Android Privacy Policy
Last updated:
1. Scope and contact
This policy applies to ClipDock: Web Video Downloader for Android, package com.nightonke.android.clipdock, provided by Weiping Huang (Smith Night). It covers the Android app, its supporting cloud services, and related support requests. The App Store edition has a separate policy. Contact daysinyear@foxmail.com about privacy or request account and data deletion.
ClipDock processes some media locally and sends some information to its services to sign you in, enforce download allowances, verify purchases, resolve links, and understand download failures.
2. Account sign-in and download allowance
You can open ClipDock, browse websites, and manage local files without a ClipDock account. Using the free download allowance requires Google sign-in. A verified Google Play membership can provide paid access without signing in to a ClipDock account.
When you choose Google sign-in, Google provides a sign-in token containing account identity information, which may include your email and profile information. Our server verifies that token. It stores a hashed Google account identifier, remaining free-download balance, download allowance transactions, account timestamps, and sign-in session records. The account database does not retain the raw Google token or your Google profile. Your email is displayed and stored locally in the app. We do not receive your Google password.
The identifier links your allowance across installations. It is pseudonymous, not fully anonymous. A session is valid for up to 30 days unless ended or invalidated earlier. Google handles its services under its Privacy Policy.
Provisioned demo accounts: if we provide you with a demo username and password, the app sends them over HTTPS to our account service for verification. The service retains a salted password hash, a pseudonymous demo account identifier, and session and download-allowance records; it does not retain the plaintext password. The app stores the session securely and does not save the password. Demo accounts can include full Premium access without Google sign-in or a purchase. Demo access can be disabled or its credentials rotated; it uses the same app functionality. These accounts may be shared by the authorized review team. Deleting a demo profile removes its sessions and account-linked history for all users of that profile; the provisioned login remains available to create a fresh profile. Contact support to request permanent removal of the provisioned credentials.
3. Links, websites, and downloaded media
ClipDock uses links you enter, paste, share, or select in the browser to identify downloadable resources. Depending on the source and extraction route, links and related request information are sent to our cloud services and media-link resolution providers, including MeowLoad and SnapAny. Source websites and media hosts receive the network requests needed to open pages and download the content you select, including your IP address and applicable request headers. Browser pages may use cookies and local storage. Where needed to access your selected content, the app may use the source site's cookies or referer information for the media request.
Optional website-login retry: if an eligible YouTube link requires website sign-in, the app explains that tapping Done Logging In sends the necessary YouTube cookies and selected page URL to ClipDock's cloud retry service and its supporting cookie-extraction service. These cookies can represent a signed-in website session. After a successful retry, the app can reuse that locally stored session for later eligible retries until it is cleared or becomes invalid. The account/extraction proxy handles the cookie material for the request without logging or caching it. This website session is separate from Google sign-in for your ClipDock allowance. You can decline the retry or clear website data.
Downloaded or imported videos, audio, thumbnails, local task records, and editing results are stored on your device. The local editing tools do not upload your media files to us merely to trim, convert, or otherwise process them. This does not mean that links or download diagnostics remain only on your device. Files you explicitly share, export, or save to a gallery are also handled by the destination you choose.
4. Download diagnostics and service security
The release app sends extraction and download attempt reports to our cloud service. Reports can include:
- A randomly generated installation identifier; task, request, and attempt identifiers; and retry relationships.
- App version, Android version, device model, language, device region, and an IP-derived country code. Country-level information is not GPS location.
- Source links or identifiers, source host, timestamps, download entry point, extraction route, success/failure/cancellation, error codes, and membership status.
Reports for manually entered or shared links can contain the full input URL, including its query parameters. Encoding a URL with Base64 does not anonymize it. Browser-origin reporting removes URL usernames, passwords, query parameters, and fragments. The diagnostic reports do not include your Google sign-in token, purchase token, website cookies, or media request headers. Those credentials may be processed separately for their intended authentication, purchase, or source-access functions.
We use reports to investigate failures, measure service reliability, and improve supported download workflows. Reporting is enabled in the release app; this version does not provide a user-facing reporting switch. Reports that cannot be sent immediately may be queued locally and retried. Deleting a video from the local library does not delete its diagnostic report.
Google Play Integrity supplies app/device/licensing integrity information used to protect our services against abuse. Network and hosting providers also process connection information such as IP addresses, request times, and security logs.
5. Purchases
Google Play processes payments. ClipDock and its server use purchase tokens, product and entitlement information, and Google verification responses to check membership, restore eligible purchases, and prevent fraud. We do not receive your full payment card details or Google password. The Google Play purchasing account may differ from the Google account signed in to ClipDock. Account deletion does not cancel a subscription or delete your Google Play purchase history.
6. Clipboard, permissions, and local choices
- Clipboard: pasting, foreground link detection, or automatic download uses the clipboard features you enable. The floating paste control is started by you; tap it to read the copied link while another app is open. Close it to stop the floating control.
- Display over other apps: used for the visible floating download control. You can withdraw this permission in Android Settings.
- Foreground services and notifications: keep user-started downloads, media processing, or playback visible while work continues. Controls in the app or notification let you stop the applicable operation.
- Photos and files: system pickers grant access to media you choose; gallery export writes the selected output. Older Android versions may request storage permission for saving files.
You can change available permissions and optional clipboard features, clear browser site data, and remove local media. Disabling a required permission can limit the related feature.
7. Recipients, security, and international processing
Information is handled by us and service providers as needed for the functions above: Google for identity, billing, and integrity; Tencent Cloud/CloudBase for cloud processing and storage; Country.is for IP-based country lookup; link-resolution services for selected links; and website, CDN, and email providers for delivery and support. Source websites and destinations you independently use have their own policies. Information may be processed outside your country, including Hong Kong, mainland China, and the United States.
Our account, purchase-verification, and diagnostic endpoints use HTTPS. Credentials stored by the app use Android Keystore-backed protection where implemented. Source websites may offer unencrypted HTTP content; their transport is controlled by the source. No security measure is absolute. We do not sell personal information. We may disclose information when required by law, to address abuse and protect rights, or at your direction.
8. Retention and deletion
- Local media: remains until you delete it or the relevant app data. Gallery, exported, shared, and backup copies are separate.
- Active account records: retained to maintain your sign-in and download allowance. Session validity is limited as described above; ending a session invalidates access.
- Account deletion: deletes cloud sign-in sessions and account-linked download allowance history and invalidates old sessions. A restricted record of your hashed account identifier, remaining allowance, and necessary deletion/security state is retained to prevent repeated free allowances and unsafe deletion retries. This is retained pseudonymous information, not anonymization. There is no fixed automatic expiry for the anti-abuse balance record; it is retained while needed to enforce that allowance, subject to applicable deletion rights.
- Download diagnostics: held separately from Google account records and associated with an installation identifier. This version does not automatically erase them when you delete a video or ClipDock account, and no fixed automatic deletion interval is currently applied. You can request deletion; we may need limited information to identify the installation or reports concerned. We explain any information that must be retained for security or legal reasons.
- Support and infrastructure records: kept as needed to respond, resolve issues, secure services, or meet applicable obligations. Provider-managed logs and backups may have separate retention cycles.
See Delete your ClipDock account and data for the in-app path and a web-accessible request method. You do not need to reinstall the app to initiate a request. Deleting an account does not remove local videos, delete your Google account, or cancel a Google Play subscription. We cannot remotely erase copies stored only on your device or in third-party destinations.
9. Your rights and support
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a copy of personal information we hold. Email daysinyear@foxmail.com. We may request the minimum information needed to verify your identity and locate the relevant data. Do not send passwords, sign-in tokens, payment card numbers, or unnecessary private media. If you contact support, we receive your email, message, and any attachments you choose to send.
ClipDock is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and handle it appropriately. We will update this policy when our practices change and provide notice or obtain consent where required. See the Android Terms of Use.