Never Filmed K-PopPrivacy Policy
1. YouTube API Services
Shorts Studio uses YouTube API Services (the YouTube Data API and the YouTube Analytics API). By using Shorts Studio you agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy (www.google.com/policies/privacy).
2. Who uses Shorts Studio
Shorts Studio is an internal tool. It runs on the channel owner's own computer and its only user is the owner of the Never Filmed K-Pop channel. It has no public sign-up and collects nothing from viewers of the channel or visitors of this website.
3. Information accessed through YouTube API Services
When the owner connects a YouTube channel, Google asks the owner to grant these permissions. The table says what each one is used for.
| Permission | Used for |
|---|---|
youtube.upload | Uploading the channel's finished Shorts and setting their thumbnails. |
youtube.readonly | Reading the channel's own videos back after an upload, to verify title, privacy and processing status, and to avoid uploading the same video twice. |
youtube | Updating the metadata or privacy of the channel's own videos. |
youtube.force-ssl | Attaching lyric caption tracks and posting the channel's own comment under its videos. |
yt-analytics.readonly, yt-analytics-monetary.readonly | Reading the channel's own statistics (views, watch time, audience) so the owner can review each Short. |
The data involved is the connected channel's ID and title, the IDs, titles, descriptions, privacy and statistics of the channel's own videos, comment threads on those videos, and an OAuth refresh token. No data about other users' accounts is requested.
4. How the information is used
Only to perform the actions listed above on the owner's own channel, at the owner's request. YouTube data is not used for advertising, profiling, or training models, and is never sold.
5. Storage and security
- The OAuth refresh token is encrypted with AES-GCM before it is stored in the application's database on the owner's computer. It never reaches a browser, a log, an AI prompt, or source control.
- Stored YouTube data is limited to the records of the channel's own uploads (video ID, URL, observed privacy, upload time), used to prevent duplicate uploads.
- Statistics are read when the owner asks for them and are not stored.
6. Sharing
YouTube API data is not shared with, disclosed to, or sold to any third party. Nothing is transferred to any service other than Google's own APIs.
7. Cookies and similar technologies
This website sets no cookies and uses no analytics. The Shorts Studio dashboard, which runs only on the owner's computer, uses one session cookie to keep the owner signed in. Shorts Studio does not place cookies or similar technologies on the devices of the channel's viewers.
8. Retention, deletion and revoking access
- Apart from the IDs and URLs of the channel's own uploads, kept to prevent duplicate uploads, no YouTube API data is stored: statistics, comments and video details are read when needed and discarded.
- Disconnecting the channel in Shorts Studio deletes the stored refresh token.
- Access can be revoked at any time from the Google security settings page: security.google.com/settings/security/permissions. After revocation, Shorts Studio can no longer access the channel, and the stored token and upload records are deleted within 7 days.
- To ask for deletion of any stored data, write to dominic.www.lee@gmail.com; it is deleted within 7 days of the request.
9. Children
Shorts Studio is not directed at children and is used by one adult, the channel owner.
10. Changes
Changes to this policy are published on this page with a new effective date.
11. Contact
Never Filmed K-Pop · dominic.www.lee@gmail.com