Privacy Policy

Last updated: 4 October 2026

This Privacy Policy explains what information is collected when you use the CutNoodle website (the "Service"). The short version: your videos never leave your browser.

1. Who we are

The service is operated by Filippo Pelloia under the name CutNoodle. For any privacy question or request, contact us at: support@cut-noodle.com.

2. What the application does on your device

CutNoodle runs entirely inside your browser tab. When you choose a video, the file is read locally, its audio is analysed locally with the Web Audio API to find silent passages, and the export is rendered locally with ffmpeg compiled to WebAssembly. Your video, its audio, and the resulting export are never uploaded, transmitted, or seen by us. The state of your edit (clip boundaries, audio levels, export settings) is stored in your browser's IndexedDB so a page reload does not lose your work; the video file itself is never stored, and clearing your browser data removes everything.

3. What we do not collect

No account is required. CutNoodle does not collect, upload, store, or process your videos or their audio. All video processing happens locally in your browser.

4. X Circle, X Followers Header, X Mosaic, X Recap, X Friendship Test, X Time Machine, X Visibility Check and X Country Battle

The first seven tools work with public X account information as described here; X Country Battle works differently and is described at the end of this section. When you enter a username, your browser asks the independent, unofficial FxTwitter service operated by FxEmbed for public profile information, posts and public relationship lists. The categories may include usernames, display names, profile photos, public post text and media, dates, reply, quote, repost and mention information, and public interaction counts, follower and following relationships, search results and account suggestions. FxTwitter obtains this information from X. It is not an X service and CutNoodle does not control it.

These requests go directly from your browser to FxTwitter, so FxTwitter receives the username or search sent, your IP address and ordinary technical request information. CutNoodle does not receive the returned posts during an ordinary scan. Profile images may load from X's image server (pbs.twimg.com) or pass through our image service, which temporarily caches the public image. Our image service uses an IP address for short-lived abuse limits but does not attach it to a scan or use it to build a search history.

The circle, followers header, animated followers video, mosaic, recap, friendship score and time-machine card are calculated and drawn in your browser. The visibility diagnostic is also calculated in the browser by comparing public surfaces and is not saved by CutNoodle. The visual tools are entertainment summaries of a limited sample of public activity: they may be incomplete or wrong, are not statements of fact about a person, and are not used to make legal or similarly significant decisions. We do not intend to infer sensitive characteristics. Running a tool does not notify the accounts concerned.

An ordinary scan and its generated cards, headers and videos are not saved by CutNoodle. The exception is when you explicitly create a share link in X Circle, X Mosaic, X Recap, X Friendship or X Time Machine. The displayed result is then sent to our server so the link can work. It can contain the public usernames, display names, profile-photo addresses, public post details, scores and interaction counts shown in the result, your selected style, and the save time. It is stored under a random eight-character ID and automatically deleted 30 days later. Anyone with the link can view it until it expires. The IP address used for a short-lived creation limit is not stored with the result. To remove a live CutNoodle share link earlier, email us with the link. We cannot remove screenshots, downloads or posts already saved or republished elsewhere.

Our legal basis under the GDPR is our legitimate interest in providing the public-data feature requested by the user, making it reliable, and preventing abuse. We limit the data to public account activity, keep calculations in the browser, do not create user dossiers, do not use the data for advertising, and apply the short retention periods above. Public availability does not remove a person's privacy or other rights. A person whose information appears in a result may object, request deletion of a CutNoodle-hosted share, or make another privacy request using the contact address in section 14. We will assess the request and stop or remove processing where the law requires it.

X Country Battle works differently. A point on its leaderboard has to be verified, so the username you enter is sent to CutNoodle's own server, not from your browser to FxTwitter. Our server asks FxTwitter for that account's public profile and for the country or region X publicly shows the account as based in. It then saves one record per account: the account's permanent numeric X ID, the country code, whether the country was picked by hand because X showed only a region, the date, and the account's number within that country. The username, display name and profile photo are returned to your browser to draw the card and are not saved. The record is kept for as long as the leaderboard exists, so that an account cannot be counted twice. To limit abuse we also store a one-way fingerprint of the connection that added an account, derived from the IP address and the day; it is deleted after the following day and is not linked to the account record. Only totals per country are published: there is no public list of accounts. An account can be entered by someone other than its owner. If your account was counted and you want it removed, email us from section 14 with the username and we will delete the record and lower the total. The legal basis is the legitimate interest described above.

5. Website data

The website is a static page. Limited technical data may be processed automatically by the hosting provider for delivery and security, such as IP address, browser type, and timestamps. This is standard server logging and is not used to identify you.

When a tool finishes successfully on the production website, the browser sends our aggregate usage counter only the tool name and a random event ID. It does not send an X username, filename, result, image, media or editor content. The random ID is kept for eight days only to prevent a retry from being counted twice, then deleted; the lasting record contains only the UTC day, tool name and number of successful completions. The request's IP address is used by a short-lived rate limit to prevent artificial increments and is not stored with the event. The counter uses no cookie or browser storage and operates independently of optional analytics consent. Our legal basis is our legitimate interest in measuring aggregate product use and reporting honest audience figures while minimising the data processed.

6. Cookies

Before you make a choice in the cookie banner, Google Analytics and Microsoft Clarity are not loaded and no analytics cookie is set. We store your choice in your browser's local storage so that we can remember it without sending that value with every web request.

If you allow analytics, Google Analytics may set first-party cookies named _ga and _ga_<container-id>, normally for up to two years, to distinguish a browser and preserve session state. Microsoft Clarity may set _clck to preserve a pseudonymous visitor ID and _clsk to connect page views into a session recording. You can withdraw consent at any time through "Cookie settings" in the footer. This stops future analytics measurement and removes the Google Analytics and Clarity cookies that CutNoodle can access. See our Cookie Policy for the complete list and controls. Fonts are served locally.

7. Analytics

Only after you allow analytics in the cookie banner, we use Google Analytics 4 to count page views, understand broad traffic sources, and measure whether a tool is started, completed, cancelled, downloaded or shared. Google may receive the page path, the referring page, browser and device information, an approximate location derived from the IP address, and the analytics identifiers stored in the cookies above. Advertising storage, advertising user data, advertising personalisation and Google signals remain disabled.

With the same consent, we use Microsoft Clarity to create heatmaps and session recordings and to understand clicks, scrolling, navigation, layout, device and performance information, and where a visitor may encounter an error or confusing interface. The entire page is marked for strict masking in the site code, so page text, images, usernames, searches, file details and editor content are not uploaded to Clarity. Clarity receives an explicit analytics consent signal and an advertising-storage denial; we do not use it for Microsoft Ads.

Tool measurements contain broad categories such as the tool, stage, a size range, time taken and a fixed error code. We have designed these events not to include X usernames, file names, search parameters, images, media, editor content or free-form error messages. Your video, audio and exported file never reach us or Google or Microsoft. If you continue without analytics, neither analytics service is loaded and these measurements are not sent.

8. Third parties

For delivering and measuring the website: the hosting provider that serves these pages, stores shared X circles and temporarily caches public profile photos (Cloudflare), Google (Ireland) Limited and Microsoft Ireland Operations Limited for the analytics described above, which may involve a transfer to the United States under the EU-U.S. Data Privacy Framework. When you use an X tool, your browser also contacts FxTwitter/FxEmbed, and profile or post images may be requested from X Corp's image servers. Those parties process requests under their own terms and practices. CutNoodle is not affiliated with or endorsed by X Corp or FxEmbed. No payment provider, no email provider, and no content delivery of your uploaded media is involved, because that media never leaves your device.

9. Security

Because processing happens on your device, there is no central store of your media to protect. No method of transmission or storage is fully secure, and you remain responsible for the files you keep on your own computer.

10. Your rights

Depending on where you live, you may have rights to obtain access and information about the source, categories, purposes and retention of personal data; to correct, delete or restrict it; to object to processing based on legitimate interests; and, where applicable, to receive portable data. We hold no account or uploaded-media data, but we may hold a shared X Circle until its 30-day expiry and temporary technical records described above. Include the CutNoodle share link in a removal request so we can identify it. You can withdraw analytics consent at any time through "Cookie settings" in the footer. Contact us using the address above. You also have the right to lodge a complaint with your local supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

11. Children

The Service is not directed to children under 16, or the minimum age in your jurisdiction, and we do not knowingly collect their data.

12. Changes

This policy may be updated from time to time, and the date above will be revised.

13. Contact

The service is operated by Filippo Pelloia under the name CutNoodle. For any privacy question or request, contact us at: support@cut-noodle.com.