Privacy Policy

1. Who is responsible for your data

FAST-VID is an independent media utility. The current repository does not identify a legal company, registered address, governing jurisdiction or data protection officer. Those details must be supplied by the operator before this policy is finalized.

[REQUIRES OPERATOR REVIEW: legal entity name, registered address, jurisdiction, data controller identity and data protection contact.]

General support, privacy questions and copyright enquiries can be sent to support@fast-vid.com. No guaranteed response time is currently offered.

2. What FAST-VID processes

FAST-VID does not require an account. It creates an anonymous first-party browser session so download jobs and file links remain associated with the browser that started them.

• Session data: a random session identifier, a hash of the session token, a hash of the visitor IP address, creation and last-seen times, and an expiry time.
• Job records: the source URL you submit, title, selected format and output type, status, timestamps, filename and size, job and session identifiers, worker identifier, the visitor IP address recorded with the job, and sanitized metadata returned by the media processing worker.
• Temporary media: a completed video or audio file is stored on the server only so it can be previewed or downloaded. Completed media is not intended to be a permanent library.
• Rate-limit data: hashed session or IP keys, counters, time windows and daily usage counters used to limit abuse and keep the service available.
• Operational logs: Caddy's access log records timestamps, request methods, request URIs, response status, client IP addresses, user agents and request or response headers. The configured log filters replace the values of the X-CSRF-Token, Authorization, Cookie and Set-Cookie headers with REDACTED, and replace the values of the token, preview_token and download_token query parameters. Other request headers, such as User-Agent, Referer, Origin and Accept, may still be recorded. Uvicorn's access log records the client address, request line and status; it does not record request headers, and the application redacts token query values in that request line. Caddy runtime and proxy error logs apply the same query and header filters. These logs can contain personal data, including IP addresses, and are retained according to the server and Docker logging configuration described below.
• Support correspondence: information you choose to send to the support address.
• Optional analytics: if you affirmatively accept analytics, FAST-VID loads Google Tag Manager container GTM-KLH45BKB. Google may process analytics/tag data under its own terms. No optional analytics is loaded before that choice. Your choice and a timestamp are stored in browser local storage under fastvid.analytics-consent.v1. [REQUIRES OPERATOR REVIEW: Google processing, cookies, retention, international transfers and legal basis.]

FAST-VID does not import platform login cookies, does not log in to YouTube, TikTok or Instagram, and does not bypass DRM, paywalls, private content or other access restrictions.

3. Why the data is used

• To look up metadata, queue downloads, report progress, and deliver requested files.
• To keep jobs and download links tied to the correct anonymous browser session.
• To enforce rate limits, prevent abuse, investigate failures and protect the service.
• To respond to support, privacy and copyright enquiries.
• To comply with applicable legal obligations.

[REQUIRES OPERATOR REVIEW: legal bases for processing, retention justification and any jurisdiction-specific requirements.]

4. Cookies and sessions

The production session cookie is named __Host-ydl_session. It is first-party, HttpOnly, Secure, SameSite=Lax, has Path=/ and no Domain attribute, and expires after the configured session lifetime, which defaults to 24 hours. The raw session token is not stored in the database; only a hash is stored.

The CSRF token used for state-changing requests is returned in an API response and sent in a request header. It is not a separate cookie. See the Cookie Policy for more detail.

5. Retention and automatic cleanup

Automatic expiry and cleanup are not the same as a user-facing deletion-request process. FAST-VID currently provides no self-service account or data-deletion tool. If you contact support about deletion, handling is manual and depends on the operator's procedures. [REQUIRES OPERATOR REVIEW: data-subject request intake, identity verification, deletion scope, response timeline and exceptions.]

6. Sharing and third parties

FAST-VID does not sell personal data. The service depends on infrastructure and media-processing components that may process limited data:

• The hosting provider and server environment, including Docker and the Caddy reverse proxy.
• A worker process that contacts supported public media sources through an egress proxy. The source platform receives the requested public URL and network request metadata from the server environment, not your browser session cookie.
• Support email providers and any infrastructure provider used to receive correspondence.
• Google, only when you affirmatively accept optional analytics and the Google Tag Manager container loads its configured tags.
• Authorities or other parties where disclosure is required by applicable law.

FAST-VID does not load optional third-party analytics before an affirmative analytics choice. Advertising scripts and advertising cookies are not active; the first-party advertising analytics system is separate from Google Tag Manager. If analytics or advertising practices change, this policy and the Advertising Policy must be updated before deployment.

[REQUIRES OPERATOR REVIEW: hosting provider identity, processor agreements, international transfers, email provider, and any other subprocessors.]

7. Security

FAST-VID uses hashed session and download tokens, secure cookie settings in production, session-bound job access, rate limits, private Docker networks and server-side validation. Hashed IP and session keys are pseudonymous identifiers, not a claim of anonymity: they can still support rate limiting, abuse investigation and linkage within the service. No internet service can guarantee absolute security, and this policy does not claim complete anonymity or zero data collection.

8. Your choices and rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to certain processing, or to lodge a complaint with a supervisory authority. The repository does not currently implement a formal request workflow. You can contact support@fast-vid.com; requests are handled manually.

[REQUIRES OPERATOR REVIEW: applicable privacy rights, verification process, response timelines, authorized agent process, and any exemptions.]

9. Children

FAST-VID is not designed as a children's service. The minimum age and any parental-consent requirements have not been established by the operator.

[REQUIRES OPERATOR REVIEW: minimum age, parental consent and children's-data requirements.]

10. Changes and contact

This draft may be updated as the service, infrastructure or legal requirements change. The last-updated date appears at the top of the page. Questions can be sent to support@fast-vid.com.

Read the related Terms of Service, Cookie Policy, Acceptable Use Policy and Copyright & Takedown pages.