Privacy Policy

Introduction

This Privacy Policy explains what information TubeKit ("we", "us") collects when you use tubekit.app, how we use it, and the choices you have. By using TubeKit, you agree to this Privacy Policy.

YouTube API Services

TubeKit uses YouTube API Services to read public information about YouTube playlists and videos, such as titles, channel names, thumbnails, durations and view counts, and the public top-level comments on a video. By using TubeKit, you are also agreeing to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

TubeKit never accesses your YouTube account. Signing in with Google (see below) only shares your basic profile; it does not give TubeKit access to your YouTube data. Private playlists, Watch Later and Liked videos are not read.

Embedded YouTube Player

Some pages, such as the playlist randomizer and the reverse playlist player, play videos in an embedded YouTube player. The player is served by YouTube, not by TubeKit. When a page with the player loads, YouTube may set cookies or use similar storage on your device and receive information such as your IP address and the videos you watch. If you are signed in to YouTube in the same browser, YouTube may link this activity to your account. This is governed by the Google Privacy Policy; TubeKit does not receive or store this information.

Information We Collect

• Playlist links you submit. When you paste a playlist link, we request that playlist's public data from YouTube. The data is cached on our servers for up to one hour so repeat requests load faster, then deleted. It is not linked to you.
• Videos you read comments from. When you use the comment finder, downloader or picker, we request that video's public top-level comments from YouTube. They are cached on our servers for up to one hour so repeat requests load faster, then deleted; the cache is keyed by video, not by person. Searching, filtering, exporting and drawing winners happen in your browser: we don't receive your searches, the files you download or the winners you draw.
• Videos you request transcripts for. Transcripts are fetched for us by third-party transcript services (currently Apify), which receive only the video ID and the requested language. Transcripts are cached on our servers for up to 7 days (1 day for "no captions" answers) so repeat requests are faster. The cache is keyed by video, not by person.
• IP address. Your IP address is used to limit how many requests one visitor can make per minute. The transcript and comment tools also use it to count your free daily videos: we store your IPv4 address (or, for IPv6, the first half of the address, which identifies a network rather than one device), the date, and the IDs of the videos you got transcripts or comments for that day.
• Bot check. The transcript and comment tools use Cloudflare Turnstile to tell people from bots. Cloudflare receives your IP address and information about your browser to run the check. Once you pass, we set a cookie (tk_human) that remembers this for one hour. It is tied to your IP address so it can't be shared.
• Account information. You can sign in with Google. Google shares your name, email address and profile picture with us, and we store them with your account. We also store your sign-in sessions (including the IP address and browser they were created from) so you stay signed in, using a session cookie.
• Credits and usage. For signed-in users, we store your credit balance, where your credits came from (sign-up bonus or subscription) and when they expire, and a history of credits used and refunded. We also store the IDs of videos you paid for with credits each day, so opening them again the same day is free.
• Payments. Paid plans are sold by Waffo, our Merchant of Record (see below). We store your plan, billing interval, subscription status, current billing period and the order and subscription references Waffo sends us. We never see or store your card or other payment details.
• Preferences. Your browser stores small cookies or local storage entries, such as your light or dark theme choice.
• Analytics. We use Google Analytics and Microsoft Clarity. They collect information such as the pages you visit, how you arrived, your device and browser type, and an approximate location derived from your IP address. Clarity also records how you interact with our pages, such as clicks, scrolling and mouse movement, through heatmaps and session replays, and masks sensitive text such as email addresses by default. Both services use cookies; see our Cookie Policy. Google and Microsoft process this data under the Google Privacy Policy and the Microsoft Privacy Statement. You can opt out of Google Analytics with the Google Analytics opt-out browser add-on, or block analytics cookies in your browser.

Payments and Waffo

Subscriptions are sold through Waffo Pancake, which acts as the Merchant of Record: Waffo is the seller of the order and handles checkout, payment, tax, invoices and refunds. When you start a checkout, we send Waffo your account ID and email address so the purchase is linked to your TubeKit account. Your payment details are collected and processed by Waffo under its own terms and privacy policy, not by TubeKit.

How We Use Information

• To calculate and show results for the playlists and videos you submit
• To run your account, track your credits and provide the plan you paid for
• To count free daily quotas, protect the service from abuse, and keep it within YouTube API and provider limits
• To understand which tools are useful and improve them

We do not sell your personal information.

Data Retention

• Cached YouTube data (playlists, videos and comments): up to one hour
• Cached transcripts: up to 7 days
• Bot check cookie: one hour
• Sign-in sessions: expire after 7 days without use
• Daily usage records (IP-based quota counts and video IDs): kept on our servers until we delete them, and used only for quotas and abuse prevention
• Account, credit and subscription records: kept while you have an account
• Analytics data: kept by Google and Microsoft according to their own retention settings

Your Choices

You can delete your account at any time in your account settings; this removes your account, sessions, credit history and subscription records. Deleting your account does not cancel a subscription with Waffo, so cancel it first. You can also contact us to ask for a copy of your data or to have it deleted. You can clear cookies and local storage in your browser settings.

Children

TubeKit is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last changed.

Contact Us

If you have any questions about this Privacy Policy, please contact us.