Your footage stays on your machine.

The short version

• We do not ask who you are. There is no sign-up, no profile, and no password.
• Your projects and media are written to storage inside your own browser. They are never uploaded, because there is nowhere to upload them to.
• The site sets no cookies and runs no analytics.
• One thing leaves your machine: if you pick a Google font for a title, the editor downloads it. That is described below.

Where your work is kept

Opening a project, importing a clip and exporting a file all happen inside the browser tab. The editor writes to two stores the browser provides, both scoped to the editor’s own address, which means no other website can read them and neither can we:

Projects

The timeline itself — clips, effects, keyframes, text — in IndexedDB. Small, and saved as you work.

Media

The video, audio, images and fonts a project uses, in the Origin Private File System. This is the large one, and it is the copy the browser holds for the app rather than a second copy of your originals somewhere else.

Preferences

Pane layout, the project you had open last, and whether you dismissed the offer to install. Kept in local storage, and about the app rather than about you.

Because this storage belongs to the browser, clearing site data for bentocut deletes all of it, and a browser short of disk space is allowed to evict it on its own. Keep exports of work you care about. The terms say the same thing less gently.

What our server sees

bentocut’s server has one job: handing over the app’s own code the first time you visit. It never receives a frame of your footage.

Serving those files leaves ordinary web-server logs at our hosting provider — the IP address that asked, the browser’s user-agent string, which file was requested, and when. They are kept briefly, to keep the site up and to spot abuse. We do not build profiles from them, and with no accounts there is nothing to attach them to.

Cookies

None, on any of the three addresses the product uses. There is no consent banner on this site because there is nothing to consent to.

One exception, for completeness: preview builds used during development run all three surfaces on a single temporary hostname and set a cookie named bentocut_surface to remember which one you asked for. It is routing state, it holds nothing about you, and it is never set on bentocut.com.

Fonts, and the one request that leaves

The typefaces this website is set in are served from our own domain, so reading these pages contacts nobody else.

The editor is different, and this is the part worth reading. When you choose a Google font for a title, the editor fetches it directly from fonts.googleapis.com and fonts.gstatic.com. In doing that, Google receives your IP address and the name of the family you picked — the same as any site that uses their fonts. Google’s handling of that is covered by their own policy, not ours.

It happens once per family. The file is stored with your project afterwards, so the same title sets again with no network at all, and a project you reopen on a plane looks the way you left it. Fonts you import from your own disk never touch the network.

Analytics

There are none. No tag manager, no pixel, no session recorder, no third-party script of any kind on this site or in the editor.

If that changes — and for a product with no accounts, knowing whether a page works at all is a real problem — this page changes before the measurement starts, and what we would add is counts of pages and events, not a record of what one person did.

Advertising

The pricing on the home page describes a free tier supported by ads and a subscription that removes them. No ads are running today, and no advertising network has any code on this site.

When that changes, this page will name the network and say what it can see before the first ad appears, rather than afterwards. Whatever else an ad tier does, it will not involve sending your footage anywhere.

Deleting things

Deleting a project in the projects list removes it and its media from the browser. Clearing site data for bentocut in your browser’s settings removes everything at once, including preferences.

There is no copy on our side to ask us to delete. The usual rights over personal data — access, correction, erasure, portability — apply to what a company holds about you, and the only thing we hold is the server logs described above. Write to privacy@bentocut.com if you want to exercise them anyway, and say which IP address and roughly when, since that is the only way anything in a log could be found.

Children

bentocut is not directed at children, and it collects nothing from anyone, of any age.

Changes to this page

The date at the top moves when the substance does. The commitments that would be expensive to break — no upload of your media without asking first, no third-party script arriving unannounced — are the ones this page exists to make checkable.

This policy is published by the operator of bentocut. Questions go to privacy@bentocut.com.