Privacy policy

Last updated: 21 October 2026 · Deutsche Fassung (if the two versions differ, the German version applies)

1. Controller

DI Lorenz Kutschka (sole proprietorship)
Untere Teichstraße 38a/2
8010 Graz, Austria
Email: [email protected]

We have not appointed a data protection officer and are not legally required to. For any privacy question, reach us at the email address above.

2. Visiting the website

Hosting

The website and the app are served via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). On every visit, Cloudflare processes technically necessary data such as your IP address, time, requested address and browser identifier in order to deliver the pages and fend off attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. Cloudflare's privacy policy

Fonts and scripts

We serve fonts and program libraries from our own server. Loading a page sends no data to Google Fonts or other third parties.

Emails to us

Messages to triptrim.app addresses are forwarded to our inbox by Cloudflare (Email Routing). We use them only to answer your request.

3. Google Analytics (only with your consent)

On your first visit, a banner asks whether we may use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). It is only loaded if you agree. We then see which pages are visited and at which steps visitors drop off, for example whether a finished film gets watched. Advertising features and ad personalisation are switched off. Google Analytics sets cookies for this (_ga, _ga_*, lifetime up to 2 years).

With your consent, we also store in your browser which test group you belong to and how many films you have made, so we can compare changes to the site.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) Austrian Telecommunications Act 2021). Google may transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework. Google's privacy policy

Withdrawal: You can withdraw your consent at any time. Withdraw consent now. After that, we no longer load Google Analytics, and the banner appears again.

4. What else your browser stores

Without consent, we only store what is needed for the service to work (Section 165(3) Austrian Telecommunications Act 2021):

• an anonymous sign-in identifier (Firebase Authentication), so that only you can see your order and your film,
• your chosen language for the current session,
• your email address once you have entered it, so the film link works on this device without entering it again,
• your answer in the cookie banner.

5. When you make a film

What we process

• your video clips with picture and sound, plus file name, length and size,
• your choices (pace, music),
• your email address, to send you the finished film,
• an anonymous user identifier and an access key for the link in the email,
• the result of the AI analysis: selected scenes with timestamps, detected speech passages with a short summary of what was said, and one sentence on the content of each clip,
• the finished film, a preview image and the edited scenes it is made of,
• technical details about the upload, to find upload problems: rough browser type (such as “iPhone Safari”), number and size of files, error codes, whether an upload stalled and whether the page was in the background meanwhile. No file names.

The legal basis is the performance of our contract with you, i.e. making your film (Art. 6(1)(b) GDPR). Please only upload clips you are allowed to use. If other people can be seen or heard, they should agree to it. We do not analyse faces or voices to identify people.

Where the data is kept

We store and process clips, films and order data with Google Cloud and Firebase (Google Ireland Ltd.) in data centres in the EU (Belgium and the Netherlands). Some services, such as sign-in and server logs, may also be processed outside the EU; Google LLC is certified under the EU-US Data Privacy Framework. Transfers are encrypted. We have a data processing agreement with Google.

Analysis by an AI

To find the best moments, TripTrim sends a scaled-down copy of each clip (480p, 10 frames per second, mono sound) to the service OpenRouter (OpenRouter, Inc., USA). OpenRouter forwards it to Google's Gemini model. The AI suggests scenes, detects speech passages and briefly summarises what happens in the clip; your film is built from this.

According to OpenRouter, it does not keep image, audio or video files longer than needed to forward them and does not use them for training. OpenRouter bases the transfer to the USA on the European Commission's Standard Contractual Clauses (Art. 46 GDPR). Google processes the data as the model provider under its own terms. OpenRouter's privacy policy

There is no automated decision with legal effect on you (Art. 22 GDPR). The AI only decides which scenes end up in your film.

Emails about your film

For your order, we send you these messages: when your film is ready, if something went wrong, after a purchase, after a change, and once shortly before your film is deleted. We send them via Resend (Plus Five Five, Inc., USA), which processes your address and the message content to deliver it. Resend is certified under the EU-US Data Privacy Framework; we have a data processing agreement with Resend. The legal basis is Art. 6(1)(b) GDPR.

Feedback email

Two days after your film, we ask you once by email how you like it. In return for your feedback, we unlock the film without watermark. This email is advertising for our own offer. Under § 174(4) of the Austrian Telecommunications Act (TKG 2021), we only send it to addresses you gave us for an order. You can tick a box when you enter your address to say you don't want it, and you can unsubscribe with one click in every such email. The legal basis is our legitimate interest in improving TripTrim (Art. 6(1)(f) GDPR). If you unsubscribe, we store a checksum (SHA-256) of your address, not the address itself, so we don't ask you again for later orders.

How your film is received

On the order, we record whether and how often the film page was opened, whether you downloaded the free version or tapped the buy button, and your optional feedback on the film. We use this to improve TripTrim (legitimate interest, Art. 6(1)(f) GDPR). This information is deleted together with the order.

6. Payment

If you buy your film, you pay via Stripe. Stripe acts as the seller (merchant of record) and processes your payment and billing data under its own responsibility (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, and Stripe, Inc., USA). From Stripe we only receive confirmation of the payment with amount, currency and a transaction number, never your card details. So that Stripe can match the purchase to your film, we pass on your email address and the order number. The legal basis is Art. 6(1)(b) GDPR. Stripe is certified under the EU-US Data Privacy Framework. Stripe's privacy policy

7. How long we keep data

Before deleting, we record an anonymous statistic, for example number and length of clips, chosen pace, length of the film and whether it was bought. It contains no email address, no identifier, no file names and no content, and cannot be traced back to you.

Want your data deleted sooner? Write to [email protected] and we will delete your order right away.

8. Recipients at a glance

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just write to [email protected].

If you believe we are not processing your data correctly, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at. You can also contact the supervisory authority in the country where you live.