Privacy Policy
Last updated November 12, 2026
Short version. We collect your email, a hashed password, and a simple record of the videos you make. We don't sell your data. We don't store songs, and we never see your finished video. Card details go straight to Stripe.
What we collect
- Account: your email address and your password, stored only as a salted hash. We can't read your password.
- Plan and billing: your plan, its status and renewal date, and Stripe's customer and subscription IDs. Your card number is entered on Stripe's page and never reaches us.
- Usage: for each video, the song title and artist, the voices, a random seed and the time. This is how we count your weekly limit.
- Creator badge (Unlimited): if you add one, the profile picture you upload (shrunk to a small square) and the username you type. They are only used to draw your badge in the videos you make, and you can remove them any time.
- Saved voices: the voices you've used (name, picture and how often), so you can pick them again quickly. You can remove any of them in the voice picker.
- Security data: your IP address is kept briefly (up to 24 hours) to limit sign-in, sign-up and password-reset attempts. Our server logs may also record IP addresses and requests for a short time.
What we don't collect
- We don't host or store songs. Audio we fetch to build your video is temporary and deleted automatically within 60 minutes. See how songs work.
- We don't receive your finished video. It's rendered in your browser and saved on your device.
- We don't use advertising or analytics trackers.
Cookies
We set one cookie, to keep you signed in. It's essential to the service, so there's no cookie banner. It's HttpOnly, and expires on its own if you stop using the site.
Who else handles data
- Stripe processes payments and subscriptions.
- Our email provider delivers the sign-up and password-reset emails we send you.
- Apple provides song search, charts and artwork. Your searches are sent to Apple's public search service by our server, not tied to your account.
- Our voice service, run by us, receives the clip you chose and the voice to apply.
- Google Fonts and cdnjs deliver our typefaces and the physics library to your browser, so those services can see your IP address when a page loads.
- Our hosting provider runs the servers.
We don't sell your personal information or share it for advertising.
How long we keep it
- Account, plan, usage and saved voices: until you delete your account.
- Temporary audio: deleted automatically within 60 minutes.
- Reset and confirmation links: expire within an hour and 7 days, and work once.
- Billing records: Stripe and tax rules may require Stripe or us to keep invoices for some years after you delete your account.
Your choices
- Change your password or delete your account any time from the Account page. Deleting cancels your subscription and removes your account, usage record and saved voices.
- To ask for a copy of your data, or to correct it, email support@marblecut.app.
- Depending on where you live (for example the EU, UK or California) you may have additional rights to access, correct, delete or port your data. Email us and we'll help.
Children
marblecut.app isn't for children under 13. If you think a child has made an account, email us and we'll delete it.
Security
Passwords are hashed, connections should be served over HTTPS, and sign-in is rate limited. No system is perfectly secure, so use a password you don't use elsewhere.
Changes and contact
If we change this policy in a meaningful way we'll update the date above and tell you. Questions: support@marblecut.app.