Privacy Policy

Last updated: April 20, 2026

TubeSafe is a Chrome extension that scores the compliance risk of public YouTube channels. This policy explains what information the extension collects, how it is used, and what it is not.

What we collect

The only data point associated with your use of TubeSafe is a randomly generated device identifier (a UUID) created on install and stored in your browser's local extension storage. This ID is sent with every scan request to enforce a daily rate limit (25 scans per device per day).

It is not linked to your name, email, Google account, or any other identity.

What we do not collect

• No name, email, or contact information.
• No Google account credentials, OAuth tokens, or watch history.
• No browsing history outside of explicit channel scans you initiate.
• No IP address beyond what is inherent in any HTTPS request. IPs are not logged or stored.
• No tracking cookies, analytics scripts, or third-party SDKs.

What happens during a scan

When you scan a channel, the extension sends the channel handle or URL to our Cloudflare Worker. The worker fetches publicly available channel data from the YouTube Data API v3 using a server-held API key, computes a compliance score, and returns the result.

Thumbnail perceptual hashes are computed entirely inside your browser. Images are never uploaded to our server.

Data storage and retention

• Scan results are cached on our server for 24 hours after computation to avoid redundant API calls. After that they expire automatically.
• Device IDs appear in our rate-limit counter (Cloudflare KV) for up to 24 hours per entry, solely to count scans per device per day.
• Your local device ID persists in your browser until you uninstall the extension or clear its storage.

Third parties

TubeSafe makes requests to the YouTube Data API v3 (operated by Google) to fetch public channel data. We do not share your device ID, usage patterns, or any other information with Google, YouTube, or any other third party.

Hosting

The landing page, privacy policy, and the API worker are hosted on Cloudflare. Standard Cloudflare access logs may be generated as a side effect of serving requests; these are transient and not cross-referenced with scan activity.

Your rights

Because we do not collect personal information, there is no account to delete. To remove all local data, uninstall the extension. To rotate your device ID before uninstalling, clear the extension's storage from your browser's extension settings.

Children's privacy

TubeSafe is not directed at children under 13 and does not knowingly collect information from them.

Changes to this policy

If this policy changes, the updated date at the top of this page will reflect the change. Material changes will also be noted in the extension's Chrome Web Store listing changelog.

Contact

Questions, concerns, or correction requests: tubesafeapp@gmail.com.