In short: we only process what the community needs to work. Third-party analytics and marketing services only load if you agree. Your email address is never public. This policy is based on the EU General Data Protection Regulation (GDPR).
1. Controller
Globify GmbH
Am langen Felde 49
1220 Wien, Österreich
Email: info@clipcity.club
2. Visiting the website
When you visit, the server processes technically necessary data (IP address, time, page requested, browser details) to deliver the site and fend off attacks. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR). The website is run by a hosting provider acting as our processor.
3. Cloudflare
We use services of Cloudflare, Inc. (USA) to deliver and protect the website, and “Turnstile” to protect forms from automated requests. This processes your IP address and technical browser data. Legal basis: legitimate interest in security and availability (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.
4. Our own visitor statistics
We count page views with our own statistics running on our server. It sets no cookies and stores no IP addresses; we only evaluate aggregated values (page, referrer, device type, country). Legal basis: legitimate interest in improving our service (Art. 6(1)(f) GDPR).
5. Cookies and local storage
- Essential: a login cookie (
payload-token) while you are logged in, and entries in your browser’s local storage (your cookie choice, post drafts, whether a pop-up was already shown). - Analytics / marketing (only with consent): if we use Google Analytics, Google Tag Manager or the Meta Pixel, they only load after you agree in the cookie banner (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can change your choice anytime via “Cookie settings” in the footer.
6. Sign-up and account
For an account we process your username, email address, password (stored only as a hash), the time and version of your consent to the Terms of Use, and the optional profile details you add (avatar, banner, bio, platform, channels, country). If you sign in with Google or Discord, we receive your email address, a user ID and your display name from that provider. Legal basis: contract for the use of the platform (Art. 6(1)(b) GDPR).
Publicly visible are: your username, profile details, points, rank, badges, your posts and clips, your country flag (only if you turn it on) and your online status (can be turned off in settings). Not public: your email address.
7. Two-factor authentication
To protect your account we send a one-time login code by email. If you set up an authenticator app, we store an encrypted secret and hashed backup codes. Legal basis: contract and legitimate interest in security (Art. 6(1)(b) and (f) GDPR).
8. Posts, clips, votes
Content you publish (threads, replies, clips, comments, votes, reactions) is stored and shown publicly. For clips we also store the time and version of your consent to the Clip License. We may publish approved clips on our social media channels (e.g. TikTok, Instagram, YouTube), usually credited with your username. Legal basis: contract (Art. 6(1)(b) GDPR).
9. Private messages and friends
We store messages between members so both sides can read them. Staff do not read private messages; only if a message is reported does the moderation team see that message to review the case (legitimate interest in a safe community, Art. 6(1)(f) GDPR).
10. Moderation
To enforce the Community Rules we store reports, warnings, mutes and bans including the reason, plus a log of staff actions. Legal basis: legitimate interest and legal obligations (Art. 6(1)(f) and (c) GDPR).
11. Giveaways and prizes
We store your entries in giveaways and votes. If you win, we ask separately for the details needed for shipping (name, address) and use them only for that. Legal basis: contract (Art. 6(1)(b) GDPR).
12. Newsletter
You only receive the newsletter if you signed up and clicked the confirmation email (double opt-in). We store your email address, sign-up time and confirmation. To improve the newsletter we measure whether an issue was opened and which links were clicked. Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe anytime via the link in every email.
We use Resend (Plus Five Five, Inc., USA) as a processor to send emails (newsletter, confirmations, login codes, password resets). Transfers to the USA are based on standard contractual clauses or the EU-US Data Privacy Framework.
13. Payments
Paid services (e.g. Streamer Spotlight) are processed by Stripe (Stripe Payments Europe, Ltd., Ireland). You enter payment details directly with Stripe; we only receive a payment confirmation. Legal basis: contract (Art. 6(1)(b) GDPR). We keep invoice data as required by law.
14. YouTube videos
Embedded YouTube videos only load when you click them. Before that we only show a thumbnail served from our own server. Clicking connects you to YouTube (Google Ireland Ltd.) and data may be transferred to the USA. Legal basis: consent by clicking (Art. 6(1)(a) GDPR).
15. Support
If you send us a ticket or an email, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR).
16. Retention
We keep account data as long as your account exists. If you delete your account, we delete your profile, messages, entries and content or detach them from you. Exceptions are data we must keep (e.g. invoices) or briefly need to prevent abuse (e.g. bans).
17. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection, and you can withdraw consent at any time. You can do a lot yourself: in your account settings you’ll find “Download my data” and “Delete account”. For anything else, write to info@clipcity.club.
You can also lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, dsb.gv.at) or the supervisory authority in your country of residence.
18. Minimum age
You must be at least 16 years old to use an account.
Last updated: 2026-11