Privacy policy
We do not track you, sell your data, or build user profiles. Your sessions and files are strictly ephemeral.
Anonymous sessions and no accounts
DownReels does not offer user accounts or logins. Sessions are established using an anonymous, high-entropy cryptographic token stored in an HttpOnly, SameSite=Lax cookie. The server stores only an irreversible cryptographic hash of this token to enforce rate limits and CSRF protection.
Data retention lifetimes (TTL)
We enforce strict, automated data retention limits:
• Analysis metadata and submitted source URLs: Expire and are permanently wiped after 10 minutes.
• Prepared video artifacts: Stored on temporary disk and securely deleted after 30 minutes by our background janitor service.
• Download tickets: Single-use tokens valid for exactly 60 seconds.
• Session records and rate limit counters: Expire within 24 hours.
• Server access logs: Retained for up to 7 days for security diagnostics, with all source URLs, query parameters, and tokens automatically redacted.
Zero third-party tracking
Advertising is disabled by default. We do not load third-party analytics trackers, social sharing widgets, or behavioral profiling scripts. Submitted video links are never shared with external advertising networks.