Data & privacy

What data Vid Receipts collects, how it's used, and the controls you have over your information.

This guide explains what data Vid Receipts collects, how we use it, and what controls you have over your information.

For the full legal details, see our Privacy Policy and Terms of Service.

What data we collect

Account information

When you sign up, we store basic account details through our secure authentication system:

Email address: Used for sign-in and account recovery
Display name: Shown on your receipts, comments, and votes
Authentication provider: How you sign in (email/password, Google, etc.)

Content you create

Everything you post on Vid Receipts is stored in our database:

Receipts: Your timestamped annotations on videos
Comments: Replies and discussions on receipts
Votes: Your validate/invalidate votes on receipts and comments
Feeds: Custom feeds you create and their sharing settings

YouTube data

If you connect your YouTube account, we access:

Subscriptions: To build your For You shelf and personalize Discover
Liked videos: A private signal used only to personalize your Discover feed, never displayed, never shown as a score
Channel information: To display your YouTube identity
Playlists and video metadata: To open your playlists as stacks and enrich annotations

YouTube OAuth access tokens are stored securely and are only used to fetch the data described above. We never post to YouTube on your behalf or access data beyond what's needed for the features you use. Your subscriptions and liked videos personalize your own Discover feed only, they are a ranking signal, never sold or shared, and we never show you (or anyone) a derived number built from them. Cached YouTube data is deleted within 30 days of you disconnecting or your authorization lapsing, in line with the YouTube API Services Terms.

Usage data

We collect basic usage information to keep the platform running smoothly:

Page views and feature usage: Helps us understand which features are popular
Error logs: Helps us find and fix bugs
Error tracking: When application errors occur, our error-tracking service collects error details and browser/device metadata to diagnose and fix issues. Personal information is filtered before transmission.
AI moderation telemetry: We track the performance and outcomes of our AI content moderation system to ensure quality and fairness

How we use your data

Your data is used to:

Provide the service: Display your receipts, process votes, manage feeds
Improve the platform: Understand usage patterns and fix issues
Moderate content: AI moderation reviews public receipt content for quality (see AI Moderation)
Communicate with you: Account notifications and important updates

We do not sell your personal data to third parties.

Managing your data

Editing your profile

Update your display name and other profile details anytime from Account Settings.

Disconnecting YouTube

You can unlink your YouTube account at any time from Settings. When you disconnect:

Your YouTube subscriptions are no longer synced
Stored access tokens are removed
Cached YouTube data (subscriptions, liked videos, and the metadata used to personalize Discover) is deleted within 30 days
Your existing receipts and content are not affected

Deleting your content

You can delete individual receipts, comments, and feeds at any time. Deleted content is permanently removed from our database.

Deleting your account

If you'd like to delete your entire account:

Go to Settings
Scroll to the Danger Zone section
Click Delete Account

Account deletion removes:

Your profile and authentication data
All receipts, comments, and votes you've created
All custom feeds you own
Your YouTube connection data

This action is permanent and cannot be undone.

Your rights

Depending on where you live, you may have additional rights under privacy laws like GDPR or CCPA:

Access: Request a copy of the data we hold about you
Correction: Ask us to fix inaccurate information
Deletion: Request that we delete your data (or use the self-service option above)
Portability: Request your data in a machine-readable format
Objection: Object to certain types of data processing

To exercise any of these rights, contact us at privacy@vidreceipts.com.

Data security

We use industry-standard security practices to protect your data:

A managed authentication service handles sign-in securely
Server-side security rules enforce access control at the database level
OAuth tokens are stored securely and scoped to minimum required permissions
HTTPS is used for all data transmission
Error tracking filters PII before transmitting error reports
Analytics data is collected only in production and never in emulator/development mode

Contact us

If you have questions about your data or privacy:

Privacy inquiries: privacy@vidreceipts.com
Legal inquiries: legal@vidreceipts.com

We aim to respond to all privacy-related requests within 30 days.