Privacy

Your keys stay in your browser

GrabBroll has no accounts, no tracking, and no key vault. This page explains in plain language what the tool stores, what it sends, and to whom.

Last updated: July 2026

The short version

  • No account is needed. You do not register, you do not give us a name, and there is nothing for us to profile.
  • Your API keys live in your own browser. They are saved in localStorage on your device. We never copy them to a database.
  • Your script goes straight to your AI provider. The request is sent from your browser using your own key. It does not pass through us.
  • Storyblocks is the one exception. That search has to be signed on our server, so the search words and your Storyblocks keys pass through it. Nothing is written to disk. Full detail is further down this page.
  • Clearing your browser data deletes everything. There is no copy of it anywhere else.

What is stored, and where

Everything below is saved by your own browser, on your own device, using localStorage. It is not sent to us and there is no server copy. This is the complete list, nothing is hidden.

cv_px
Your Pexels API key. Used by your browser to call Pexels directly.
cv_pb
Your Pixabay API key. Used by your browser to call Pixabay directly.
cv_sbpubcv_sbpriv
Your Storyblocks public and private keys. Read only when you run a Storyblocks search. See the section below.
cv_aiprovcv_aikeycv_aimodel
Your AI provider, key, and model. Anthropic or OpenAI. Used by your browser to call that provider directly.
cv_draft
Your script draft. Saved as you type so you do not lose work on a refresh.
cv_favs
Your favourite clips. Links and thumbnails you starred.
cv_recent
Your recent searches. Shown as quick chips.
cv_srcscv_theme
Your settings. Which sources are switched on, and light or dark mode.

Anyone with access to your device can read localStorage. That is true of every browser storage. Use GrabBroll on a device you trust, and if you are on a shared computer, clear your keys when you finish.

What leaves your browser

GrabBroll is a bring your own key tool, so your browser talks to each service itself. Here is every destination and exactly what reaches it.

Pexels
Your search words and your Pexels key go from your browser to Pexels. We never see the request.
Direct from browser
Pixabay
Your search words and your Pixabay key go from your browser to Pixabay. We never see the request.
Direct from browser
Anthropic or OpenAI
In Script mode, your script text and your AI key go from your browser to the provider you chose, so it can split the script into scenes. We never see your script. Their own privacy terms apply to that request.
Direct from browser
Storyblocks
Your search words and both Storyblocks keys are sent to our server, which signs the request and forwards it to Storyblocks. Read the next section for the full explanation.
Through our server

The one exception: Storyblocks

We would rather tell you this plainly than hide it in small print. Storyblocks cannot be called from a browser. Its API refuses cross origin requests and it requires every search to be signed with a secret. So GrabBroll runs a single small route on its own server that signs the request for you. Nothing else in the tool works this way.

What passes through our server

  • Your Storyblocks search words
  • Your Storyblocks public key
  • Your Storyblocks private key, used only to compute the signature for that one request
  • Your page number and filters

What our server never does

  • Write your keys to a database or a log file
  • Send your keys back in the response
  • Keep the keys after the request finishes
  • Touch your script, your favourites, or any other source

If that trade is not acceptable to you, simply leave Storyblocks switched off. Turn it off in the sources panel and remove the keys. Pexels and Pixabay keep working, and then nothing you do in GrabBroll reaches our server at all.

What we never do

No tracking

No analytics scripts inside the tool, no pixels, no fingerprinting, no session recording.

No key vault

We do not upload, mirror, or back up your API keys. There is no server side copy to breach.

No profiles

No accounts, no user records, no history of what you searched for or which clips you took.

No selling or sharing

Nothing is sold, rented, or handed to advertisers or data brokers. There is nothing to sell.

No reading your script

Your script never reaches us. It goes from your browser to the AI provider you chose, with your key.

No quiet changes

If this ever changes, the date at the top of this page changes with it. We will not move the goalposts silently.

Cookies, logs, and the website itself

Cookies

The GrabBroll tool sets no cookies. It uses localStorage instead, which is not sent with network requests. WordPress itself may set a cookie if you ever log in to the site, and it is used for nothing but keeping you signed in.

Server logs

Like every website on the internet, our hosting keeps standard access logs. These record things such as IP address, browser type, and the page requested. They exist for security and for keeping the site running, they are not used to build a profile of you, and they are not joined up with anything you do inside the tool.

Where the site runs

The site is hosted on shared infrastructure and served over HTTPS. Requests to Pexels, Pixabay, Storyblocks, Anthropic, and OpenAI are handled by those companies under their own privacy policies, which is worth reading if you care about where your script goes.

You are in control

Because nothing is stored on our side, you do not need to email us to exercise any right. You already hold the only copy.

1

Delete everything

Clear site data for this domain in your browser settings, or use your browser console. Every key, favourite, draft, and setting is gone instantly and permanently.

2

Remove one thing

Open the keys panel and clear any field you no longer want saved. Use Clear on the favourites bar to drop your starred clips, or clear your recent searches from the chips.

3

Take your data

Your favourites export to .txt or .csv with one click. It is your list, in a plain file, with no request form and no waiting period.

Questions about any of this

If something here is unclear, or you think we have got a detail wrong, tell us. Write to hello@grabbroll.com and a real person will answer.

If this policy changes, the date at the top of the page changes too. Material changes will be called out on the page rather than slipped in quietly.

Open the tool