Shuffler

Privacy policy

Recording and editing need no account. Exporting does: the app asks you to sign in and choose a handle, which it prints on the exported video. Your projects and videos stay on your phone; the app does not upload them.

What we store when you sign in

• Your sign-in identifier from Apple or Google, or your email address if you sign in with an email code.
• Your email address, when your sign-in gives us one. Apple may give a private relay address. Google's address is kept only for a Gmail address or a Google Workspace account.
• Your handle, the name printed on your exported videos.
• Your sessions: a hashed token for each sign-in and each refresh. Signing out deletes the one in use on that phone; the others are kept until you delete your account.
• If you signed in with Apple, an encrypted Apple token, kept so that deleting your account can remove Shuffler from your Apple Account.
• For an email sign-in, a record for your email address: a hashed copy of the latest code we sent and of any code still being sent, how many wrong tries each code has had, when codes were sent, and a counter of the order they were sent in. A successful sign-in clears the codes, the tries and the send times, and asking for a new code replaces the current code and clears the ones that have expired. Neither removes the address and the counter; deleting your account does. Nothing here is deleted on a timer. If someone asks for a code with an address and never signs up, the address and its record stay: a later request for the same address replaces the code but keeps the address. The address and its record go when an account with that address is deleted, or when you ask for them to be removed at [email protected], which also covers an address that never signed up.

Our web server also logs each request: your address, the time, the address you asked for (in the app, that includes a handle you look up), the response status, and your browser or app identifier. These logs are kept for about six months. We do not use analytics or advertising, and there is no tracking on this page.

Who handles it

• Apple and Google check your sign-in.
• Amazon Web Services sends the email that carries your sign-in code.
• Cloudflare passes traffic to our server.

We do not sell your data.

Keeping and removing it

The data we store for your account stays until you delete your account or ask for it to be removed at [email protected]. Nightly database backups are kept for at most 14 days, so a deleted account, or data removed at your request, can remain in a backup until that backup expires.

Delete your account

1. Open Shuffler and go to Projects.
2. Tap Account.
3. Tap Delete account and confirm.

Deleting removes your account, your handle, your sessions, your stored Apple token and any sign-in codes for your email address, and the handle becomes free for anyone to take. Your projects stay on your phone.

If you signed in with Apple and the app says it could not remove the link to your Apple Account, your account is still deleted. To remove Shuffler from your Apple Account yourself, follow Apple's steps (https://support.apple.com/102571).