Privacy Policy

Last updated: March 24, 2026

1. Introduction

YouTube Creator Toolkit ("we," "us," or "our") provides YouTube analytics and creator tools at ytcreator.tools. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

We collect the following categories of data:

Google Account Information: Your name, email address, and profile picture, obtained through Google OAuth when you sign in.
YouTube Channel Data: Channel metadata, video statistics, subscriber counts, and content details for your own channel and any competitor channels you choose to track.
YouTube Analytics Data: Watch time, audience retention, traffic sources, demographics, device statistics, and geographic data for your own channel (accessed via the YouTube Analytics API with your authorization).
Usage Data: Feature usage metrics, API call counts, and interaction patterns within the application to improve our service.

3. How We Use Your Information

Provide YouTube analytics dashboards and performance insights for your channel.
Generate AI-powered recommendations for content optimization, SEO, and growth strategies.
Track competitor channels you select for benchmarking and competitive analysis.
Process billing and manage your subscription through Stripe.
Improve our service, fix bugs, and develop new features.
Send essential account and service notifications.

4. Third-Party Services

We integrate with the following third-party services:

Google / YouTube APIs: We use the YouTube Data API v3, YouTube Analytics API, and YouTube Reporting API to retrieve your channel and video data. Our use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Stripe: Payment processing for subscriptions. Stripe handles all payment card data directly; we never store card numbers.
Cloudflare Workers AI: AI-powered features such as script generation, SEO analysis, and content recommendations run on Cloudflare's infrastructure.

5. Data Storage and Security

All data is stored on Cloudflare D1 (SQL database) and Cloudflare R2 (object storage), both encrypted at rest.
Authentication tokens are hashed before storage (SHA-256).
All connections use TLS/HTTPS encryption in transit.
We follow the principle of least privilege for all data access.
Google OAuth refresh tokens are stored securely and used only to maintain your authorized session and access analytics data you have explicitly granted us permission to view.

6. Data Retention

We retain your analytics data for as long as your account is active. Historical snapshots are retained to provide trend analysis. You may request deletion of your data at any time (see Your Rights below).

7. Your Rights

You have the following rights regarding your data:

Export: Download a copy of all your data at any time via the /api/me/export endpoint in your account settings.
Delete: Request complete deletion of your account and all associated data via the /api/me endpoint or by contacting us.
Revoke Access: Revoke our access to your Google/YouTube data at any time through your Google Account permissions.
Correct: Update your profile information through your Google account (synced on next login).

8. Cookies and Local Storage

We use minimal browser storage. See our Cookie Policy for details. In short: we store a JWT authentication token in localStorage (not a cookie), and we do not use tracking cookies or third-party analytics trackers.

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the application. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact us at privacy@ytcreator.tools.