Privacy Policy

Overview

VoidRuns (“we,” “our,” “the site”) operates the voidruns.com website, the Viral Score Calculator, and the AI Profile Analyzer. This policy explains what data we collect, why, who processes it, and how you can exercise your rights under GDPR and CCPA.

Two paths through the site are relevant for privacy:

• Anonymous use — browsing the marketing pages and using the client-side Viral Score Calculator. We do not collect personal data on this path.
• Authenticated use — signing in to run AI profile analyses, manage a subscription, or redeem a code. This path involves third-party data processors listed below.

What we collect when you create an account

When you sign in or sign up, we collect the minimum needed to run the service:

• Your email address (from Clerk, your sign-in provider)
• A Clerk user identifier (opaque ID)
• Your plan (free / pro) and when it was last changed
• A log of the TikTok @handles you analyzed (handle + timestamp, used to enforce the free-tier quota and, in future, to show you a run history)
• If you upgrade to Pro: your Stripe customer ID and subscription ID (not your card details — those are stored only by Stripe)

We do not store names, phone numbers, passwords (we use Google + email magic links, not passwords), or any TikTok content beyond the @handles you analyzed.

What we do NOT collect

• The free Viral Score Calculator runs entirely in your browser. The niche, hook type, and other inputs you select are never transmitted to any server.
• We do not collect or store videos.
• We do not store the results of AI profile analyses past our short cache window (see “Data retention” below).
• We do not sell or share personal data with marketers or data brokers.

Third-party data processors

The following sub-processors handle parts of your data on our behalf:

• Clerk (auth) — stores your email, sign-in provider linkage, and session tokens. clerk.com/privacy
• Cloudflare (hosting, D1 database, KV cache, Worker compute, Pages CDN) — stores everything in the “what we collect” section above on our behalf, plus aggregate request logs. cloudflare.com/privacypolicy
• Stripe (payments) — receives your email and card details directly via Stripe Checkout (we never see card numbers) and returns a customer ID. stripe.com/privacy
• RapidAPI / tiktok-api23 (TikTok data) — receives the public TikTok @handle you analyze. Does not receive your email or any other personal data. rapidapi.com/terms
• Umami (analytics) — cookie-free aggregate page-view stats. No fingerprinting. umami.is/privacy
• Google Fonts — your browser fetches font files from Google when loading any page.

Data retention

• Account data (email, plan, Stripe linkage) — kept while your account exists. Deleted within 30 days of account deletion request.
• Run log (handle + timestamp) — kept for 90 days for quota enforcement, then deleted. Earlier deletion on request.
• Cached profile analyses — held in Cloudflare KV for 1 hour, then automatically purged. Not tied to your identity.
• Payment records — Stripe retains invoices for as long as legally required (typically 7 years for tax / financial regulation). We do not control Stripe's retention.

Cookies and tracking

We use the minimum cookies we can:

• Clerk session cookie (essential) — keeps you signed in. Set only after you sign in. First-party.
• Stripe sets cookies on its hosted Checkout pages for fraud detection.
• Umami does not set cookies. Cloudflare may set short-lived bot-detection cookies. No first-party tracking cookies are set by VoidRuns directly.

VoidRuns does not run third-party advertising and does not set any analytics or advertising cookies directly.

Your rights (GDPR / CCPA / similar)

If you are in the EEA, UK, California, or any region with equivalent data-protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Object to or restrict certain types of processing
• Withdraw consent at any time (where consent is the legal basis)

To exercise any of these rights, email privacy@voidruns.com. We respond within 30 days. You can also sign in and delete your account directly through the account settings (when this UI ships — until then, email us).

Legal basis (GDPR)

• Contract — processing your email, plan, and run log is necessary to provide the service you signed up for.
• Legitimate interest — anti-abuse rate-limiting (your IP for the 60-second throttle, kept < 5 minutes).
• Legal obligation — Stripe retains payment records for tax / financial regulation.

Children's privacy

VoidRuns is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has created an account, email privacy@voidruns.com and we will delete it.

International transfers

Our infrastructure is hosted on Cloudflare's global edge network and may store and process your data in any region. Clerk, Stripe, and Google are US-headquartered; data may be processed there under standard contractual clauses.

Changes to this policy

We may update this policy as the product evolves. Material changes will be announced via email to authenticated users (or via an in-app banner). The “last updated” date at the top of this page reflects the most recent revision.

Contact

Privacy questions: privacy@voidruns.com
General support: contact@voidruns.com