Privacy notice

What we store about you

• Your email address and, optionally, a display name.
• A scrypt hash of your password. We never store the password itself.
• Session records (a hashed token and an expiry) so you can stay signed in.
• Your watchlists, the channels in them, and any private notes you write.
• If you are an administrator: the review decisions you make, as an append-only audit trail.

What we do not do

• We do not sell your data.
• We do not run third-party advertising or tracking scripts.
• Payments and billing receipts are handled by Lemon Squeezy. We store subscription identifiers and access status, not card numbers.
• Account-activation and password-recovery emails are delivered through Resend. Temporary delivery records are encrypted and account links expire after 24 hours.
• Your private watchlist notes are visible only to you.

Channel data

Channel and video records are public metadata obtained from documented APIs. Raw provider payloads are stored separately from our derived analytics so they can be refreshed or deleted independently. A scheduled retention job prunes raw payloads once they expire and removes snapshots older than the configured retention window (currently 180 days).

Cookies

One cookie is used: a signed, HttpOnly session cookie set when you sign in. Your theme preference is stored in your browser's local storage and never sent to the server.

Deleting your data

Contact the operator of this deployment to have your account, watchlists and notes deleted. Session records are removed automatically once they expire.