--- title: "Privacy: Your Photos Stay on Your Device | thankyou.video" description: "How thankyou.video treats your data: thank-you videos are made in your browser, photos, clips and music are never uploaded, and analytics can be turned off." url: https://thankyou.video/privacy --- # Privacy at thankyou.video Last updated: 8 November 2026 ## The short version The pictures, clips, words and songs that go into your thank-you video are handled by your own browser and are never sent to us. What we do receive is limited: visit statistics you can opt out of, star ratings and notes if you choose to leave them, and automatic reports when our code fails. Each is explained below. ## Your photos, clips, words and music When you add a file, your browser opens it straight from your phone or computer. The preview, the text you type and the final MP4 are all produced on that device. None of it, including the file names and any location or camera details stored inside the photos, is transmitted to thankyou.video or passed to anyone else. Many thank-you videos contain children, patients or private family moments; keeping them off any server is the point. ## What is kept in your browser * **Your projects.** The template you chose, your words, and copies of the photos, clips and song you added are stored in this site’s storage inside your browser (IndexedDB and the browser’s private file storage), so a reload or a closed tab does not lose your work. The projects page lists them, and you can delete any of them there. * **A voice note you record yourself.** Recording asks for the microphone through your browser’s own permission prompt and listens only between your start and stop taps. The sound stays in this browser with your project and is added to the video on your device; no audio is sent anywhere. * **Your light or dark theme**, in local storage. * **When you last saw the rating card**, under the local storage key `vt-feedback`, so it is not shown too often. It stays on your device. Clearing this site’s data in your browser settings removes all of the above at once. Nobody else, including us, can see it. ## Files your browser cannot read If a photo or clip is in a format your browser does not support, the site may fetch an open-source converter (ffmpeg.wasm, or a decoder for iPhone HEIC photos) from thankyou.video itself and convert the file on your device. It is downloaded only when needed, no other server is involved, and your file is not part of the download. ## Hosting Cloudflare serves the pages and scripts. Like any web host, its servers see the technical details of each request (IP address, browser and the page asked for) in order to deliver it and to block attacks. We rely on this only to keep the site running and secure, under legitimate interests (UK GDPR Art. 6(1)(f)).[Cloudflare’s privacy policy](https://www.cloudflare.com/privacypolicy/) explains how it handles those logs. ## Star ratings, notes and error reports After you download or share a video, a small card may ask how thankyou.video did, from one to five stars. You can ignore it or close it. With four or five stars we show a thank-you and a link to review the site on Trustpilot or share it; following that link simply opens trustpilot.com, an independent company with its own privacy policy, and we send it nothing. With one to three stars you can pick a reason (it did not work, the result looked wrong, too slow, hard to use, a missing feature, something else) and write a short note. Please keep names and contact details out of the note. Alongside a rating we store the stars, the reason and note if given, whether you went on to review or share, what triggered the card, the page path (with any project id hidden), the site version, a two-letter country code derived from the connection, the browser and its major version, the operating system family and whether the device is a phone, tablet or computer. Your IP address is used briefly to stop abuse and then discarded; no cookie or identifier is attached, and no part of your video is ever included. Ratings are deleted within 24 months. The `vt-feedback` note in your browser keeps the card away for 180 days after you rate and 21 days after you close it, and after three closes it stops appearing altogether. Google Analytics, set up as described below, also receives the number of stars and any reason chosen, but never the written note. When thankyou.video’s own code runs into an error, your browser sends us a technical report so we can fix it: the error message and its location in our scripts (file, line and stack trace), the page path, the site version, a random number for that single page view (not stored, and new on every page load), the browser, operating system, device type and country. Web addresses are shortened and anything that looks like an email address or a media file name is removed before sending. The report never contains your photos, clips, music or what you typed. Individual reports are deleted after 30 days; a summary of each distinct problem (its message, how often and when it happened) is kept until 180 days after it was last seen. Google Analytics receives one`js_error` event per page view naming only the kind of error. Ratings and error reports are stored for us by Cloudflare (Workers and Durable Objects), acting as our processor. We rely on our legitimate interest in keeping the site working and improving it (UK GDPR Art. 6(1)(f)), and for a written note, on your choice to send it. To object, or to have something you sent deleted, write to the address under “Your rights”. ## Visit statistics [Cloudflare Web Analytics](https://www.cloudflare.com/web-analytics/) and[Ahrefs Web Analytics](https://ahrefs.com/web-analytics) count visits without cookies and give us totals only: pages viewed, where visitors came from, approximate country and type of device. **Google Analytics 4** shows us which templates, occasion pages and guides help people. It records the pages you visit and what you do in the maker, such as choosing a template, adding photos (as a rounded count), exporting or downloading, and links those events with a random identifier kept in a first-party cookie. It never receives your photos, clips, music, words or file names. Advertising features and Google signals are off. Google processes this data under [its privacy policy](https://policies.google.com/privacy) and describes what it does with data from websites in[how Google uses information from sites that use its services](https://policies.google.com/technologies/partner-sites). Transfers to the US rely on the EU-US Data Privacy Framework, and events are deleted after 14 months. Our legal basis is a legitimate interest in understanding how thankyou.video is used so we can improve it (UK GDPR Art. 6(1)(f)). The analytics cookie is set under the statistical-purposes exemption in the UK Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025\. You can object at any time, as the next section explains. ## Cookies and how to say no thankyou.video shows no adverts. The only cookies it sets are Google Analytics’ `_ga` and`_ga_*`, which last up to two years, and a short notice says so on your first visit. To opt out, choose**Cookie settings** in the footer and then **Turn off analytics**; this browser will remember. If your browser sends a [Global Privacy Control](https://globalprivacycontrol.org/) signal, analytics stay off and the cookies are never set. We do not sell personal data. ## Who runs thankyou.video thankyou.video is an independent, self-funded project. There are no accounts, your files never reach us, and we keep no profile of you. The only things we hold are ratings and error reports, and neither carries a name, a cookie or an identifier. ## Your rights Depending on where you live, you may have the right to see, correct or delete personal data about you, to restrict or object to its use, to take it elsewhere, and to complain to a data protection authority. Your projects live only in your browser, so deleting them there, or clearing the site’s data, is how those rights apply to them. Analytics can be turned off from Cookie settings whenever you like, and Google offers more controls in [your Google Account](https://myaccount.google.com/data-and-privacy). Ratings and error reports have no identifier, so to have one removed, tell us roughly when you sent it and what it said. Privacy questions and requests go to [hello@thankyou.video](mailto:hello@thankyou.video); the[contact page](https://thankyou.video/contact) has more. ## Changes If thankyou.video ever starts handling data differently, this page will say how and the date at the top will change.