Privacy Policy

Scope. This Policy applies to grabdit.app and pages we operate (collectively, “Service”). It explains how we handle information when you paste a Reddit link, browse pages, or interact with features.

Definitions. “Personal data” means information relating to an identifiable person (e.g., IP address). “Processing” covers actions like collecting, storing, using, and deleting.

Data you provide. The Reddit post URL you paste is used to query available media options. We do not require an account or profile.

Technical & usage data. To keep the Service secure and reliable, our infrastructure may process:

• IP address, user agent, language, device/OS info
• Request metadata (timestamps, HTTP method, response code)
• Error diagnostics (stack traces, route name, non-content request context)

Download/media handling. We do not permanently host your downloads. Media is fetched from publicly accessible Reddit resources when you request it. We do not keep a database of which files you downloaded. Any transient caching (if used for performance) expires automatically.

Sensitive data. We do not seek or knowingly process special-category data.

We use the information above to:

• Operate the Service (process the Reddit link you provide and return available media options)
• Maintain security, prevent abuse and fraud, and debug issues
• Measure reliability and performance, and improve the user experience
• Comply with legal obligations and enforce our terms

Legal bases (where applicable): performance of a contract (providing the Service you request), legitimate interests (security, anti-abuse, measurement), consent (for optional cookies/analytics/ads where used), and compliance with law.

Essential cookies. If we set strictly necessary cookies (e.g., to remember basic preferences or protect forms), they are used only to deliver the Service.

Optional analytics/ads. If we enable analytics or advertising, third parties may set cookies or use similar technologies to measure usage or deliver content. Where required (e.g., EEA/UK/CH), we will request your consent and provide controls. You can also manage cookies in your browser settings.

Local storage. We may use local storage to remember simple UI preferences. This does not include permanent storage of downloaded media.

We aim to keep data only as long as needed:

• Media: Not permanently hosted by us; fetched on demand.
• Operational logs: Retained for a limited period for security, diagnostics, and anti-abuse, then deleted or aggregated. We strive to minimize log contents and duration.
• Transient cache (if used): Automatically expires within a short window.

Exact durations may vary by system and legal requirements, but we practice data minimization throughout.

We do not sell your personal data. We may share limited information with:

• Service providers/processors (e.g., hosting, CDN/DDoS protection, logging, error monitoring) under contracts requiring appropriate safeguards
• Authorities when we’re legally required to comply with valid requests
• Successors in the event of a reorganization or transfer, subject to this Policy’s protections

We employ technical and organizational measures designed to protect data (for example, encryption in transit, least-privilege access, and monitoring). No internet service can be 100% secure, but we work to mitigate risks and promptly address issues.

Depending on your region, you may have rights to request:

• Access to, correction of, or deletion of personal data
• Restriction or objection to certain processing
• Portability (where technically feasible)
• Withdrawal of consent for optional cookies/analytics/ads (if applicable)

To make a request, use our contact page. We may need information to verify your identity and locate relevant log entries. If we cannot fulfill a request due to legal or technical limits, we’ll explain why.

Region notes: GDPR/EEA, UK, California (CCPA/CPRA), and India (DPDP Act) users can exercise applicable rights via the same contact channel.

Our infrastructure and providers may operate across countries. Where laws require, we implement safeguards (such as contractual protections) to protect your information during cross-border transfers.

The Service is not directed to children under 13 (or the age defined by your local law). If you believe we have processed data about a child improperly, please let us know via contact so we can take appropriate action.

Links to third-party sites (e.g., reddit.com) are governed by those sites’ policies. We are not responsible for their practices; review their privacy terms before using those services.

We may update this Policy to reflect changes in our Service or applicable laws. When we post updates, we revise the “Last updated” date above. Significant changes will be reasonably highlighted.

If you have questions, requests, or concerns about this Policy or our data practices, please reach us via our contact page.