Introduction
Tube Stash ("we", "our", or "the Extension") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Chrome/Edge browser extension.
Information We Collect
1. Account Information
- Email address: Collected when you register via email or Google OAuth
- Display name: Your name from Google account (if using OAuth) or provided during registration
- Profile picture: Your Google profile picture (if using OAuth authentication)
- Password: Encrypted and stored securely (for email registration only)
2. Video Collection Data
- Video metadata: YouTube video IDs, titles, thumbnails, and channel information for videos you save
- Categories/Topics: Custom categories you create to organize your videos
- Timestamps: When videos were added to your collection
- Public transcripts: Retrieved only when you use the title-answer / takeaway feature. Transcripts are processed to generate that answer and are not stored as part of your saved collection
3. Usage Data
- API usage count: Number of AI categorization requests made
- Title-answer usage: Number of title-answer / takeaway requests made
- Video count: Total number of videos saved
- Category count: Number of categories created
- Mini-player usage: Number of times you've used the mini-player feature
- Device information: Unique device IDs for multi-device sync
- Last seen timestamps: When each device last accessed your account
4. Subscription and Payment Information
- Subscription tier: Free or Premium plan
- Billing cycle: Monthly or yearly (for Premium users)
- Payment processing: Handled securely by Stripe (we never store credit card information)
- Stripe Customer ID: Used to manage your subscription
5. Technical Data
- Browser type and version: To ensure compatibility
- Extension version: For troubleshooting and updates
- Error logs: Anonymous crash reports to improve stability
How We Use Your Information
We use your information to:
1. Provide Core Functionality
- Save and sync your video collections across devices
- Organize videos into categories
- Enable mini-player functionality
- Provide AI-powered categorization suggestions
- Generate title-answer / takeaway summaries when you request them
2. Account Management
- Authenticate your account
- Manage subscription status (Free/Premium)
- Process payments through Stripe
- Handle refund requests
3. Service Improvement
- Monitor usage to improve features
- Debug and fix technical issues
- Analyze feature usage patterns (aggregated, anonymized data)
4. Communication
- Send important account notifications, including email verification messages
- Send emails about extension updates
- Send questions and feedback requests about how we can improve the extension
- Respond to support requests
- Notify about subscription changes or payment issues
Data Storage and Security
Storage
- Primary Database: Supabase (PostgreSQL database hosted on secure cloud infrastructure)
- Local Storage: Temporary caching in your browser for offline access and also in chrome local storage
Security Measures
- Encryption: All data transmitted using HTTPS/TLS
- Password Security: Passwords are hashed using industry-standard bcrypt
- Authentication: JWT tokens with secure expiration
- Access Control: Role-based permissions and database-level security policies
Data Retention
- Active Accounts: Data is retained for as long as your account remains active
- Deleted Accounts: After you confirm account deletion, we permanently remove your account and collection data from our primary systems within 30 days. If you want a copy of your data, you can request an export during account deletion; your account is then disabled until that export is sent
- Backups: Encrypted disaster-recovery backups may retain a copy of deleted data for up to 30 days, after which those backups are also removed
Third-Party Services
We use the following third-party services:
1. Google OAuth
- Purpose: Optional authentication method
- Data Shared: Email, name, profile picture
- Privacy Policy: https://policies.google.com/privacy
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
2. Stripe
- Purpose: Payment processing for Premium subscriptions
- Data Shared: Email, billing information (handled securely by Stripe)
- Privacy Policy: https://stripe.com/privacy
- PCI Compliance: Stripe is PCI DSS Level 1 certified
3. OpenAI API
- Purpose: AI-powered video categorization and title-answer / takeaway summaries
- Data Shared: For categorization, video titles. For title-answer / takeaway, the video title, channel name, and public transcript
- Privacy Policy: https://openai.com/policies/privacy-policy
- Note: This data is sent to OpenAI only when you use AI categorization or request a title-answer / takeaway. We do not send your email, password, or Google account details to OpenAI
4. YouTube
- Purpose: Fetch public video metadata, thumbnails, and (when you use title-answer / takeaway) public transcripts
- Data Shared: Video IDs needed to retrieve that public information
- Note: This extension does not access your YouTube account or watch history
5. Invidious
- Purpose: Fallback source for public video metadata when YouTube metadata cannot be retrieved directly
- Data Shared: YouTube video IDs
- Service: A public Invidious instance (currently inv.riverside.rocks)
6. Supabase
- Purpose: Database and backend infrastructure
- Data Stored: All user data and collections
- Privacy Policy: https://supabase.com/privacy
7. Resend
- Purpose: Send email, including verification messages, account and payment notices, data-export copies, extension updates, and questions or feedback requests about improving the extension
- Data Shared: Email address and display name
- Privacy Policy: https://resend.com/legal/privacy-policy
Your Rights and Choices
Access and Control
You have the right to:
- Access Your Data: View all your collections and account information within the extension
- Export Your Data: Request a copy of your collection when you delete your account. There is no separate export button in settings
- Delete Your Data: Request account deletion. Your account and collection data are permanently removed from our primary systems within 30 days, and any remaining backup copies are removed within that same 30-day window
- Modify Your Data: Edit or delete individual videos and categories at any time
How to Exercise Your Rights
- Data Export: Go to Profile → Delete Account. If you have saved videos or categories, choose to request your data. Your account is disabled and we email the export to the address you provide
- Account Deletion: Go to Profile → Delete Account (requires confirmation). You can delete without requesting an export, or request an export first as described above
- Support Requests: Email us at ytcollectionsext@gmail.com
Email Communications
- We send transactional emails (email verification, payment receipts, subscription changes, and data-export copies)
- We also email you about extension updates and to ask questions or collect feedback about improving Tube Stash
- To stop update and feedback emails, contact us at ytcollectionsext@gmail.com
Children's Privacy
This extension is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
International Users
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Displaying a notice in the extension
- Updating the "Last Updated" date at the top of this policy
Continued use of the extension after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices:
- Email: ytcollectionsext@gmail.com
- Support: https://ytcollections.com
- Extension: Use the "Contact Us" button within the extension
Tube Stash is an independent extension and is not affiliated with, endorsed by, or sponsored by YouTube or Google LLC.