Privacy Policy

What we collect

• Account data from Google sign-in: your name, email address, profile picture and Google account ID. We request only the openid, email and profile scopes. We never see your Google password and get no access to your Gmail, Drive, contacts or any other Google data.
• Your content: prompts, scripts, uploaded files, links you submit, and the projects and videos we generate for you.
• Usage and billing records: credit balance, credit transactions, jobs you ran, and connected social accounts you choose to link for scheduling.
• Technical data: IP address, browser type and request logs, used for security, abuse prevention and rate limiting.

Cookies

We use only strictly necessary cookies: ls_session keeps you signed in, and ls_oauth protects the Google sign-in flow for ten minutes. We use no advertising or cross-site tracking cookies.

How we use it

• To run the service: generate, edit, render, store and (when you ask) publish your videos.
• To keep your account, credits and billing accurate.
• To protect the service against fraud, abuse and attacks.

We do not sell your personal data, and we do not use your content to train our own models.

Public Reels

AI videos you create may appear in the public Reels gallery. You can turn this off before generating, and remove any video from Reels at any time from your Library. Videos we detect as showing real people, and presenter clips made from uploaded photos, are kept off Reels.

Who processes your data

We use these providers to run shitShorts, each only for the purpose listed:

• Vercel — hosts the website.
• Cloudflare — DNS, network security, and hosting of our backend and file storage.
• Neon — our database.
• Google — sign-in.
• AI model providers (through OpenRouter and video-model APIs) — receive the prompts and media needed to generate your content.
• Social platforms you connect — receive the videos you choose to publish.

Retention and deletion

We keep your account and content while your account is active. Email hello@shitshorts.com from your account address to get a copy of your data or to delete your account; we delete it within 30 days, except records we must keep by law (such as payment records).

Security

All traffic is encrypted with TLS. Sessions are signed, database access is restricted, and every endpoint is authenticated and rate-limited. No system is perfectly secure; if you believe you have found a vulnerability, please tell us at hello@shitshorts.com.

Children

shitShorts is not intended for anyone under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes and contact

We will post changes here and update the date above. Questions: hello@shitshorts.com.