← footage.repair

Privacy & Terms

This describes what the code actually does — not a template. If it ever stops matching the code, that's a bug; tell me. (The rest of the site has eight languages; this page doesn't yet — legal wording is the one place I didn't want to risk a mistranslation.)

Privacy

What never happens

Your file is never uploaded. The recovery runs entirely in your browser, using the File System Access API: bytes are read from the source file on your drive and written straight to a destination file you choose, on the same device. There is no step where the video data crosses the network, in either direction.

What is collected, and why

A fingerprint — a SHA-256 hash of the first 64 KB of the file, plus its byte size. This is the only thing that leaves your browser that's derived from the file itself. It's used solely to bind a paid license key to the one file it was bought for, so a key can't be reused on a different recording. A hash of 64 KB cannot be turned back into your footage.
Anonymous usage reports — whether a recovery succeeded, the file extension, size in GB, the camera model (if the file's own metadata names one), codec, audio format, container layout, and a failure reason if it didn't work. No filename. No fingerprint. Nothing that ties a report to a license or a person. This is how I know which camera models and failure patterns to support next — it's the only telemetry this service has, and it's in the code as the reports table if you want to read it yourself.
Your email address (during early access) — asked for once, right before a recovery starts, and stored with when you used the service, the camera model and file size of that recording, your language and country. It's used for two things: to tell you before early access ends and pricing begins, and to follow up about your own recovery — checking it worked, or letting you know when I fix a problem that affects your file or add support for your camera. News about new features and newly supported cameras in general is only sent if you tick the separate, unticked-by-default box; that choice is stored with the time you made it. Every email lets you opt out by replying or unsubscribing. Your email is never sold or shared.
Reviews you choose to write — if you leave a line after a recovery, the text, the name you typed (blank means anonymous), file size and camera model are stored and shown publicly on the reviews page.
Country — derived at Cloudflare's network edge from your connection (the cf-ipcountry header). Your IP address itself is never written to the database.

What stays in your browser only

Your language preference, the email address you entered (so you aren't asked again on the next file), and — briefly, only until you claim it — the order ID from a completed purchase, kept so the receipt page can look up your license key after Polar redirects you back. Both live in localStorage, on your device, never sent anywhere.

Third parties

Polar (buy.polar.sh) handles payment entirely. Your card, email, and billing details go to Polar, never to footage.repair's server. I only ever receive a checkout ID and, once it's paid, a license key.
Cloudflare runs the backend (a Worker plus a D1 database) that stores the license/fingerprint table, the anonymous reports, email addresses and reviews described above.
Google Fonts serves only the Korean fallback typeface on the home page (the main typeface is hosted on footage.repair itself). Like any font CDN, loading it reveals your IP to Google. If that's not acceptable to you, block the request — the page falls back to your system's font and nothing else breaks.

Retention & deletion

License records, email addresses and reviews stay until deleted on request — email brian@footage.repair and I'll remove them. Anonymous reports carry nothing to look you up by, so there's no "your report" to find and delete; that's a property of how they're collected, not a promise I'm making after the fact.

Terms

What the service does

It reads a corrupted or unfinalized camera recording (a Sony .RSV / unfinalized .MP4, or the other formats listed on the home page), reconstructs a valid, playable video file, and writes it to a location you choose. It does not un-corrupt footage that was already lost before you opened the tool — it recovers what the camera actually wrote to the card.

Pricing

footage.repair is in early access, and every recovery is currently free regardless of file size. After early access, per-file pricing will apply: a flat one-time fee by file size, paid through Polar — no subscription, no account. The change will be announced on the site in advance, and anything recovered for free during early access stays yours.

The preview is the guarantee

The free preview exists specifically so you can check before paying. If the preview plays cleanly, the full recovery will too. If the preview can't be built or doesn't look right, don't buy — that's what it's there to tell you.

Refunds

If payment goes through but the recovered file genuinely doesn't play, email me and I'll refund it. I'm not going to charge you for something that didn't work.

No warranty beyond that

This is provided as-is, run by one person, not a company with a support desk. I'll fix real bugs and answer real questions, but I can't promise every camera, firmware version, or damage pattern that exists — only what the code actually handles today.

Not affiliated with Sony, Panasonic, DJI, or any camera manufacturer.