Privacy Policy

📋 Introduction

freeviddown ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have regarding your personal information.

This policy applies to all users of freeviddown, including visitors who use the service without registration and registered account holders. It covers all interactions with our website at freeviddown.com and any related services.

1. Information We Collect

1.1 Information You Provide

• Video URLs: The URLs you paste into the download box are processed temporarily to extract download links. They are not stored permanently.
• Account Information: If you register, we collect your email address and a password (stored as a bcrypt hash, never in plain text).
• Contact Form Data: If you use our contact form, we collect the information you provide (email, message type, and message content).
• Feedback: Bug reports, feature requests, and other feedback you voluntarily submit through our platform.

1.2 Information Collected Automatically

• IP Address: Collected for rate limiting, abuse prevention, and security. Not linked to download activity.
• Browser Information: User-Agent, browser type, and version — used for compatibility and debugging.
• Device Information: Screen resolution, operating system — used to optimize the user experience.
• Usage Analytics: Page views, feature usage patterns, and session duration — collected via privacy-respecting analytics (Umami).
• Language Preference: Your selected language is stored locally in your browser to remember your choice.

1.3 Information We Do NOT Collect

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: Processing your download requests and delivering video files
• Authentication: Managing user accounts, login sessions, and password reset
• Security: Preventing abuse, detecting attacks, rate limiting, and blocking malicious actors
• Service improvement: Understanding usage patterns to improve features and performance
• Communication: Responding to contact form messages and support inquiries
• Legal compliance: Meeting legal obligations and responding to lawful requests from authorities

We process your data based on: (a) your consent, (b) the necessity to perform our service, (c) our legitimate interests in security and service improvement, and (d) legal obligations.

3. Cookies and Local Storage

freeviddown uses the following types of cookies and browser storage:

Essential Cookies

• Session cookie: Maintains your login session (for registered users)
• CSRF token: Prevents cross-site request forgery attacks

Functional Storage (Local Storage)

• Theme preference: Your dark/light mode selection
• Language preference: Your selected language (out of 14 supported languages)
• Download history: Cached locally in your browser for convenience (not sent to our servers)

Analytics

We use Umami Analytics, a privacy-focused, cookie-free analytics platform. It does not use cookies, does not track users across websites, and is GDPR-compliant by design. No personal information is collected by our analytics system.

4. How We Protect Your Data

We implement industry-standard security measures to protect your data:

• HTTPS/TLS Encryption: All connections to freeviddown are encrypted in transit
• Password Hashing: Passwords are hashed using bcrypt with salt — we never store plain text passwords
• Rate Limiting: Protection against brute-force attacks and excessive requests
• Input Validation: All user inputs are sanitized to prevent injection attacks
• CSRF Protection: Cross-site request forgery tokens on all state-changing operations
• Minimal Data Collection: We only collect data necessary for operating the Service
• Regular Security Audits: Our codebase undergoes periodic security reviews

5. Data Retention

We retain data only as long as necessary for the purposes outlined in this policy:

• Download URLs: Processed in real-time, not stored permanently
• Account data: Retained until you delete your account
• Server logs: Automatically purged after 30 days
• Contact form messages: Retained for up to 12 months to track support requests
• Analytics data: Aggregated, anonymized, no personal identifiers retained

6. Third-Party Services

freeviddown interacts with the following third-party services:

• Video Platforms: We access YouTube, TikTok, Instagram, Facebook, Twitter, and 1800+ other platforms to extract download links. We do not share your personal information with these platforms.
• Content Delivery Networks (CDN): We use CDNs to serve static assets quickly. CDNs may collect anonymized access logs.
• Umami Analytics: Privacy-respecting analytics. No cookies, no personal data collection. Umami Privacy Policy
• Google Fonts: We use Google Fonts for typography. Google may collect anonymized usage data. Google Privacy Policy

We carefully review the privacy practices of all third-party services we integrate with and only partner with services that maintain strong privacy standards.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Request your data in a portable format
• Right to Object: Object to certain types of data processing
• Right to Withdraw Consent: Withdraw your consent at any time

To exercise any of these rights, please contact us through our Contact page. We will respond to your request within 30 days.

8. International Data Protection

GDPR (European Economic Area): If you are a resident of the EEA, you have additional rights under the General Data Protection Regulation (GDPR). We process your data based on legitimate interests and consent. You have the right to lodge a complaint with your local Data Protection Authority.

CCPA (California, USA): California residents have the right to know what personal information is collected, request deletion of personal information, and opt out of the sale of personal information. Note: We do not sell personal information.

LGPD (Brazil): Brazilian users have rights similar to GDPR under the Lei Geral de Proteção de Dados. We comply with applicable LGPD requirements.

9. Children's Privacy

freeviddown is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13 without parental consent, we will delete that information immediately.

Users between 13 and 18 should use the service under the supervision of a parent or guardian. Parents who believe their child has provided personal information may contact us to have it removed.

10. Data Breach Notification

In the unlikely event of a data breach that may affect your personal information, we will notify affected users via email (for registered users) and/or a prominent notice on our website within 72 hours of becoming aware of the breach, as required by applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify users by posting a prominent notice on our website and updating the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

12. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us through our Contact page. Select "General Inquiry" as the request type and mention "Privacy" in your message.

We are committed to resolving all privacy-related inquiries within 30 days. For GDPR requests, we will respond within the required timeframe as specified by applicable law.