Privacy

This site

clip.repair and transfer.clip.repair set no cookies, run no analytics and load nothing from other companies: no chat, no fonts, no tracking. They are hosted by Cloudflare, whose servers see your IP address and browser, as any web server does.

Secure file transfers

For a custom repair we may send you a transfer link: one for sending us your files, or one for collecting the repaired ones. A link is only ever created by a person you are already talking to, and nothing is sent until you choose files and press Send. The transfer page lives on its own address, transfer.clip.repair, which runs nothing else.

Files are encrypted in your browser before they leave your computer, names included. Files you send us are locked with a key that only our team's own computers can open; the link lets you add files, not read them. Files we send you are opened with a key that is part of the link itself, in the piece after the #, which browsers never send to a server; the page takes it out of the address bar as soon as it opens. Our server and its storage hold only the encrypted copies. What the server does keep is the number and size of the files, when they arrived or were first downloaded, and your IP address as our hosting provider sees it, and it tells our team's chat the number and size.

So that an interrupted upload can carry on, your browser keeps the keys of the files you are sending, on your computer only, and forgets them after about three months. The page that does the encrypting is served by us, as with any encryption in a web page, so it protects your files from everyone in between, not from the site itself.

A transfer and everything in it is deleted when its link expires: the page shows the date, usually 30 days, and a link for collecting files closes 7 days after its first download. We may delete it sooner. Files you sent us may be kept for as long as we are working on your case, and are then deleted. Anyone holding a link for collecting files can download them, so don't forward it.

Paying for a repair

A link for collecting a custom repair can carry a price. Its preview (a few frames, a few seconds and what we know about the file) is encrypted like the files and opens straight away; the files themselves unlock once the payment has landed. Paying takes you to Stripe's checkout page and back: Stripe handles your payment details, email and billing address (and a business's VAT number, if you give one) as the payment processor, under its own privacy policy, and sends you the receipt and invoice. All Stripe learns from us is the price and a number that identifies the transfer, never a file or its name. Our server keeps the price, whether and when it was paid, and Stripe's reference for the payment, and forgets them with the rest of the transfer when its link expires; the payment's record stays with Stripe, as our accounts require. The transfer page itself still loads nothing from Stripe.

Questions

clip.repair is run by OTTOMATIC GmbH (address below). To ask what we hold about you, or to have a transfer deleted, write to support@ottomatic.io.