Privacy Policy

1. About YouTLDR

YouTLDR operates you-tldr.com and the YouTLDR Chrome extension. Our tools help you transcribe, summarize, translate, and ask questions about videos. This policy covers information processed through our website, accounts, and extension. It explains what information we collect, why we use it, who receives it, and how to request access to or deletion of your information.

For privacy questions, contact the YouTLDR team at hello@you-tldr.com or use our contact form.

2. Google sign-in and Google user data

What Google shares with us

If you choose Continue with Google, Google provides our authentication service, Supabase, with your Google account identifier, email address and verification status, and basic profile information such as your name and profile picture. Authentication tokens and session information are processed to complete sign-in and maintain your session. We do not receive your Google password.

Why we request it

We use this information to create and identify your YouTLDR account, display your profile, connect you to your saved library and subscription, and provide account support and service emails. Google sign-in does not grant YouTLDR access to Gmail messages, Google Drive files, contacts, calendars, or your private YouTube videos, subscriptions, or watch history. Video processing uses the links and content you submit, separately from Google sign-in.

Where it is stored and who receives it

Google account information is stored with our account records in Supabase and processed through our hosting infrastructure. Your account email and, where used, name may also be sent to Stripe for billing and SendGrid for service emails. PostHog receives your YouTLDR user ID, email address, sign-in provider, signup date, and usage events to help us understand and improve the service. We do not send your Google sign-in tokens or basic profile to AI providers as input for generating video summaries.

Limits on Google user data use

YouTLDR does not sell Google user data or use it for personalized advertising, data brokerage, credit decisions, or training generalized AI or machine-learning models. We do not access Google Workspace APIs to develop, improve, or train such models. YouTLDR's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting Google

You can revoke YouTLDR's Google access from your Google Account connections. Revoking access does not itself delete information already stored by YouTLDR or cancel a subscription. You can request deletion of stored Google account information using the privacy controls and contact details in section 8.

3. Other information we collect

• Account information: your email address when you use an email sign-in link, account ID, preferences, subscription status, and authentication/session records.
• Content and requests: video URLs and IDs, selected languages, video metadata, transcripts, questions, prompts, and generated summaries, translations, and other outputs. Saved items may be associated with your account. Files selected in the local upload tool are handled differently, as explained in section 6.
• Billing information: Stripe customer and subscription identifiers, plan, payment status, transaction amounts, dates, and billing details needed to manage purchases. Payment card details are collected by Stripe; YouTLDR does not store your full card number or security code.
• Support information: the name, email address, message, and other information you send us when asking for help.
• Device and usage information: IP address, browser and device details, pages visited, referral information, feature interactions, error and performance records, and cookie or browser-storage identifiers.

4. How we use information

We use information to authenticate users; retrieve and process requested videos; generate transcripts, summaries, translations, answers, and other outputs; save and retrieve library items; process subscriptions; send sign-in emails, onboarding tips, feature suggestions, and weekly digests; answer support requests; measure and improve product performance; enforce usage limits; and prevent fraud and abuse.

Public YouTube transcripts, video metadata, and summaries may be cached, reused, and displayed in our public transcript library. Removing a video from your personal history does not necessarily remove that shared public content. Content you publish through a sharing feature can be viewed by people who receive its link.

5. Service providers and sharing

We share the information needed to operate the features you use with service providers, including:

• Vercel and Supabase: website hosting, server processing, authentication, databases, and content storage.
• Google Gemini and OpenRouter (and its selected model providers): submitted video content, transcripts, prompts, and questions needed for AI summaries and other generation features.
• Modal and fal.ai: media processing and audio transcription when those processing paths are used.
• Stripe: payments, subscriptions, billing, and fraud prevention.
• SendGrid: delivery of sign-in and service emails, including recipient details and email content.
• PostHog and Google Analytics: product usage, referral, device, and performance analytics. PostHog may associate usage with your account as described above.
• Upstash: caching, rate limiting, and temporary request coordination.

We may also disclose information when required by law, to protect users or the service against fraud or security threats, or as part of a business transfer subject to applicable privacy obligations. We do not sell your personal information.

6. AI and local file processing

YouTube summaries and other AI features

To generate a summary, translation, answer, or other output, we send the relevant transcript, video information, and your prompt or question to an AI provider. Free video summaries currently use OpenRouter, which routes requests to a model provider. Pro video summaries use Google Gemini. Other features may use different providers or service tiers, as described in section 5.

Provider data practices differ. Under the Gemini API terms, Google does not use content sent through its paid API service to improve its products, but may retain it temporarily for safety and legal purposes. Unpaid Gemini services may use inputs and outputs to improve Google products and machine-learning technology, subject to the exceptions in those terms.

OpenRouter states that it does not train models on inputs or outputs. However, the model providers it routes to may retain or use that content for training or improvement under their own policies. These practices apply to submitted video content and prompts; we do not include your Google sign-in profile or authentication tokens in those AI requests.

Files selected in the upload tool

The upload tool transcribes or translates selected audio locally in your browser. That operation does not upload the audio file to YouTLDR or an AI inference service. Your browser downloads the model files needed to run transcription; the download hosts receive ordinary connection information, such as your IP address. Website analytics still apply to visits to this tool.

7. Cookies and browser storage

We use cookies and browser storage to keep you signed in, remember preferences, cache results, and understand how the website is used. PostHog and Google Analytics may use identifiers to measure visits, referrals, and feature use. You can block or clear cookies and storage through your browser settings; doing so may sign you out or prevent some features from working. You can also use the Google Analytics opt-out browser add-on.

8. Retention, access, and deletion

How long we keep information

We retain account information, including Google sign-in profile information, while your account is active and as needed to provide the service. Saved library items and generated content remain available until removed or no longer needed for the service. We retain billing, security, and support records for as long as needed for their stated purposes, including legal obligations, resolving disputes, and preventing abuse.

How to exercise your choices

• Remove saved videos: delete individual items from your history.
• Disconnect Google: remove YouTLDR from your Google Account connections.
• Access, correct, export, or delete personal data: email hello@you-tldr.com and tell us what you would like to do. For account requests, contact us from the associated email address when possible.
• Stop optional emails: use an unsubscribe link when provided, or contact us to request that onboarding tips and digests stop. Essential sign-in, billing, and security messages may still be necessary.

We may verify your identity before disclosing or deleting account information. Depending on your location, you may also have rights to object to or restrict processing, withdraw consent where we rely on it, or complain to your local data protection authority. Contact us to exercise the rights that apply to you.

What happens after deletion

Following a verified deletion request, we delete or de-identify associated personal data unless retention is needed for legal, billing, security, or dispute-resolution purposes. Backup copies may persist until replaced or expired through backup retention cycles. Shared public video content may remain independently of your account, and copies other people saved from shared links cannot be removed by deleting your account.

You can manage or cancel your subscription from your account page. Revoking Google access, clearing browser data, or uninstalling the extension does not cancel your subscription.

9. Security and international processing

We use HTTPS for data in transit, authenticated access to account features, and database access controls to protect personal data. Administrative credentials are kept on the server. Access is limited to the people and providers who need it to operate, support, and secure the service. No system can guarantee absolute security.

Our service providers may store and process information in the United States and other countries where they operate. Privacy protections and legal requirements may differ from those in your country. You can contact us about rights available under the laws that apply to you.

10. Chrome extension

When you request a transcript in the YouTLDR extension, it sends the video ID and selected language to you-tldr.com. Your browser includes the website session cookies needed to authenticate the request. Summary, timeline, translation, and chat requests also send the content needed for that feature, such as transcript text, a saved transcript identifier, or your question. Our backend uses the service providers described above to process these requests.

The extension records a one-time activation event with a random installation identifier through PostHog. That event does not include a video ID, URL, transcript, or account information. The extension does not collect your general browsing history or page content from unrelated websites.

Transcripts, summaries, timelines, and chat history are cached in Chrome local storage. Cached video entries older than 24 hours are removed the next time those entries are accessed. They can remain stored longer if you do not open that video again. Language preferences, the random installation identifier, and the activation-event flag persist until cleared. Cached sign-in state in Chrome session storage is cleared when the browser closes.

The cookies permission lets the extension detect sign-in and sign-out changes for you-tldr.com. The extension does not read or write cookie values; authenticated requests let the browser send the required cookies. Remove the extension or clear its storage to remove local data. For server-side account deletion, contact us as described in section 8.

The extension's use of data also follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

11. Changes and contact

We may update this policy as our service or data practices change. We will update the date above and provide additional notice of material changes, including changes to Google user data use, when required.

Privacy contact: the YouTLDR team at hello@you-tldr.com. You can also use our contact form. Please describe your request and the account or information it concerns; do not send passwords, payment card numbers, or Google authentication codes.