Privacy on boomerang.video
The short version
The clips you bounce here stay on your phone or computer. The page’s code runs in your browser, reads the video you choose, builds the boomerang there and hands you the finished file. We have no server that could receive your footage, and none is ever involved. We do measure how the site is used, as set out below, and the cookie-based part of that can be switched off in two taps.
Your clip and the boomerang
When you choose or drop a video, your browser reads it from your device. Two background workers in the page decode the part you pick with WebCodecs, keep those frames in memory for the live preview, and encode the export. The result goes straight to your downloads folder, or to your phone’s share sheet if you choose Share. Nothing about the clip, its pictures, its sound, its file name or its metadata is sent to boomerang.video or anyone else. Closing or reloading the tab discards the frames held in memory.
The camera option
Record with camera asks your browser for permission to use the camera, and only the camera: the microphone is never requested. The live view and the few seconds you record exist only in the page on your device, the camera is released as soon as you stop or cancel, and the recording is treated exactly like a video you chose from your files. You can withdraw the permission in your browser’s site settings at any time.
What your browser stores for this site
- Your theme, light or dark, in local storage as
vt-theme, if you change it. - Your analytics choice in local storage as
vt-consent, once you press OK on the notice or change Cookie settings.
The boomerang maker itself saves nothing between visits: no clips, no exports, no settings. Download your boomerang before you close the tab. Clearing this site’s data in your browser removes the two items above.
Files fetched from elsewhere
A few video formats (most often HEVC clips from iPhones in browsers other than Safari) can’t be decoded by every browser. When that happens, the page downloads the open-source ffmpeg.wasm converter from the unpkg.com content network and converts your clip on your device first. Like any web request, that download shows unpkg.com your IP address; your video is never part of it. Every other file the page needs comes from boomerang.video itself.
Hosting
Cloudflare hosts and delivers the site. Its servers handle the usual details of each request, such as your IP address, browser user agent and the page you asked for, in order to deliver it and to block attacks. We rely on legitimate interests (Article 6(1)(f) of the UK GDPR and the GDPR) because the site could not run safely otherwise. See Cloudflare’s privacy policy.
Counting visits
Cloudflare Web Analytics and Ahrefs Web Analytics report totals such as page views, referring sites and broad country and device type. Neither sets a cookie.
Google Analytics 4 shows us which styles, settings and guides people actually use, so we can improve them. It receives page views and events such as a clip being opened, a style being chosen, a slider being moved or an export finishing, with coarse details like the export format, the clip’s length in whole seconds and a file-size band. A first-party cookie with a random identifier links these together. Google Analytics never receives your video, a frame or sound from it, its name, or anything worked out from its content. Google signals and advertising features are off, and data is kept for 14 months. Google may process it in the United States under the EU-US Data Privacy Framework; see Google’s privacy policy and how Google uses information from sites that use its services.
The legal basis is our legitimate interest in understanding and improving the site (Article 6(1)(f)). Setting the cookie relies on the statistical-purposes exception in the UK Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025: analytics used only to improve a service are allowed when you are told about them and can object. Anyone browsing from the European Economic Area or Switzerland starts with Google Analytics storage off, so no analytics cookie is set for them.
Cookies and how to object
The site sets no advertising cookies. The only cookies are Google Analytics’
_ga and _ga_*, which can last up to two years. On your first
visit a short notice tells you about them; its OK button only closes it.
To object, choose Cookie settings at the foot of any page and press
Turn off analytics. This browser remembers the choice and analytics stay
off on later visits until you press Turn analytics on. If your browser
sends a Global Privacy Control signal, we
treat that as an objection too. We never sell personal data.
Who runs boomerang.video
boomerang.video is an independent, self-funded project. There are no accounts or sign-ups, and since your clips never reach us, we hold no file or profile about you.
Your rights
You have the right to ask for access to personal data about you, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, and to complain to a data protection regulator (in the UK, the Information Commissioner’s Office). Because the tool keeps nothing on our side, the practical controls are in your hands: clear the site’s data in your browser, use Cookie settings to refuse analytics, and use Google’s own privacy tools for the analytics it holds.
When this page changes
If the way boomerang.video handles data changes, this page changes in the same release and the date at the top is updated.