform. Payout details are stored encrypted and used only for payouts.
5. How we protect your data
All traffic to and from clippers.nl runs over encrypted connections (HTTPS/TLS) and data is stored encrypted at rest with our hosting providers inside the EU. Payout details are additionally encrypted at the application level. We retain no Google tokens: the access token is revoked immediately after use. Access to production data is limited to a small number of authorised people and runs through separate database roles with least-privilege permissions. Channel linking attempts are logged so that abuse can be traced.
6. Retention and deletion
We keep your data for as long as your account exists. When you unlink a channel, the association between your account and that channel ends immediately. When you delete your account, we delete your personal data, except what we are legally required to retain, such as payout records.
7. Sharing with third parties
We share only what is necessary with payment service providers and with the social platforms for view verification. We never sell your data. Data we receive through Google APIs is used in accordance with the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We do not use this data for advertising, we do not sell or rent it, and we do not use it to train AI or machine learning models. Only you and a limited number of authorised people can view this data, and only where necessary for security, abuse investigation, a legal obligation, or at your own request.
8. Your rights
You have the right to access, correct and delete your data. From your profile you can download all of your data as JSON (GDPR right to data portability) and delete your account.
9. Cookies and analytics
Functional cookies needed to sign in and to make the platform work are always set; these require no consent. In addition we use Google Analytics 4 to measure how the public site is used. Those analytics cookies (_ga and _ga_*) are only set after you click ‘Accepteren’ in the cookie banner, and are kept for at most two years. Until then Google Consent Mode keeps everything set to ‘denied’ and nothing is loaded or measured. Google Analytics does not run in the signed-in part of the platform at all. We measure only which pages are visited; we use no advertising cookies, share nothing for advertising purposes, and Analytics does not store your IP address. Google acts as a processor here. You can change your choice at any time at the bottom of this page; if you decline after having accepted, measurement stops immediately and we delete the analytics cookies that were already set.