Privacy Policy

1. Who we are

MetaClip ("we", "us") runs metaclip.app, a marketplace where Roblox game studios fund campaigns and creators are paid for views on clips they post. We decide how your personal data is used, which makes us its controller under UK and EU data protection law.

Questions and requests: support@metaclip.app. Terms used here, such as campaign, clip and studio, mean the same as in the Terms of Service.

2. What we collect

Your account

• Name, email address, phone number if you add one, profile picture, and how you sign in (for example Google or Discord), held through our sign-in provider Clerk.
• Whether you are a creator, studio or referral partner, your onboarding answers, settings and email preferences.

Connected social accounts (creators)

You choose which accounts to connect. Access is read-only: we never post, comment or message as you. For each, we store the access tokens that keep the connection working, and:

• TikTok (user.info.basic, user.info.profile, user.info.stats, video.list): account ID, username, display name, profile picture, follower, like and video counts, your videos and their view, like, comment and share counts.
• Instagram (Instagram Login with instagram_business_basic and instagram_business_manage_insights; Business or Creator accounts only): account ID, username, account type, profile picture, follower and post counts, your posts and their insights such as views, reach, likes, comments, shares and saves, and audience breakdowns by age, gender and country.
• YouTube (youtube.readonly and yt-analytics.readonly): channel ID, name, handle, picture and subscriber count, your videos and their statistics, and audience breakdowns by age, gender and country.

From these we work out figures such as your average and median views. Audience breakdowns are percentages for the whole account, not data about individual viewers.

Clips and earnings

• The clips you submit: link, cover image, caption, length, posting time, hourly view, like, comment and share history, and review decisions and reasons.
• At submission, your time zone and a snapshot of the account's follower and view figures.
• Daily earnings, withdrawals and fees.

Payouts

• Stripe Connect: your Stripe account ID, country, currency and status. Stripe collects and holds your bank and identity details; we don't see them.
• Wise (countries Stripe doesn't cover): the account holder name, country, currency and bank details you enter, which we pass to Wise. We keep a masked summary and a keyed one-way hash of the bank details.
• Tax details if we have to collect them (Terms, section 12).

Studios

• Studio applications: studio name, contact details, game link, message and a hashed IP address.
• Organisation name, logo and members, invitations, campaigns and their briefs, and payment records from Stripe (we never see full card numbers).
• Creator panel: a one-way hash of your game key, the game's settings, and a log of each use (creator, Roblox user ID, what was used, when and the result).

Roblox and Discord

• If you link Roblox (by signing in with Roblox), your Roblox user ID, username and display name. We cancel the Roblox sign-in grant straight away and keep no Roblox tokens.
• If you link Discord, your Discord user ID, username and tokens, used to give you roles in the MetaClip Discord server. We don't read your messages.

Referrals

• Which link or code brought you to MetaClip and when, stored in cookies (section 10) and on your account.
• For referral partners: commission records and the PayPal email address payouts go to.

Security and fraud prevention

• IP addresses and device identifiers from sign-ins, submissions and payout set-up. We keep IP addresses as keyed hashes where we can.
• Signals that several accounts share a device, network or bank details, and the results of our integrity checks (section 4).
• For suspended accounts, the identifiers linked to them (emails, phone numbers, social account IDs, device and network hashes, payout details), so the same person can't open a new account.

Messages and usage

• Emails, support messages and calls with us, and a record of which emails we sent you and whether they were opened or clicked.
• In-app notifications (deleted after 90 days).
• Page views and performance measured by Vercel Analytics, which counts visits without cookies and without identifying you.

3. Why we use it, and our legal basis

• To run your account and the marketplace (contract): verifying that clips belong to you, tracking views, showing studios your submissions, calculating and paying earnings, charging studios and running referrals.
• To prevent fraud and keep MetaClip secure (legitimate interests in protecting studios' budgets and honest creators): integrity checks, rate limits and blocking ban evasion.
• To meet legal duties (legal obligation): accounting and tax records, tax reporting, sanctions checks and responding to lawful requests.
• To understand and improve MetaClip (legitimate interests): aggregate statistics on clips, campaigns and site use, including features of clips such as length, caption and posting time.
• To tell you about new campaigns (legitimate interests, or consent where the law requires it): you can turn these emails off at any time from any email or your settings. Service emails about your account, clips and payouts are part of the service.

4. Integrity checks

Automated checks look for signs of fake or bought views: low engagement for the views, late view spikes, views being removed, heavy replays, unusual outside traffic, deleted clips, and devices, networks or bank details shared between accounts. A check only flags a clip or account. A person reviews every flag and makes the decision, and you can appeal it (Terms, section 8). We don't make decisions with legal or similarly significant effects about you by automated means alone.

5. Who sees your data

Studios

When you submit a clip, the studio running the campaign sees your handle, display name and picture, your follower and view figures, the clip and its statistics, and your earnings on its campaign. Studios may also be shown your accounts' audience breakdowns. Studios may only use this to run their campaigns.

The public

Public campaign pages show approved clips with the creator's public handle, the clip's views and what it earned, and the campaign's top earners with handle, picture, views and earnings. MetaClip's homepage and marketing may show creators' profile pictures and combined statistics. Clips are already public on the platform they were posted to.

Service providers

These process data for us under contract and only on our instructions:

• Clerk: sign-in and accounts
• MongoDB Atlas: database
• Vercel: hosting, file storage and cookieless analytics
• Upstash: rate limiting and caching
• Stripe: studio payments and creator payouts
• Wise: payouts outside Stripe's countries
• PayPal: referral payouts
• Resend: sending and receiving email
• Discord: our community server and internal team alerts
• Cal.com: booking calls with us

Platforms and others

We exchange data with TikTok, Meta, Google and Roblox as needed to keep your connections working, and with tax authorities, regulators, courts or police where the law requires or to protect people from harm or fraud. If MetaClip is sold or merged, your data would pass to the new owner under this policy. We do not sell personal data, share it for advertising, or use ad pixels.

6. Google and YouTube

MetaClip uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to Google's handling of your data. MetaClip's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

We use YouTube data only for the purposes in this policy and never for advertising. You can remove MetaClip's access at any time in your Google account settings. We refresh or delete stored YouTube API data at least every 30 days. If you ask us to delete it, we do so within 7 days; if you remove access through Google, within 30 days.

7. International transfers

Several providers above are based in, or store data in, the United States and other countries. Where data leaves the UK or EEA we rely on adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Addendum and EU Standard Contractual Clauses.

8. How long we keep it

• Account data: while your account is open, then deleted when you ask, except what the rows below require us to keep.
• Connected accounts: while connected and for as long as needed to track your clips; YouTube data as in section 6. Deleted on request.
• Clips, earnings and payouts: 6 years after the end of the financial year they relate to, as UK tax law requires.
• Studio payment records: 6 years, for the same reason.
• Security data: device identifiers up to 2 years; identifiers of suspended accounts for as long as the suspension lasts.
• Notifications: 90 days.

After that we delete data or make it anonymous; anonymous campaign totals may stay on the Platform.

9. Your rights

Under UK and EU data protection law you can ask for a copy of your data (including in a portable format), and ask us to correct it, delete it, restrict how we use it, or stop using it for purposes based on legitimate interests. Where we rely on consent you can withdraw it at any time. US state laws such as California's give similar rights to know, correct and delete; we don't sell or share personal data as those laws define it.

Email support@metaclip.app from your account email. We answer within one month, or tell you within that month if we need longer. We won't treat you differently for using these rights. To delete data, see Data deletion.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

10. Cookies

We set these cookies ourselves, alongside Clerk's sign-in cookies. We use no advertising cookies.

• Sign-in and settings (Clerk session cookies, current organisation, dashboard view): needed for the site to work.
• Security (mc_did, up to 2 years; mc_sd, up to 5 years): identify a device to detect fraud and ban evasion.
• Referral attribution (mc_src, 180 days; mc_aff, 60 days; mc_vid, 1 year): record which link or referral partner brought you, so partners are credited.

You can block or delete cookies in your browser. Blocking sign-in cookies stops you signing in.

11. Children

MetaClip is only for people aged 18 and over. We don't knowingly collect data from anyone younger. If we find an account belongs to someone under 18, we close it and delete its data. Tell us at support@metaclip.app if you think this has happened. When a player joins a Roblox game with the MetaClip creator panel, the game sends us their Roblox user ID only to check whether they have panel access. For players who aren't MetaClip creators we keep nothing beyond a rate-limit counter that expires within minutes.

12. Security

Data is encrypted in transit, access tokens and secrets are held server-side, game keys are stored only as hashes, and staff access is limited. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the regulator as the law requires.

13. Changes

We may update this policy. For material changes we tell you by email or on the Platform before they take effect. The date at the top shows the current version.