Legal

Privacy Policy

Riplox Desktop · Last updated: 12 September 2026

Riplox Desktop is a free, open-source video downloader for Windows, published by XniperBuilds under the GPL v3. It runs on your own PC, and this policy covers the program, its browser extension, and the Send feature that lets your phone hand a link to your PC.

Data we collect

Nothing, unless you post to the Board. There is no sign-up and no login to Riplox. We do not collect your name, email, phone number, location, download history or usage analytics. The program contains no analytics or telemetry code, no advertising SDK, and no third-party trackers — it shows no ads at all. It is open source, so this is checkable rather than something you have to take our word for.

The Board is the exception, and it is set out in full further down rather than summarised away here. Posting a link sends us that link, its title, and a random identifier for your copy of Riplox that is stored only as a salted hash. As with any request to any website, your IP address reaches the server that answers; it is kept only as a salted hash, for counting how often one place is posting, and it is never shown to anybody or stored beside anything that could name you.

Data stored on your PC

To work at all, Riplox keeps a few things on your own computer only:

• Settings — your download folder, chosen quality, and the rest of your preferences.
• Download history and queue — the title, link and file location of what you have downloaded, so you can find or repeat it. You can delete any entry or clear the list.
• The pairing with your phone — a key shared between your phone and this PC, if you use Send.
• Channels you follow, if you use Following — the channel addresses you added, the options you set for each, and the ids of the videos already seen, so the same upload is not offered twice. This list stays on your PC and is never sent anywhere.
• Site sign-in, only if you choose it — if you sign in to a site so Riplox can fetch something that needs an account, those cookies are stored encrypted with Windows DPAPI, one file per site, so a copied file is useless on another machine. Signing out of one site removes only that file.
• The drop folder, if you switch it on — Riplox watches a folder you choose and reads files of links left in it. It renames each one after reading — .done, or .bad with the reason — and never deletes it. Nothing in that folder leaves your PC, and the folder is not watched at all until you turn it on.
• Downloaded files — saved wherever you point Riplox. These are your files and Riplox never sends them anywhere.

Ordinarily this lives in your Windows user folder. If you run the portable build, all of it stays in a Data folder beside the program instead, and nothing is written elsewhere on the PC.

Network use

Riplox connects to the internet for eight things, and nothing else:

• The site you asked for — to fetch the video you pasted or sent.
• Keeping its download engine current — Riplox uses the open-source yt-dlp and updates its own copy so links keep working when sites change.
• The YouTube helper — YouTube sometimes asks a downloader to prove it is not a bot. Riplox answers that with a small open-source program, bgutil-pot, which it fetches once from GitHub (about 44 MB) and then runs on your own PC, listening only to itself. A new install fetches it on its own, without asking — which is why it is written here rather than left to be discovered. It is checked against a published SHA-256 before it is allowed to run, nothing about you is sent to it or with it, and you can turn it off or remove it under Settings → YouTube.
• Checking whether a newer Riplox exists — it asks GitHub's public releases API for the latest version number. Nothing about you is sent with that request.
• The Send relay, described next, and only if you turn Send on.
• The Board, described below, and only while it is open on your screen. Never open it and Riplox never contacts it.
• Channels you follow — if you use Following, Riplox reads each channel's own public feed on a timer to see whether anything new was posted. For YouTube that is the channel's feeds/videos.xml address, requested straight from YouTube. It is a plain read of a public page, nothing about you is sent with it, and Riplox makes these requests only for channels you added yourself. Follow nothing and none of them happen.
• Asking about a link on a page — when you use Find on a page, addresses that give nothing away (no file extension, or one nobody recognises) are asked about directly, so Riplox can tell a download from a page rather than guessing from the address. It asks at most a dozen per page and reads only the answer's headers, never the page behind it. This happens only when you run Find on a page.

Send, and what the relay can see

Send lets you share a link on your phone and have the download start on your PC. It also carries plain text the same way — a key, a password, a Wi-Fi code — which arrives on the PC hidden until you copy it, and is then gone. Everything below applies equally to both.

It works two ways:

• On the same Wi-Fi, the link goes straight from your phone to your PC across your own network. It never reaches us, and it works with no internet connection at all.
• Anywhere else, it passes through our relay at relay.xniperbuilds.com. The link is sealed with AES-GCM using the key your phone and PC agreed at pairing, before it leaves the phone. The relay holds and forwards that sealed envelope; it does not have the key and cannot read the link, the quality you chose, or anything else inside.

The relay keeps a message only until your PC collects it. We do not log the contents of messages, because we could not read them if we tried.

The Board

The Board is one public room inside Riplox where people post links, and it is the only part of the program that sends anything to us. It is links and nothing else: there is no message box, no profile and no reply, and only YouTube, TikTok, Instagram, X and Snapchat Spotlight links are accepted.

Only while you are looking. The connection opens when the Board is on your screen and closes a minute after you leave it. A copy of Riplox whose Board is never opened never contacts it at all.

What we get when you post. The link, rebuilt — our server reads the platform and the content id out of what you pasted and builds a clean address from its own table, so the address you typed, including anything attached to it that was tracking you, is neither stored nor shown to anybody. The title goes with it, read by your own PC from a site you had already chosen to open, so that nobody reading the Board has to fetch anything from that platform. A random identifier for your copy of Riplox is sent too, stored only as a salted hash; it is not a name or an account, it is not derived from anything about your machine, and deleting it gives you a new one. Your IP address reaches the server the way it reaches any website, and is kept only as a salted hash for counting.

What we get when you only read. Nothing you did not already send by opening a connection: the rows themselves are the same for everybody, and reading them never tells a platform who is looking, because nothing is fetched from one.

Public, and meant to stay. Everything posted is visible to everyone running Riplox with the Board open, and a link is never deleted — including by the person who posted it. Post one only if you are content for it to stay readable.

Reporting. Every row has Report. Pressing it hides that row for you straight away, without waiting for anyone else to agree. When three different copies of Riplox, from three different places, have reported the same link, it is hidden for everyone. We can also hide a link, stop the Board taking new ones, or close it altogether, at any time.

The browser extension

The Riplox extension adds a button that sends the page you are looking at to Riplox on the same PC.

• It reads the address of the current tab, and only when you press the button or use the Riplox right-click item. It does not watch your browsing, and it does not read page content.
• That address is passed to Riplox on your own computer through Chrome's native-messaging channel. It does not go to us or to any website.
• It stores only which PC it should talk to. It has no account, sends no analytics, and shows no ads.

Third parties

Riplox Desktop bundles no advertising or analytics services. It is built on the open-source projects yt-dlp and FFmpeg, which run on your machine. When you download something, you are of course contacting the site it is hosted on, and that site's own privacy policy applies to that connection. We do not sell data to anyone, because we do not have any.

Children

Riplox Desktop is a general-purpose utility and is not directed at children under 13. It collects no personal data from anyone.

Changes

If this policy changes, the updated version will be posted at this URL with a new date.

Contact

Questions? Reach us through the Riplox Desktop page at xniperbuilds.com, or open an issue on GitHub.

Riplox Desktop is an independent program and is not affiliated with, endorsed by, or connected to any of the websites it can download from. You are responsible for how you use downloaded content — please respect copyright and creators' rights, and only save content you have the right to.