DRAFT. This page is a plain-language draft written for the site owner and has not been reviewed by a lawyer. The owner must review and adjust it before the public launch. Set LEGAL_REVIEWED=true to hide this notice.

Privacy Policy

Last updated: October 2026 · Service: https://ytcable.net · Operated by <your name or business name>

YT-Cable ("we", "the service") turns the YouTube channels you subscribe to into a cable-box style guide. This page explains, in plain language, what we access, what we store, and how you can delete it.

1. What we access

When you click Sign in with Google you are asked to allow:

Your basic Google profile (openid, email, profile): your Google account ID, name, email address and profile picture. We use these only to identify your account and show who is signed in.
Read-only access to your YouTube account (https://www.googleapis.com/auth/youtube.readonly): we use this to read the list of channels you subscribe to (channel IDs, names, descriptions and thumbnails).

Using that access, we also request public information from the YouTube Data API about your subscribed channels (topic categories, keywords) and their latest public videos (title, description, tags, duration, thumbnail, live status). This is used to place channels and videos on cable channels.

We cannot, and do not, post, comment, like, subscribe, unsubscribe, or change anything on your YouTube or Google account. We do not read your watch history, private playlists, or private videos, and we never see your Google password.

2. What we store

Account record: your Google account ID, name, email address, and profile picture URL.
Google access token (refresh token): kept encrypted at rest (AES-256-GCM) so we can keep fetching your subscriptions without asking you to sign in every hour. It is never shown in the app or written to logs.
A snapshot of your subscriptions and the guide built from it. It is refreshed regularly, and any snapshot older than 30 days is deleted automatically.
Your choices: custom channels you create, channels and videos you moved, channel order, and settings.
Session records: a random session identifier (stored only as a hash), when it was created and last used. Sessions last up to 30 days and end sooner if unused or when you sign out.
Usage counters: how many YouTube API units your account has used per day, to stay within quota limits.
Shared public cache: public YouTube metadata (channel topics, video durations and tags) that is not tied to your account and is deleted after 30 days.

We do not store your watch history. Video playback happens in YouTube's embedded player, which is operated by YouTube/Google and subject to their policies.

3. Cookies

We use one essential, HTTP-only cookie to keep you signed in (and two short-lived cookies during sign-in to protect against forgery). We do not use advertising or analytics cookies or trackers. The embedded YouTube player may set its own cookies; see the Google Privacy Policy.

4. How we use and share data

We use your data only to provide and improve the YT-Cable guide you see. We do not sell it, rent it, use it for advertising, or use it to train AI models.
We do not transfer data from Google APIs to anyone else, except as needed to provide the service (our hosting provider processes it on our behalf), to comply with law, or as part of a merger or sale where you are notified first.
No humans read your Google user data, except where necessary for security, to comply with law, or with your explicit consent.

5. Google API Services User Data Policy (Limited Use)

YT-Cable's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. YouTube API Services

YT-Cable uses YouTube API Services. By using YT-Cable you agree to be bound by the YouTube Terms of Service and acknowledge the Google Privacy Policy. You can revoke YT-Cable's access to your data at any time through the Google security settings page.

7. Deleting your data

In the app: click Account → Delete my data. This immediately erases your account record, encrypted token, subscription snapshot, settings and sessions from our database and revokes YT-Cable's access at Google.
By request: email <your contact email> from the address on your Google account and we will delete your data within 30 days (normally much sooner).
At Google: removing YT-Cable at myaccount.google.com/permissions stops all further access. Signing out of YT-Cable also revokes the token.
Inactive accounts (not used for 365 days) are deleted automatically. Backups, if any, are overwritten within 35 days.

8. Security

All traffic uses HTTPS. Google refresh tokens are encrypted at rest, session identifiers are stored only as hashes, and each account's data is kept separate from others. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

9. Children

YT-Cable is not directed to children under 13 (or the age required in your country), and requires a Google account.

10. Changes

If we change what data we access or how we use it we will update this page and, for material changes, tell signed-in users before the change applies.

11. Contact

Questions or requests about your data: <your contact email>.