Privacy policy
Last updated 29 October 2026
Shakefree finds camera shake in your clips. Your video stays on your computer. Only the motion data it extracts is sent for detection. This page says exactly what else we receive, what we keep and for how long.
In short
- Your browser reads the video. The file itself is never uploaded, unless you share it with a problem report.
- We receive the motion data, the clip's facts and its file name, plus usage statistics that include clip and project file names.
- Stripe handles your card. We never see the full number.
- In the EU, the EEA, the UK and Switzerland, Google Analytics and Google Ads cookies are used only if you accept them in the banner. Elsewhere they are on until you turn them off. You can change your choice at any time.
- You can delete your account from the app. Write to us for anything else.
Who we are
Shakefree (shakefree.io, the web app and its API) is run by Shakefree.io. We decide what data the service collects and why, so we are responsible for it under privacy law. Write to [email protected] with any question about this policy or your data.
What leaves your computer when you scan
The app decodes your video in the browser and tracks how the picture moves from frame to frame. That motion data is a list of points per frame. It cannot be turned back into your video. With each scan the browser sends:
- the motion data, compressed,
- the clip's facts: frame count, frame rate, resolution, length and a fingerprint (a hash of the file and a short brightness signature, so a paid clip stays bound to its content),
- the clip's file name and your detection settings.
Our server runs the detection and sends back where the shakes are. The motion data is deleted as soon as detection ends. We keep the result, the clip's facts and a record of the scan, so a repeat scan is free and the minutes you used can be counted.
When you open a Premiere, Resolve or Final Cut project, the project file is read in your browser. If you search a folder for missing videos, the folder is read on your computer to match the names. Neither is uploaded.
What else we receive
Your device token
The first time you open the app it gets an anonymous device token, kept in your browser. It lets the server count your free minutes without an account. With it we record the IP address and browser (user agent) it was issued to, and the network each scan came from, to stop abuse of the free tier.
Your account
An account holds your email address, your plan, your purchases and your preferences (export format and similar). A password is optional and stored only as a hash. If you sign in with Google, we receive your email address and Google's account id, nothing from your Google Drive or contacts.
Usage statistics
The app sends us its own usage statistics: which screens you open, when a clip is added, scanned or exported, how long a scan took, errors, and your browser, operating system, screen size and language. These events include the clip and project file names. Our web server adds your country and region from your IP address. The IP address itself is not stored with them. We keep the events for 13 months, then fold them into daily totals that name no clip and no person.
If you reject analytics in the consent banner, the app sends none of these statistics.
Files the app could not read
When a file could not be scanned, or needed a conversion first, the app reports its format, size and length so we can add support. Never the file and never its name.
Error reports and performance data
When the app hits an error it sends a technical report to Sentry, our error tracking service: the error, the app version, the page and the request id. Our server also sends Sentry how long its requests take and its warning messages, by account or device id, never by email address or IP address. Addresses are stripped of sign-in tokens and file names are left out.
For one visit in ten, and for every visit where an error happens, the app also sends Sentry a session replay: a recording of the page layout, clicks and navigation, so we can see what led to a problem. All text, form fields, images and video are masked in the recording, so it never shows your file names, your email address or your footage.
Problem reports and the video upload
You can send us a problem report from the debug log or from a clip that failed. A report holds what you typed, the debug log, the clip's facts (never its name), the app versions, your plan, your IP address and your browser.
The report dialog has a box Share the video file. It is ticked by default, because a problem we can reproduce is a problem we can fix. Untick it before you press Send to keep the video on your computer. When it stays ticked, your browser uploads the video straight to our storage bucket (Amazon S3 in Canada). It never passes through our servers. We use it only to reproduce the problem.
- The video is deleted automatically after 30 days.
- You can delete the report and its video at once with Delete this report in the report dialog. The account page also tells you how.
- The report itself (without the video) is kept until deleted.
Payments and the saved card
Payments go through Stripe. Your card details are typed into Stripe's own form and go to Stripe, never to us. We keep the Stripe customer id, what you bought, the amount and the date. Your card is saved with Stripe for one-click purchases. We show its brand and last four digits, which Stripe gives us, so you can recognise it. Remove the card any time from Manage billing in Settings. Stripe's own privacy policy covers what Stripe keeps.
Emails
We send the emails the service needs: sign-in links, receipts and, if you turn them on, a note when a batch of scans finishes. We keep a log of each email we send (the address, the subject and the time).
When you type your email into the app (to buy, to sign in, to unlock free minutes or in the deals form), we may also send you Shakefree offers. The app says so under the email field. Every offer has an unsubscribe link that works in one click, and you can switch offers off in Settings. If you never asked for offers yourself, we stop sending them two years after your last purchase, or six months after you last gave us your email without buying. We never sell or share your email address.
We use Amazon SES to deliver email. If an email bounces or is marked as spam, SES tells us, and we stop sending offers to that address.
Analytics and cookies
Shakefree sets no cookies of its own. The consent banner offers two choices: Google Analytics 4, which counts visits and the steps of a purchase, and Google Ads, which measures our ads and can show them to people who visited before. Reject turns both off, Analytics only allows the first, Accept all allows both. Ads are never allowed without analytics.
In the EU, the EEA, the UK and Switzerland, and wherever we cannot tell the country, both are off until you choose: no Google script loads before you allow analytics. Everywhere else both are on by default, and the banner shows you the same choices to turn them off. We take the country from your IP address on our own server and keep only the country code in your browser.
Google never receives a file name, a clip name, an email address, a payment id or anything you type. You can change your choice at any time from Cookie preferences in the app's Settings.
The app also counts how it is used (pages, scans, the steps of a purchase and the link your first visit came from) on our own server, without cookies and without storing your IP address. In the EU, the EEA, the UK and Switzerland, and wherever we cannot tell the country, those counts follow the same choice.
The app keeps some data in your browser's local storage, which never leaves your computer by itself:
- your device token and, when signed in, your sign-in tokens,
- your settings, the consent choice and your country code,
- the source and campaign of the link your first visit came from, and the site that linked to it, sent with the usage counts above,
- your recent clips, the names of scanned clips and their results, so a reload does not lose your work.
Clearing your browser's site data removes all of it.
What we store and for how long
A nightly job deletes or clears each kind of data when its period ends. When you delete your account we remove your email address, sign-in, browser and IP address, problem report texts and file names from every record at once, and keep only anonymous records for accounting and statistics.
| Data | Why | Kept |
|---|---|---|
| Motion data from a scan | Detection | Deleted when detection ends |
| Scan records: clip facts and result | Free minutes, plan limits, repeat scans | As long as the account or the browser's free tier needs them, without your network once the period below ends |
| The network a scan came from | The shared free minutes of a network, abuse prevention | 8 days without an account, 30 days with one |
| Device token with its IP address and browser | Free tier without an account, abuse prevention | 180 days after its last use, unless linked to an account |
| Account: email, plan, purchases, preferences | The service you paid for, receipts, tax records | Until you delete the account. Purchase records as long as tax law requires |
| Sign-in links and sessions | Signing you in | 7 days after they expire or are used |
| Account activity, such as a reason you gave for cancelling | Support, understanding cancellations | The free text 13 months. The network an account was created from 90 days |
| Usage statistics, with clip and project file names, country and region | Improving the app | 13 months, then daily totals without names |
| Web server log: IP address, browser, the page or API address requested and the time | Security, finding and blocking abuse | 90 days |
| Clip file names in the server log of each scan | Fixing failed scans | 14 days |
| Formats of files that could not be scanned (never the file or its name) | Adding support for more formats | 90 days |
| Detection results of a clip | Repeat scans and exports | 180 days after the clip was last scanned or exported |
| Problem report video | Reproducing the problem | 30 days, or until you delete the report or your account |
| Problem report text, debug log, IP address and browser | Fixing the problem | 90 days after its video is deleted, 180 days when there was none |
| Support messages | Answering you | The IP address and browser 30 days. The message 13 months after it was closed |
| Email address on the offers list | Offers, and honouring an unsubscribe | Until deleted. An unsubscribed address is kept so it gets nothing more |
| Offers sent to you | Counting what each offer achieved | The offer's text 13 months, the record of the send without it after that |
| Log of sent emails (address, subject, status) | Delivery problems | 13 months |
| Abuse checks of the free tier | Abuse prevention | 180 days after they were closed |
| Records of changes our staff made to your account | Accountability | 3 years |
| Error reports, session replays and performance data in Sentry | Fixing errors and slow requests | Sentry's retention for our plan |
| Database backups | Recovery | 30 days |
Who else sees it
We use these services to run Shakefree. Each gets only what its job needs:
- Vultr hosts our server and database.
- Amazon Web Services stores problem report videos (S3, Canada) and delivers email (SES).
- Stripe processes payments.
- Google provides Google sign-in and, as described under Analytics and cookies, Google Analytics and Google Ads.
- Sentry receives error reports, session replays and server performance data.
Some of them process data outside your country, including in the United States. We do not sell personal data and we do not share it for advertising.
Security
Every connection is encrypted. Sign-in tokens expire, passwords are hashed and the admin area is closed to the internet. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
Your rights
- Delete your account in the app under Settings, Security. It removes your email address and your sign-in and cancels a running subscription.
- Delete a problem report and its video from the report dialog, or ask us.
- Get a copy of your data in the app under Settings, Security, with "Download your data": a JSON file of your profile, purchases, scans, emails, reports and messages. Or write to us and we send it.
- Correct your data, object to its use or ask us to delete anything not covered above: write to us.
- Stop offers with the unsubscribe link in any offer or in Settings.
We answer within 30 days. If you are not happy with our answer, you can complain to the privacy authority where you live. In Canada that is the Office of the Privacy Commissioner of Canada.
Children
Shakefree is a tool for video editors and is not meant for children under 16. We do not knowingly collect their data. If you believe a child has given us data, write to us and we delete it.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data you already gave us, we tell account holders by email before it applies.
Contact
Shakefree.io
[email protected]
Or use the support page.