Privacy & Data Protection

Google User Data — Access, Use, and Protection

This page describes exactly how ThumbRank handles Google user data when you connect your YouTube channel. The same OAuth connection may also be used by our companion tools under this Google Cloud project — the data practices below apply identically to all of them. It is kept accurate and publicly available as required by the Google API Services User Data Policy.

Last updated: September 15, 2026 · Contact: bpecha14@gmail.com

In short

  • — Read-only access to your channel ID, title, and your own video analytics only.
  • — Used only for the features you request — never for ads, profiling, or sale.
  • — Never sold or shared with third parties.
  • — Disconnect anytime to permanently delete your data.

01What Google user data we access

When you connect your YouTube channel, ThumbRank accesses: your channel ID and title (YouTube Data API), and video analytics for your channel only — views, watch time, average view duration, likes, comments, shares, and click-through rate data (YouTube Analytics API). We access data for the connected channel only, never other users' data.

02How we use Google user data

We use this data solely to calibrate our AI-generated thumbnail scores against your real video performance and to display your video statistics in your private dashboard (Prediction History). We do not use your data for advertising, profiling, sale, or any purpose unrelated to the features you request.

03What we share

We do not sell, rent, transfer, or disclose your Google user data to any third party. Data is stored in your private account and is never shared with other users, partners, or data brokers. The only processors involved are our hosting providers (Vercel, Supabase), who store data under their own data protection terms.

04How we protect your data

All connections use OAuth 2.0 with read-only scopes. Access tokens are stored encrypted, transmitted only over TLS, and are revoked immediately when you disconnect your channel. Our databases enforce row-level security: only you can read your data.

05Data retention and deletion

Analytics data is refreshed periodically and retained while your account is active. You can disconnect your channel at any time (Settings → Disconnect), which permanently deletes stored tokens and channel data. You can request full deletion of your account and all associated data by emailing bpecha14@gmail.com; we complete deletion within 30 days.