YouTube API Services & Google Limited Use

Vid Receipts uses YouTube API Services to let you connect your YouTube account and build personalized video feeds. By using these features you also agree to the YouTube Terms of Service and the Google Privacy Policy. This page is a focused summary; the full detail lives in our Privacy Policy.

1. What We Access

We request a single, read-only OAuth scope - https://www.googleapis.com/auth/youtube.readonly - and never request write access to your YouTube account. With your consent we read:

• Your YouTube channel information and the channels you are subscribed to
• Your liked videos
• The topics and categories associated with the channels you follow and the videos you like
• Public video metadata (titles, descriptions, thumbnails, durations, publish dates)
• Your playlists and their items

2. How We Use It

We use this data only to provide and improve the features you asked for, building and refreshing your personalized Discover, "For You", and playlist feeds inside Vid Receipts. From your subscriptions and liked videos we build a private interest profile, on your device, that chooses what appears in your Discover feed, including recent uploads from channels you already follow and videos in the topics your subscriptions and likes cover. If you verify a YouTube channel you own for gold creator receipts, we reuse the same read-only access to confirm the channel is yours, without a second sign-in. We never show you (or anyone else) a score or number derived from your data, we never share it, and we do not use this data for advertising or sell it.

3. Google Limited Use

Vid Receipts' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We limit our use of Google user data to providing or improving the user-facing features that are prominent in the Vid Receipts interface.
• We do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with user notice.
• We do not use Google user data for serving advertisements, and we do not sell it.
• We do not allow humans to read Google user data unless we first obtain your affirmative agreement for specific data, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymized for internal operations.

4. How We Store It

OAuth refresh tokens are held server-side only and are never exposed to the browser. We retain your connection only as long as it is active; revoking access (below) or deleting your account removes the stored token and revokes the grant with Google. Any YouTube data we cache to power these feeds, your subscriptions, liked videos, and video metadata, is deleted within seven (7) days of you disconnecting YouTube or deleting your account (in practice, immediately), and within thirty (30) days if your authorization instead lapses on its own without an explicit disconnect.

5. Revoking Access

You can disconnect YouTube at any time from your Vid Receipts settings, or revoke our access directly from your Google Account permissions. Deleting your Vid Receipts account also revokes the grant and removes the stored token.