Privacy Policy

Last updated: October 2026

1. Controller

The operator of TapToVideo is responsible for data processing on this website. Contact: kontakt@taptovideo.com

2. What data we process

  • Uploaded photo and description: We use your photo and text only to create your video.
  • Generated video: The video is provided for you to watch and download. We do not publish photos or videos.
  • IP address: We do not store your IP address in plain text, only as a hash value, to enforce the free daily limit of 2 videos and to prevent abuse.
  • Technical cookie: A cookie with a random identifier ("fl_gid") links your creations to your browser, so that only you can retrieve your videos and the daily limit works. It contains no personal details and is not used for advertising.

No account is required. We do not collect names, email addresses or payment details.

3. Purposes and legal bases

Processing your photo and description is necessary to provide the service you requested (Art. 6(1)(b) GDPR). The hashed IP address, the technical cookie and the security check serve our legitimate interest in operating the free service securely and without abuse (Art. 6(1)(f) GDPR). The cookie is technically necessary for the service (Section 25(2) TDDDG).

4. Recipients and service providers

  • AI processing: Your photo and description are sent to our AI service provider Kie.ai, which creates the video with an AI model. Uploaded files are deleted there automatically after 24 hours. Processing may take place outside the European Union.
  • Hosting and security check: The website is delivered via Cloudflare. To protect against automated requests we use Cloudflare Turnstile.

5. Analytics (only with your consent)

If you click "Accept" in the cookie banner, we use Google Analytics 4 (Google Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited) to understand how visitors use the site, for example which pages are viewed and where the tool is hard to use. Both set cookies and process usage data such as pages visited, clicks, scrolling, device and browser type and an approximate location. Data may be transferred to the USA; both providers are certified under the EU-US Data Privacy Framework. The tool area (your photo, prompt and video) is masked and not recorded by Clarity.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). If you click "Decline", no analytics scripts are loaded. You can change your choice at any time via "Cookie settings" at the bottom of every page.

6. Retention

Uploaded photos are deleted after 24 hours. Records of individual creations (time, status, hashed IP address) are kept as long as they are needed for the daily limit, abuse prevention and error analysis.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You may also lodge a complaint with a data protection supervisory authority. To exercise your rights, contact kontakt@taptovideo.com.

8. Photos of other people

Only upload photos you have the rights to. Photos of other people may only be used with their consent.