Legal, privacy
and trust.

Privacy Notice

Operator. Splice is operated by T Waters, P.O. Box 235, Berwick, Maine 03901. Privacy requests may be sent to contact@alexwaters.us.

Local video processing

Your source video, decoded frames, frame selections, filenames, and exports are processed in your browser and are not uploaded to Splice. Closing or refreshing the page clears the in-page frame library; files you download remain on your device. The current service does not inspect, classify, or manually review your video or frames.

What we collect

• Anonymous quota records: a one-way SHA-256 identifier derived from your IP address. Separately, the quota database stores the UTC usage date, random claim identifiers used to make retries safe, usage counts, and timestamps. The SHA-256 identifier is stable across UTC days; the raw IP address is not stored in the quota database. Cloudflare still receives network information to deliver and protect the site.
• Account records in restricted staging: an internal user identifier linked to the WorkOS environment and WorkOS user subject; hashed Splice session tokens; WorkOS session identifiers; authentication, expiration, activity, and revocation times; whether the provider asserted phishing-resistant authentication; the policy version and time you acknowledged it; account roles; quota entitlements and usage; voucher issue, redemption, and revocation records; announcements; rate-limit records; and related administrative audit events. Splice does not store your WorkOS password, passkey secret, authenticator secret, or email-code secret.
• Authentication information: WorkOS processes the email address and authentication factors used for staging sign-in, which may include a password, passkey, authenticator, or email code when configured. Short-lived login transaction data is used to complete and protect the redirect flow. Authentication methods may change before public launch.
• Security data: Cloudflare Turnstile processes browser and network signals needed to distinguish people from bots. Splice receives a validation result and limited token metadata, not your video or frames.
• Operational logs: Cloudflare may process request metadata, error details, and security events as our hosting, delivery, database, logging, and bot-protection provider. Restricted staging access can also create Cloudflare Access authentication and security records.
• Messages: if you email us, we receive the information you choose to send.

Why we use it

We process this data to deliver and secure the service, authenticate staging accounts, record the account acknowledgment you submit, enforce daily limits and account entitlements, prevent duplicate quota charges during retries, provide authorized announcements and voucher functions, investigate misuse, diagnose failures, respond to requests, and comply with law. Depending on the activity and law that applies, the basis may be performing the service you request, our legitimate interests in security and abuse prevention, your consent when legally required, or a legal obligation. A policy acknowledgment is not consent to advertising and does not waive privacy rights.

Sharing, selling, and advertising

We use Cloudflare for hosting, delivery, D1 storage, logs, bot protection, and restricted staging access, and WorkOS for staging authentication. Those providers process data for these purposes under their own terms and privacy documentation. We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. We may disclose data when legally required, to protect rights and safety, or in a business transfer subject to appropriate protections.

Retention

Anonymous quota records are configured for cleanup after approximately 45 days; actual deletion can occur later if a maintenance run is delayed. Expired Splice account sessions and login transactions are deleted by scheduled staging maintenance. Browser-created frames remain only in the page until you close, refresh, or clear them, and downloaded exports remain on your device.

Identity links, policy acknowledgments, entitlements, roles, voucher records, announcements, provider-session revocation records, and append-only administrative audit events do not yet have a public self-service deletion workflow or a finalized retention schedule. We retain these staging records while needed for testing, account operation, security, fraud prevention, recordkeeping, and legal obligations. Operational logs follow provider configuration and retention periods. Correspondence is retained as reasonably needed to answer, document, or defend the request. These schedules and the deletion process must be finalized before public accounts launch.

Your choices and rights

You may request access, correction, deletion, or a copy of information associated with you, and may object to or restrict certain processing where applicable. Because an anonymous quota identifier is one-way and is not linked to contact information, we may be unable to identify a particular quota record as yours. Some requests may be limited by security needs, another person’s rights, or legal recordkeeping requirements; we will explain applicable limits. We will verify requests appropriately and will not discriminate for exercising privacy rights. You may also complain to your local data-protection authority. Email the address above; authorized agents should include proof of authority.

International use and changes

Splice is operated from the United States. Cloudflare and WorkOS may process data in other countries under their published safeguards. We will post material policy changes here and update the date above. We do not knowingly collect personal information from anyone under 15; if you believe a child has used the service, contact us promptly.

Terms of Service

By using Splice, you agree to these Terms and acknowledge the Privacy Notice. You must be at least 15. If the law where you live requires parental or guardian consent above that age, you must have it.

The service

Splice provides browser-based video frame extraction and export on an “as available” basis. The public free allowance is currently 15 extraction starts per network-derived quota identifier per UTC day. Restricted staging accounts may instead receive an account-based daily allowance or a time-limited voucher allowance. Account access is not a public feature or promise until it is expressly enabled for the public service. Limits, formats, browser support, and features may change. No paid plan, service-level guarantee, cloud video storage, content screening, or MCP integration is currently included.

Staging accounts

If you are invited to the restricted staging environment, you must submit the current age, Terms, Acceptable Use, and Privacy acknowledgment before WorkOS sign-in can complete. Authentication is handled by WorkOS, while Splice issues its own secure session and enforces account roles and entitlements on the server. Staging access may be reset, disabled, or removed while testing. A staging voucher changes only the account’s extraction allowance; it is not money, a gift card, or a guarantee of a future paid benefit.

Your content and responsibilities

You retain your rights in files you process. Splice does not receive a license to video or frames that remain on your device. You represent that you have the rights and permissions needed to process and use the material, and that your use complies with law and these policies. You are responsible for reviewing exports before providing them to an AI system or anyone else; their separate terms and privacy practices apply.

Availability and warranties

To the maximum extent permitted by law, Splice is provided without warranties, including warranties of accuracy, fitness, merchantability, noninfringement, or uninterrupted operation. Browser decoding can omit or fail on unsupported or damaged media. Nothing here excludes a warranty or remedy that law does not permit us to exclude.

Liability

To the maximum extent permitted by law, T Waters will not be liable for indirect, incidental, special, consequential, exemplary, or lost-profit damages arising from Splice. For direct claims, aggregate liability is limited to the greater of US $100 or the amount you paid for Splice in the prior 12 months. These limits do not apply where prohibited or to liability that cannot legally be limited.

Termination, law, and contact

We may suspend or disable access reasonably believed to violate these Terms, evade limits, misuse vouchers or roles, or threaten users or the service. You may stop using Splice at any time. Maine law governs these Terms, without overriding mandatory consumer protections that apply where you live. Before filing a claim, please email contact@alexwaters.us so we can try to resolve it informally. We may update these Terms prospectively by posting a revised date. Public account launch may require a new acknowledgment.

Accessibility Statement

Splice is committed to access for people with disabilities and targets the Web Content Accessibility Guidelines (WCAG) 2.2 Level AA. Accessibility is an ongoing practice, not a one-time declaration.

Measures and compatibility

The site uses semantic HTML, keyboard-operable controls, visible focus, text alternatives for extracted frames, reduced-motion support, responsive layouts, and status text. It is designed for current versions of major browsers with JavaScript and WebCodecs support.

Known limitations

Video decoding depends on browser and operating-system codec support. Large frame libraries can be demanding for magnification or screen-reader users. Cloudflare Turnstile is a third-party security component. We are continuing manual keyboard, zoom, contrast, and assistive-technology testing and do not claim complete conformance until that testing is finished.

Feedback

If you encounter a barrier or need the information or service in another format, email contact@alexwaters.us or write to the mailing address above. Please describe the page, task, browser, and assistive technology if you are comfortable doing so. We aim to acknowledge accessibility requests within five business days.

Cookies & Data Collection Notice

Public service: Splice does not use advertising or analytics cookies and does not store your video or frames in browser storage. Cloudflare and Turnstile may use strictly necessary cookies, temporary storage, network information, and browser signals to deliver and protect the service. Turnstile can often complete without an interactive puzzle.

Restricted staging accounts: Splice uses a short-lived, secure, host-only, HttpOnly cookie to protect the WorkOS redirect and a secure, host-only, HttpOnly session cookie after sign-in. Only a hash of the Splice session token is stored in the database. WorkOS and Cloudflare Access may use their own strictly necessary authentication storage. Blocking this storage can prevent sign-in or security checks from working.

There is no optional-cookie toggle because the technologies currently in use are for service delivery, authentication, security, and quota enforcement. If optional analytics, advertising, or payment technologies are introduced, this notice and any required choices will be updated before they are enabled.

Notice at collection

When you load or use Splice, identifiers and internet/network activity are collected for hosting, security, fraud prevention, and quota enforcement. If you use restricted staging accounts, the account, authentication, session, acknowledgment, entitlement, role, voucher, announcement, rate-limit, and audit categories described above are also collected as applicable to your activity. They are retained as described in the Privacy Notice and are not sold or shared for behavioral advertising. The extraction checkbox confirms the age requirement and your policy acknowledgment; it is not consent to advertising, content upload, content scanning, or a waiver of privacy rights.

Acceptable Use Policy

Do not use Splice to:

• process material you do not have a lawful right to use;
• create, possess, process, facilitate, or distribute child sexual abuse material (CSAM), including prohibited AI-generated, morphed, or photorealistic depictions;
• create or distribute non-consensual intimate imagery, sexual exploitation, grooming material, or credible threats;
• harass, defraud, impersonate, stalk, or violate another person’s privacy or publicity rights;
• evade quotas or security controls, bypass Turnstile, forge or inject authentication cookies, misuse vouchers or roles, probe other users, disrupt the service, distribute malware, or attempt unauthorized access;
• violate sanctions, export controls, court orders, or other applicable law.

Current local-mode boundary

Splice has zero tolerance for child sexual exploitation, but the current local-only frame extractor does not upload, inspect, classify, or retain your video or frames. It therefore cannot claim that prohibited media has been detected or manually reviewed. The prohibition above still applies, and account, network, or service access may be restricted for independently verified misuse.

Future hosted safety process

If a future feature uploads or scans media, its interface and privacy notice will explain what is sent, why, and what choices apply before that processing begins. Automated signals will not, by themselves, be described as a legal determination. Suspected cases containing media that Splice lawfully possesses may be routed to a restricted manual-review process staffed only by specifically authorized and trained safety reviewers—not ordinary account administrators.

Following appropriate review, we may preserve relevant information and report apparent violations to the National Center for Missing & Exploited Children (NCMEC), law enforcement, or other competent authorities when required or authorized by applicable law. Review access is intended to be limited, authenticated, logged, and separated from ordinary support and administration; those controls are plans, not a claim about a currently operating review system.

Do not submit illegal material to test our controls or include it in a support request. Security and safety testing must use lawful synthetic benchmarks supplied or approved for that purpose. A person who believes lawful material was restricted incorrectly may contact contact@alexwaters.us without attaching the media.

Good-faith security research performed only against systems you own or with written authorization should be reported under the Security section. We may restrict service to protect users and infrastructure and may preserve or disclose relevant records when lawfully required.

Copyright & Intellectual Property

Splice branding, site design, and software are protected by applicable intellectual-property law. Your source video is processed locally and is not hosted by Splice, so Splice generally cannot remove content from a user’s device or exported files. For a claim concerning material published by Splice itself, email contact@alexwaters.us with your contact details, identification of the work and challenged material, its URL, a good-faith statement, an accuracy-and-authority statement, and your physical or electronic signature. Misrepresentations may create liability.

Security & Vulnerability Disclosure

Splice minimizes server-side data, validates quota claims and account entitlements on the server, uses bot protection, rejects malformed or duplicate Splice session cookies, stores only hashes of Splice session tokens, and applies browser security headers. Restricted administrative actions require server-side roles and recent phishing-resistant authentication. These are design and implementation measures, not a security certification or guarantee. No security system is perfect. Please do not send secrets, exploit data, or sensitive video through email.

Good-faith reports

Send a concise report to contact@alexwaters.us with the affected URL, reproduction steps, impact, and suggested remediation. Test only with your own accounts and data; avoid privacy violations, persistence, denial of service, social engineering, automated high-volume traffic, and access beyond what is necessary to demonstrate the issue. Stop if you encounter another person’s data and report it immediately. We do not currently offer a bug bounty or promise payment, but we welcome responsible reports and will make a good-faith effort to acknowledge them.