Privacy Policy

Last updated 12 October 2026

Downlyy is run by Yasas Ekanayaka, Sri Lanka (“we”). If you have a question or request about your data, email downlyy@gmail.com.

What we process

• Video links and choices. When you ask for download options, the link you paste and the format you choose are sent to our processing server, which fetches the video from the platform.
• Videos you edit. Choosing a video in the editor does not upload it; your device makes the preview. The video is uploaded only when you tap Export video or Extract MP3.
• Temporary files. Downloaded and exported files are stored on our server only so you can save them, and are deleted after 1 hour.
• Technical data. Your IP address is kept briefly in server memory to stop abuse (rate limiting). Our hosting provider may keep its own server logs for up to 30 days.
• Optional account. Only if you create one: your name, email address, a hashed password (we cannot read it), login sessions, your preferences and a private list of your past jobs (title, type, status and date).

We never ask for your TikTok, Instagram, Facebook or YouTube password, and Downlyy contains no advertising or analytics trackers.

What stays on your device

• Your “Recent downloads” list (video title, platform and original link) and your permission-checkbox choice are saved in your browser or app so you can find videos again. They are never sent to us. Tap Clear list to remove them.
• If you log in, a session token is kept in your browser tab until you log out.
• The Android app reads your clipboard only when you tap Paste, and opens videos only through the file picker when you choose one. On Android 8–9 it may ask for storage permission to save downloads. It does not use your camera, microphone, contacts or location.

How long we keep data

• Downloaded and exported files, uploads and guest job records: 1 hour.
• Download options for a link: 15 minutes.
• Login sessions: 7 days. Email verification links: 24 hours. Password reset links: 30 minutes.
• Accounts whose email is never verified: deleted after 7 days.
• Account job history: until you clear it or delete your account.
• Restarting the server deletes all temporary files.

Who else is involved

• The platform you download from (TikTok, Meta or YouTube) receives the request from our server, not from your device.
• Hosting: Hostinger, Lithuania (EU).
• Network proxy (only if we enable one): passes our server’s requests on to the platforms.

We do not sell or rent personal data, and we do not share it for advertising.

Security

Connections use HTTPS. Videos are processed in an isolated environment, passwords are stored as salted hashes, and each finished file can only be opened with its own unguessable link.

Your choices and rights

You can clear your history or delete your account at any time from My account. Deleting your account removes your profile, sessions and history, and cancels your running jobs. Files you already saved to your device are yours and are not affected. To ask for a copy of your data, a correction or deletion, email downlyy@gmail.com. We reply within 30 days.

Children

Downlyy is not meant for children under 13, and we do not knowingly collect their data. If you think a child has created an account, email us and we will delete it.

Changes

If we change this policy, we will update the date above and post the new version here.