1. Controller and scope
Wilbert Kramer | Marketing + AI is the controller for personal data described in this policy. This policy covers Giflane pages, color extraction, access, support, and—when enabled—paid subscriptions.
2. Your video stays local
Giflane opens, previews, analyses, and renders your video inside your browser. The video file is not uploaded to Giflane’s server and Giflane does not receive or store its contents. The exported file is downloaded by your browser.
Because processing is local, the security of the source file also depends on your device, browser, extensions, and anyone with access to them.
3. Data we may process
When you request website colors, the website URL is sent to our server. The server retrieves public HTML and up to a limited number of public stylesheets to detect colors; it blocks local and private network addresses.
For account access, Clerk may process your email address, name or profile details supplied by Google, authentication identifiers, session information, and security events. Stripe processes payment and billing details. Giflane may receive customer, subscription, invoice, payment-status, and transaction identifiers, but not your full card number. Hosting systems may process IP address, request time, URL path, and device/browser information. If you contact us, we process your message and contact details.
- We do not sell personal data.
- We do not use your video to train AI models.
- We currently use no advertising or behavioural analytics cookies.
- We do not make decisions with legal or similarly significant effects through automated profiling.
4. Purposes and legal bases
We process data to provide and secure the service, respond to requests, extract requested website colors, administer subscriptions, comply with tax and legal duties, prevent abuse, and improve reliability.
The legal bases are performance of a contract or steps you request before a contract, legitimate interests in operating and protecting Giflane, compliance with legal obligations, and consent where the law requires it.
5. Recipients and international transfers
Data may be processed by OpenAI Sites and Cloudflare for hosting and delivery, Clerk for authentication and account management, Stripe for checkout and subscriptions, Umami Cloud for privacy-focused product analytics, and communication or professional-adviser providers where needed.
Some providers may process data outside the EEA. Where required, transfers rely on an adequacy decision, standard contractual clauses, or another lawful safeguard. We disclose data to authorities only where legally required.
6. Retention and cookies
The video is not retained because it is not received. Website URLs are used to answer the request and are not stored in an application database; short-lived infrastructure and security logs may still contain request information. Support records are kept only as long as needed. Account data is kept while your account is active and for a limited period after deletion where needed for security or legal claims. Subscription and invoice records may be retained for the Dutch statutory administration period, generally seven years.
Giflane itself does not set advertising cookies or use browser storage for tracking. When Umami analytics is enabled, Giflane's integration sends only the three product events shown in the interface (`upload_gestart`, `export_gelukt`, and `upgrade_bekeken`) and does not use advertising cookies. Umami Cloud may process standard request metadata needed to deliver analytics. Clerk, hosting, and checkout services may use strictly necessary cookies or similar storage for security, sign-in, payment continuity, and fraud prevention.
7. Your rights and security
Subject to the GDPR and applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. Email info@wilbertkramer.nl; we may ask for proportionate identity verification.
You may complain to the Dutch Autoriteit Persoonsgegevens or your local supervisory authority. We use data minimisation, local video processing, HTTPS, access controls, private-network blocking, and reputable infrastructure, but no online service can promise absolute security.
8. Children, changes, and contact
Giflane is not directed to children under 16. Do not submit someone else’s personal data unless you have a lawful basis.
We may update this policy when the service or law changes. The effective date will be updated and material changes will be highlighted where appropriate. Contact the controller using the details below for privacy questions or requests.