Privacy Policy

Effective date: October 5, 2026

Operator: CompilationCreator, operated by Raymond Galpin ("we", "us", "our")

This policy explains what personal information CompilationCreator collects, why, who else handles it, and your choices. It covers the website at compilationcreator.com, purchases, the license server at license.compilationcreator.com, our emails, and the CompilationCreator desktop app.

Questions or requests: support@compilationcreator.com.

The short version

• Your videos stay on your computer. They never pass through our servers.
• The website has no accounts and uses no analytics or tracking cookies.
• Paddle handles payment. We never see your card details.
• To manage your license we keep your email address, your order IDs, and a one-way hash that identifies your computer.
• The app sends no telemetry or crash reports.
• We don't sell your personal information, and we don't send marketing emails.

1. The website

compilationcreator.com is hosted on Cloudflare Pages. There are no user accounts, and we use no analytics or tracking cookies.

Like any web host, Cloudflare processes request data, such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse.

If you open Paddle's checkout on our site, Paddle may set its own cookies. Paddle's privacy policy governs those.

The website's "lost key" and "resend download links" forms send the email address you type to our license server (see section 3).

2. Purchases

Paddle.com is the Merchant of Record for all orders. Paddle collects your name, email address, billing address or country, and payment details, and handles payment, invoicing and sales tax. Paddle's own privacy policy governs that information.

Paddle shares with us:

• your email address;
• your country;
• your Paddle customer ID, transaction ID and, for subscriptions, subscription ID;
• which product you bought.

We never receive your card or bank details.

3. The license server

The license server runs on Cloudflare Workers with a Cloudflare D1 database, at license.compilationcreator.com.

What it stores about each license:

• your email address;
• your Paddle customer, transaction and subscription IDs;
• a hash of your license key. The plain key is never stored on the server;
• the license status (active or revoked) and, for subscriptions, when it is paid until;
• the product (Lifetime or Supporter);
• when it was activated, and when the app last checked in;
• a device identifier: a one-way hash of your computer's system ID. The system ID itself never leaves your computer, and the hash can't be turned back into it;
• records of reset links and download links (stored as hashes), with when they were created, used or expire.

What else it receives:

• the app version, when you activate;
• your IP address, which the server uses to limit repeated requests (for example, too many activation attempts). The rate-limit records store a hash of the IP address rather than the address itself, and they are deleted daily;
• Paddle's notifications about orders, refunds and chargebacks. We keep each notification's event ID so the same event isn't processed twice.

Cloudflare also processes request data, including IP addresses, to run and secure the service. Our server logs are designed not to include license keys, email addresses or device identifiers.

What the app sends and when. The app contacts the license server when you activate it, when you deactivate it, and when it checks in. While the app is running and online, it checks every 6 hours whether a check-in is due, and checks in about once a week. A check-in sends only the signed activation certificate the server issued (it contains your license ID and device identifier).

4. Email

We send email through Resend. We send only messages you need: your license key, download links, reset links, and replies to support requests. We don't send marketing emails.

Downloads of the installer come from private Cloudflare R2 storage through links that expire.

5. The desktop app

The app works on your computer. It stores these things only on your computer:

• the channels and videos you browse;
• your compilation history (usage.json);
• the videos it downloads and the files it makes;
• your license certificates and a masked copy of your license key showing only its last 5 characters (licensing.json);
• a local log file for troubleshooting.

We can't see any of this. Deleting the app's data folder removes it.

YouTube. The app contacts YouTube directly to list channels and download videos. YouTube receives your IP address and request data, under Google's privacy policy. We are not affiliated with YouTube or Google.

Browser cookies. If YouTube needs you to be signed in, the app can read YouTube cookies from a browser on your computer. It reads them locally and sends them only to YouTube, never to us.

No telemetry. The app does not send usage analytics, telemetry or crash reports.

6. Why we use your information

• To provide what you bought: deliver your license key and downloads, activate the app, move a license between computers, and handle support.
• To prevent fraud and abuse: enforce the one-device limit, revoke licenses after refunds or chargebacks, and rate-limit requests.
• To meet legal obligations, such as tax and accounting rules, and to respond to lawful requests.

We don't sell or rent personal information, and we don't share it for cross-context behavioral advertising.

7. Who we share it with

We share personal information only with service providers that help us run CompilationCreator, and only as needed:

We may also disclose information if the law requires it, to protect our rights or others' safety, or as part of a sale or transfer of the business (in which case this policy continues to apply).

8. How long we keep it

• License records are kept for as long as the license exists, and afterwards as long as needed for tax, accounting and fraud-prevention purposes. Paddle keeps its own transaction records.
• Rate-limit records are deleted daily.
• Reset and download link records expire (reset links after 24 hours, download links after 7 days) and expired records are cleaned up.
• Support emails are kept as long as needed to help you and keep a record of what was agreed.

You can ask us to delete your information (see section 9). Deleting your license record ends that license, so the app may stop working when it next checks in. We may need to keep some information to meet legal obligations or prevent fraud.

9. Your rights

Email support@compilationcreator.com to make any request below. We may need to confirm you control the email address on the license before acting. We won't treat you differently for using your rights.

Everyone

You can ask us to tell you what we hold about you, correct it, or delete it.

EU, EEA and UK residents

Under the GDPR and UK GDPR, Raymond Galpin, operating as CompilationCreator, is the controller of the personal information described in this policy (Paddle is a separate controller for the purchase).

Lawful bases:

• performance of a contract: to deliver, activate and support the license you bought;
• legitimate interests: to prevent fraud and abuse, enforce the one-device limit and keep our services secure;
• legal obligation: to keep records required by law.

Your rights are to access, correct, delete, restrict or object to the processing of your personal information, and to receive it in a portable format. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).

International transfers. We are based in the United States, and our service providers process data in the United States and elsewhere. When we transfer personal information out of the EU, EEA or UK, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where a provider is certified.

California residents

CompilationCreator is operated from California.

You can ask what personal information we have collected about you, ask us to delete or correct it, and ask how it has been used and shared. We don't sell or share personal information as California law defines those terms, and we don't use sensitive personal information to infer characteristics about you.

California Online Privacy Protection Act (CalOPPA):

• What we collect and who we share it with: described in sections 1 to 7.
• Reviewing and changing your information: email support@compilationcreator.com.
• Do Not Track: we don't track you across websites or over time, so we don't change anything when your browser sends a Do Not Track signal. We don't allow advertising or analytics companies to collect information through our website. Paddle's checkout is governed by Paddle's own policy.
• Changes to this policy: see section 12.
• Effective date: shown at the top of this policy.

10. Children

CompilationCreator is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11. Security

We store license keys and link tokens only as hashes, identify computers only by a one-way hash, keep secrets out of our code, and limit who can access our systems. No system is perfectly secure, but we will tell you and the authorities about a breach where the law requires it.

12. Changes to this policy

When we change this policy, we will post the new version at compilationcreator.com with a new effective date at the top. If a change materially affects how we use information we already have, we will also tell you by email or in the app before it applies.

13. Contact

CompilationCreator, operated by Raymond Galpin
support@compilationcreator.com
compilationcreator.com