Privacy Policy

Last updated: October 15, 2026

TubeSafe is a Chrome extension that scores the compliance risk of public YouTube channels. You can use it without an account. Signing in with your email is optional and adds score history, watched channels, and email alerts. This policy explains what we collect in each case, how we use it, how long we keep it, and how to delete it.

Without an account

On install, the extension creates a random device identifier (a UUID) and stores it in your browser's local extension storage. It is sent with each request. Our server never stores the raw ID; it stores only a one-way hash of it, which we use to:

• enforce the daily limit on new scans;
• keep a scan log: which public channel was scanned, when, the resulting score, whether it was served from cache, where in the extension the scan started (popup or channel-page badge), and the extension version;
• record basic usage events inside the extension: popup opened, scan errors (for example, limit reached), badge clicked, a signal's info tooltip opened, feedback link clicked, sign-in opened or completed, a channel watched or unwatched, and a pre-publish check run (its verdict only, never the draft itself).

With an account (optional)

If you sign in, we also store:

• Your email address, used to sign you in and to send the emails described below. Sign-in uses a 6-digit code we email you; there is no password. We store only a hash of the code, and it expires after 10 minutes.
• Account details: when the account was created, when you last signed in, and your plan.
• Sessions: a hash of the sign-in token stored in your extension. A session expires after 90 days without use, or when you sign out.
• Linked devices: the hashed device ID of each browser you sign in from. When you sign in, that device's existing scan log is attached to your account so your history isn't empty, and scans you make while signed in are recorded against your account.
• Watchlist: the public channels you watch, an optional label, and the score you last saw for each, which we compare against to decide when to alert you.
• Alert log: which alerts and policy emails were sent to you and when, so we don't send duplicates.
• Billing (paid plans only): your plan, subscription status, renewal or end date, and the customer and subscription IDs from our payment provider. We never see or store card details.

Emails we send

• Sign-in codes, only when you request one.
• Watchlist alerts when a watched channel's risk band changes or its score drops noticeably. Watched channels are rescanned automatically (weekly on the free plan).
• YouTube policy updates when YouTube changes rules relevant to the score.

Every alert and policy email has a one-click unsubscribe link that stops both. We don't send marketing for other products and we never sell or rent your email address.

What we do not collect

• No Google account access, OAuth tokens, passwords, or YouTube watch history.
• No browsing history beyond the YouTube channel pages where the extension shows its badge, and the scans you start.
• No tracking cookies, advertising identifiers, or third-party analytics. Usage events are first-party and stay on our server.
• No stored IP addresses, with one exception: to stop abuse of sign-in emails, we keep a one-way hash of the requesting IP address and email for each code request, for 24 hours.

What happens during a scan

When you scan a channel, the extension sends the channel handle or URL to our Cloudflare Worker. The worker fetches publicly available channel data from the YouTube Data API v3 using a server-held API key, computes a compliance score, and returns the result.

Thumbnail perceptual hashes are computed entirely inside your browser. The pre-publish check (comparing a draft title and thumbnail with a channel's recent uploads) also runs entirely in your browser: your draft title and image are never uploaded.

Data storage and retention

• Scan results (public channel data and scores) are cached for 24 hours, and channels on someone's watchlist are rescanned on a schedule.
• Channel score history (public channel data and scores only, with no device or account information) is kept to show how channels' scores change over time.
• Scan log, usage events, and alert log are kept for up to 12 months, then deleted automatically.
• Account data (email, account details, linked devices, watchlist) is kept until you delete your account.
• Sign-in codes expire after 10 minutes, sign-in request hashes after 24 hours, and sessions after 90 days without use.
• Your local device ID and sign-in token stay in your browser until you sign out, clear the extension's storage, or uninstall it.

Service providers

• Cloudflare hosts the website, the API, and the database. Standard Cloudflare access logs may be generated as a side effect of serving requests; we don't cross-reference them with scan activity.
• Resend delivers our emails. It receives your email address and the content of each email we send you.
• Our payment provider (merchant of record) runs checkout, billing, invoices and sales tax for paid plans. If you subscribe, it collects your payment details and billing address under its own privacy policy and tells us your subscription status.
• Google (YouTube Data API v3) receives requests for public channel data from our server. We don't send it your device ID, email, or usage.

We don't share or sell personal data to anyone else. The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Your choices and rights

• Delete your account from the extension (account menu, then Delete account, or on the account page). This immediately deletes your email, account details, sessions, linked devices, watchlist, alert log, billing records, and the scan log and usage events of your linked devices. If you have an active paid subscription, cancel it first so you aren't billed again; the payment provider keeps its own transaction records as required by tax law.
• Stop emails with the unsubscribe link in any alert or policy email.
• Sign out from the account menu to end the session on that browser.
• Without an account, uninstalling stops all collection. Clearing the extension's storage rotates the device ID, after which past records can no longer be associated with your browser.
• To access, correct, or delete anything else, email us at the address below. We'll respond within 30 days.

Children's privacy

TubeSafe is not directed at children under 13 and does not knowingly collect information from them.

Changes to this policy

If this policy changes, the updated date at the top of this page will reflect the change. Material changes will also be noted in the extension's Chrome Web Store listing changelog.

Contact

Questions, concerns, or data requests: tubesafeapp@gmail.com.