Last updated: 25 July 2026
This policy explains what the TooLongLink website at toolong.link (the "Site") and the TooLongLink desktop application (the "Desktop App") collect, why, and who it is shared with. The data controller is Andrew Ong, a sole proprietor, reachable at contact@toolong.link.
| Data | Why |
|---|---|
| Account email address and authentication identifier | To sign you in and associate your history and any purchases. Handled by Google Firebase Authentication. |
| Video URLs / IDs you submit, and the summaries generated from them | To produce and cache the summary. Cached summaries are public (see section 3). |
| Which videos you viewed and when | To show you your history and to understand aggregate usage. |
| Language preference and account settings | To generate output in your chosen language. |
| Usage and device analytics — pages viewed, buttons clicked, approximate location derived from IP, browser and device type | To understand how the Site is used and what to improve. Collected via Google Analytics, PostHog, and Microsoft Clarity. |
| Session recordings — a replay of your visit showing page navigation, scrolling, mouse movement and clicks | To see where the Site is confusing or broken. Recorded by PostHog and Microsoft Clarity. Text you type into form fields is masked and is not captured, and we do not record the Desktop App. |
| Purchase and billing records | To provide paid features. Card details are handled by our payment processor; we never receive or store full card numbers. |
| Referral attribution | If you arrive via a referral link, our referral provider records that. |
When you submit a video on the Site, the generated summary is stored and served at a public URL. Those pages may be listed in our sitemap, indexed by search engines, and translated into other languages. The page shows the video's title, summary, and images extracted from the video — it does not show your name, email, or account identifier.
Do not submit videos that are private, confidential, or that you would not want summarized publicly. If you want summaries that stay private, use the Desktop App. To request removal of a specific cached summary, email us.
The Desktop App downloads and summarizes video on your own computer, using an AI provider API key that you supply and that is stored locally. Video files, transcripts, and generated summaries stay on your machine. We do not receive them.
The Desktop App does send us:
Your AI provider API key is never transmitted to us. Note that your use of that key is also governed by your AI provider's own privacy policy.
We use the following processors, and share only what each needs to do its job:
We may also disclose information where required by law, or to protect our rights, safety, or property. We do not sell personal information and we do not share it with advertisers.
The Site uses cookies and browser local storage to keep you signed in, remember your preferences, and collect the analytics described above. You can block or delete cookies in your browser settings; if you do, sign-in and some features may stop working.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email contact@toolong.link and we will respond within a reasonable time, and within any period required by law.
If you are in the European Economic Area or the United Kingdom, our legal bases for processing are: performance of a contract (providing the Service), legitimate interests (securing and improving the Service), and consent where required (analytics cookies). You also have the right to complain to your local data protection authority.
We are based in the United States, and our providers process data in the United States and other countries. If you use the Service from outside the United States, you understand that your information will be transferred to and processed there, where data protection laws may differ from those in your country.
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
We use reputable providers and standard access controls to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this policy. We will change the "Last updated" date above, and for material changes we will make a more prominent notice on the Site.
Andrew Ong
Email: contact@toolong.link