Privacy Policy

1. Who We Are

Grabbr is made by twoplus11 LLC, a Missouri limited liability company (twoplus11.com). When this policy says "we," "us," or "our," it means twoplus11 LLC.

Questions about this policy? Email us at jeremy@twoplus11.com.

2. Data We Do Not Collect

We want to be clear about what we don't do:

• Your downloads are yours. Grabbr downloads files directly to your PC. We have no record of what you download, and downloaded files are never transmitted to our servers.
• Browser cookies stay on your device. Cookie-based access to restricted content is off until you choose a cookies.txt file yourself in Settings. That file, and anything in it, is read locally and passed to the download engine on your own PC. It is never uploaded to us.
• No usage analytics. The app does not track how you use it or report what you download. Its only routine request to us is a check for a new version, and you can turn that off in Settings.
• Personal users send us nothing but the update check. For free personal use there is no key and no validation. The only request Grabbr makes to us is the update check described in section 3.

3. Data We Do Collect

Update checks. Grabbr periodically checks whether a newer version exists, and whenever you check manually. You can switch the automatic check off. The request goes to api.twoplus11.com and identifies the app and the version you are running; like any web request, it also carries your IP address. We record that the check happened, with a one-way daily hash of that address rather than the address itself, together with the browser-style identifier your PC sends with any web request, so we can count how many installs are active. It says nothing about your files. If you install the update, that download is a direct request to twoplus11.com, verified by signature and version before Grabbr runs it.

Business license purchases. If you purchase a Business License, you provide your company name, work email address, and number of seats. We receive your email address and company name to deliver your license key and manage your account. Payment card data is handled entirely by Stripe. We never see or store it.

License validation. When you activate a business license key, Grabbr sends the license key and a one-way hash of a Windows machine identifier (which cannot be reversed) to our licensing server to verify your license, along with the device name you choose to show so you can tell your own computers apart. We never receive anything about your files or what you download. These requests are routed through Microsoft Azure, which may retain standard web server access logs (including IP addresses) for security and operational purposes.

4. Downloading From Third-Party Sites

Grabbr's core function is downloading video and audio from other websites: YouTube, TikTok, Vimeo and 1,800+ others. This is worth being explicit about: when you paste a link, Grabbr makes a direct request from your PC to that site to fetch the video, the same way your browser would if you watched it there. That site sees your IP address and the request, under its own privacy policy. Grabbr does not shield or proxy this traffic by default. (If you configure a proxy in Settings, downloads route through that server instead, and its operator can see them; nothing else in Grabbr uses the proxy.) Grabbr also loads a video's thumbnail from the source site (for example, img.youtube.com) before you download it, so you can see what you're about to get.

None of this traffic passes through, or is visible to, twoplus11's own servers. It is a direct connection between your PC and the site you chose.

5. Third-Party Services

• SponsorBlock: when Smart Trim is enabled, Grabbr sends the YouTube video ID to the SponsorBlock API (sponsor.ajay.app) to retrieve sponsor-segment timestamps. SponsorBlock is an independent project with its own privacy policy; this happens only for YouTube videos with Smart Trim on, and SponsorBlock receives your IP address as part of that request.
• yt-dlp self-update: clicking "Update yt-dlp" in the app downloads the latest yt-dlp binary from GitHub. GitHub may log this request.
• The site you are downloading from: see section 4.
• A proxy, if you configure one: routes your downloads through that server. The update check, license validation, and the SponsorBlock lookup do not use it. The field is empty until you fill it in; Grabbr never sets one for you.
• Stripe: payment processing for business licenses. See stripe.com/privacy.
• Microsoft Azure: our licensing API is hosted on Azure App Service.

We do not use advertising networks, social media pixels, or third-party analytics tools.

6. Where Grabbr Stores Things on Your PC

Everything Grabbr saves stays inside your own Windows user account, and none of it is transmitted to us:

• Preferences (format, quality, Smart Trim toggles, speed limit, your chosen cookies.txt path, language and window size) in %APPDATA%\Grabbr.
• Your download history, kept locally so it can be sorted, searched, and exported as JSON. It is never uploaded.
• Your business license key and its cached validation result, if you have one, in your user profile folder. The cache exists so the app keeps working for up to 72 hours without a network connection.
• The application itself in %LOCALAPPDATA%\Programs\Grabbr, or in C:\Program Files\Grabbr if you chose to install it for everyone who uses the PC.

Uninstalling removes the application. If you want every trace gone, delete the folders above as well.

7. The Browser Extension

Grabbr's Chrome/Brave/Edge extension talks to the desktop app over a local connection on your own PC (127.0.0.1:8765 for the download queue, 127.0.0.1:8766 to send a URL). This link never leaves your machine. The extension reads the URL of the page you're on when you click its icon or press its keyboard shortcut, and sends nothing else. It requires no account and is not distributed through the Chrome Web Store; you install it directly from Grabbr or this site.

8. If You Contact Us

If you email us (for support, beta feedback, or a question about your business license), we receive your email address and whatever you choose to put in your message. We use this information only to reply to you and to fix the problem. We do not sell or share it.

9. Children's Privacy

Grabbr is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

10. Your Rights

If you are in the European Union, United Kingdom, or California, you may have the right to access, correct, or delete personal data we hold about you. The only personal data we hold is what you send us by email and, for business-license holders, the company name and email tied to your purchase. You can exercise these rights by contacting jeremy@twoplus11.com. We will respond within 30 days. Deleting your business-license record will deactivate the license.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Effective date" at the top of this page when we do. We encourage you to review this page periodically.

12. Contact

Questions or concerns about this Privacy Policy? Contact us at:

twoplus11 LLC
jeremy@twoplus11.com