On desktop, CapCut stores project drafts, caches, and configuration files in a specific "User Data" folder. Knowing these paths is useful for manual backups, clearing storage, or moving projects between computers. Windows Path
C:\Users\
/Users/
: Stores temporary files that can be safely deleted to free up space. AgencyCache : Specifically used for proxy files
, which are low-resolution copies of your videos used to make editing smoother. You can clear this in Settings > Performance 2. Privacy & Data Collection As a subsidiary of capcut user data
(the owner of TikTok), CapCut's data practices have faced scrutiny regarding how much personal information is harvested.
Is CapCut safe? Complete safety and privacy guide - ExpressVPN
If you are not ready to delete the app (because, let’s face it, those auto-captions are incredible), you can take steps to minimize data leakage.
Data is shared with companies that provide analytics, cloud storage, and advertising services. On desktop, CapCut stores project drafts, caches, and
CapCut claims that data for US and European users is stored in data centers located in the US and Singapore. However, ByteDance is subject to Chinese national security laws. Article 7 of China's National Intelligence Law states that organizations must "support, co-operate with and collaborate in national intelligence work." This creates a legal pathway for the Chinese government to request access to CapCut user data, regardless of where the server is physically located.
CapCut collects user data typical for a mobile video-editing app: account info (email/phone if provided), profile and device identifiers, usage and editing metadata, uploaded media (videos, images), and content metadata (timestamps, geolocation embedded in media). It may also process analytics, crash reports, advertising identifiers, and inferred interests for personalization.
| Feature | CapCut | Industry Standard (e.g., Adobe) | Risk Level | | :--- | :--- | :--- | :--- | | Data Collection | High (Content, Meta, Biometrics) | Moderate (Account, Device) | High | | Third-Party Tracking | Extensive (ByteDance + Ad Tech) | Limited | High | | Data Storage | Cloud-heavy (Default sync) | Local-first options | Medium | | Origin | China (ByteDance) | USA/Global | Geopolitical Risk | | Permissions | Broad (Mic, Camera, Screen, Storage) | Specific | High |
One of the most controversial points: CapCut’s automatic caption and voiceover features require processing your audio files. This creates a voiceprint—a unique digital signature of your voice. While ByteDance claims this is deleted after processing, privacy advocates note that voiceprints are considered biometric data in several jurisdictions (e.g., Illinois, USA), and the policy often lacks explicit consent for this category. Part 6: How to Protect Your CapCut User
CapCut user data is not just a privacy policy footnote. It is the engine that powers a billion-dollar advertising ecosystem. The app is safe from a malware standpoint—you won’t get a virus—but it is aggressive from a surveillance-capitalism standpoint.
If you are a casual creator editing pet videos, the risk may be acceptable. But if you are a journalist, a business owner, or someone who values digital autonomy, you must take the protective steps outlined above.
Remember: In the digital world, if you are not paying for the product, your data is paying for it. Use CapCut offline, deny permissions, opt out of ad tracking, and regularly purge your drafts. Your privacy is worth the extra minute of effort.
Disclaimer: This article is for informational purposes only and does not constitute legal advice. Privacy policies change frequently. Always review CapCut’s latest privacy policy and your local data protection laws before use.