Privacy
What gifgif keeps, for how long, who can see it, and how to remove it. gifgif.dev is run by Huge Brain Labs, LLC. Last updated 2026-10-04.
Links are unlisted, not private
A link from gifgif.dev opens for anyone who has it. The addresses are random and cannot be guessed, search engines are asked not to index shared files and pages, and apps that preview links (Slack, Discord, iMessage and others) fetch them to show a preview. If a recording shows something private, give its link a short life (--expires 1d, or change it in your Library) or blur that part first.
What is stored when you share
- The finished file, a still preview image, and for a GIF an MP4 copy used by link previews.
- The title and description you give it, its size and dimensions, and the summary of the optimize run (the size limit, frame rate, measured quality).
- Which token or account made it, when, and when it expires.
When gifgif.dev does the optimizing, the clip you upload is processed on Cloudflare's servers and deleted once the job ends. The editor can keep an upload privately for an hour so you can change settings without sending it again, and a saved project keeps the original for 30 days only if you choose that.
How long it stays
- Links made with a free account last up to 90 days. You can pick a shorter life when you share, or change it later.
- Links made with Pro are kept until you delete them; if Pro ends, they last 12 months more.
- Links made while trying gifgif without an account last 24 hours.
- You can delete a link at any time:
gifgif delete <link>, thegif_deletetool, or your Library. The file, its previews and its page go with it.
Accounts and the one cookie
You sign in with a link sent to your email address; the link works once, for 15 minutes. The address identifies your account and is used for sign-in links and, if you're on Pro, notices about your plan such as price changes. Tokens for the CLI and scripts, and sign-in sessions, are stored only as one-way hashes. Usage is counted per day and per month (jobs and bytes) to apply your plan's limits.
Signing in on the website sets one cookie, gg_session, which keeps you signed in for 90 days or until you sign out. gifgif sets no other cookies. If you sign in after trying gifgif without an account, the links from that try move to your account and last as long as its links do.
Sign out everywhere, in your Library's Account tab, ends every browser's session at once. gifgif logout signs a computer out and revokes its token; tokens for scripts are revoked under Agent.
Deleting your account
Delete your account in your Library's Account tab. Your links (their pages and files stop working for everyone), saved edits, tokens and sign-ins are deleted, and your email address is removed from gifgif. If you're on Pro, cancel it in Manage billing first. Stripe and Link keep their own records of past payments. Links still being made when you delete are removed within two days. What stays has no address in it: your account's random id on its disabled tokens and on daily usage and view counts, and, if you had Pro, the Stripe customer and subscription ids with their dates. Expired sign-in links and sessions are deleted within a day of expiring. You can also write to report@gifgif.dev and we'll delete it for you.
Payments
Pro is paid through Stripe, and sold through Link, Stripe's checkout, which is the seller of record. Stripe collects your card and billing details; gifgif never sees or stores card numbers. Stripe processes payment data under its own privacy policy, and Link under Link's. gifgif keeps, for your account: the Stripe customer and subscription IDs, the plan (monthly or yearly), its status, renewal and end dates, whether a payment failed, and the email address Stripe has for you, used only to prefill the Manage billing sign-in. Stripe keeps payment records as the law requires; cancelling does not delete them.
Emails left on the pricing page
If you leave your email on the pricing page, it is stored with the plan you asked about, the page you left it on and when, and used only to announce Pro and the heavy-use plan. It is never shared. To have it removed, write to report@gifgif.dev.
To limit sign-ups from one network, asks are counted under a SHA-256 hash of your IP address (for IPv6, of its /64 prefix), not the address itself.
Trying without an account
Before the first clip, Cloudflare Turnstile checks that a person, not a script, is using the editor; how Cloudflare handles that check is in its privacy policy. The editor then gets a temporary key that ends after 24 hours.
Analytics without tracking
gifgif counts events on the server: page views, file loads by where they came from (such as GitHub or Slack), optimizations, uploads, edits and deletions, notify-me requests by plan, which client made a request (the CLI, the MCP server, the editor), and, for saved edits, how often projects are saved, opened and exported again. Also counted: how often each link's share page is opened (shown to Pro accounts; your own visits and link-preview bots are not counted; no IPs or cookies), and checkout starts, new subscriptions and cancellations, counted without who made them. These counts come from the server, not from scripts in your browser, and hold no cookies and no IP addresses; they are stored in Cloudflare Workers Analytics Engine.
Cloudflare Web Analytics also counts visits to gifgif.dev's pages, share pages included: a small Cloudflare script reports the page's address, the page you came from, your browser and how fast the page loaded. It sets no cookies, uses no local storage and doesn't follow you across sites. The sign-in pages and the player other sites embed don't load it.
On your own machine
The CLI and the MCP server run locally. Nothing leaves your machine unless you share, optimize remotely, or submit a background job.
Who processes data
Cloudflare hosts gifgif.dev: the website, file storage, the optimizer and email routing. Stripe and Link process payments for Pro.
Reporting and questions
Every share page has a Report link. To report a file, or for anything about your data, write to report@gifgif.dev.