Privacy Policy

Effective date: 2026-07-20. Last updated: 2026-07-20.

This Privacy Policy explains how Youtube video summarizer ("we", "us") collects, uses, discloses, and protects information when you use our Chrome extension, the website at https://ytsummarizer.pro, and related services (together, the "Service"). We designed this policy to comply with theChrome Web Store User Data Policy, theGoogle API Services User Data Policy(including its Limited Use requirements), and the EU General Data Protection Regulation (GDPR) where it applies.

1. Who we are

Youtube video summarizer is operated by an independent developer. If you have any question about this policy or want to exercise a right described below, contact us atprivacy@ytsummarizer.pro.

2. What we collect and why

We collect only what is necessary to run the Service. We do not sell personal information and we do not use it for advertising.

2.1 Data you provide

• Google account information (email address, Google account ID, display name). Collected only if you choose to sign in with Google to unlock the Pro plan. Used strictly to authenticate you and to identify your subscription.
• Video content you process. When you request an AI summary or AI transcription, the extension sends the transcript text (or the video ID needed to fetch audio) to our backend so the request can be processed by the AI provider.

2.2 Data collected automatically

• Abuse-prevention identifiers. When you call our backend we temporarily store a hashed fingerprint derived from your plan tier and a truncated form of your IP address (a /16 IPv4 or /48 IPv6 prefix, not the full address). We use it exclusively to enforce quotas and rate limits and to detect automated abuse. It is not used to identify you personally or to build a marketing profile.
• Basic request metadata (timestamp, HTTP status, error type, response latency). Kept only in short-lived operational logs to keep the Service reliable and secure.

2.3 Data stored locally in your browser

The extension stores your preferences (theme, copy format, autoOpen flag) and, if you sign in, your session token, in Chrome's storage.local. This data never leaves your device unless you sync it via Chrome yourself.

2.4 What we do NOT collect

• Your browsing history outside YouTube.
• The content of other tabs, forms, or pages.
• Keystrokes, mouse movements, screenshots, or any form of behavioural surveillance.
• Google account data beyond the profile fields listed above. We never request access to Gmail, Drive, Calendar, Contacts, or any other Google service.

3. Limited Use of Google user data

Our use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. Specifically, we:

• use Google user data only to provide or improve user-facing features that are prominent in the Service (authentication and Pro entitlement);
• do not transfer Google user data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users;
• do not use Google user data to serve advertisements;
• do not allow humans to read Google user data unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, to comply with applicable law, or the data is aggregated and used for internal operations in accordance with the applicable privacy notices;
• do not sell Google user data.

4. How we use your data

We use the information above only for the following purposes:

• to deliver the AI summary or AI transcription you requested;
• to authenticate you and to keep track of whether you are on the Free or Pro plan;
• to enforce free-tier quotas and to prevent fraud, abuse, and denial-of-service attacks;
• to operate and maintain the Service (debugging, uptime, security);
• to reply to messages you send us;
• to comply with a legal obligation.

5. Legal bases (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your data on the following legal bases:

• Contract — to provide the Service you requested (Article 6(1)(b) GDPR).
• Legitimate interests — to keep the Service secure, prevent abuse, and maintain a working product (Article 6(1)(f) GDPR).
• Consent — for the waitlist email and for optional analytics if we ever add them (Article 6(1)(a) GDPR). You may withdraw consent at any time.
• Legal obligation — where the law requires us to keep records or respond to lawful requests (Article 6(1)(c) GDPR).

6. Sharing and third parties

We share data only with the service providers ("sub-processors") we need to run the Service. Each of them is bound by their own privacy commitments:

• Google (Gemini API) — receives the transcript text needed to generate the summary. See theGoogle Privacy Policyand theGemini API terms. Gemini API data is not used by Google to train its models when accessed via a paid tier.
• Google (Sign-In) — used to authenticate you.
• AssemblyAI — receives the audio track of a YouTube video when you request AI transcription (Pro-only feature).
• Cloudflare, Inc. — hosts our backend Worker, KV storage, and static site. Processes traffic to keep the Service secure and reachable.
• Paddle (Paddle.com Market Ltd) — our payment provider and Merchant of Record. Processes payments and handles billing, taxes, and refunds for paid plans. We never see or store your full card number.

We do not sell your personal information and we do not share it with data brokers, ad networks, or social networks.

7. International transfers

Our sub-processors process data in the United States and other countries. Where required, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent lawful mechanism.

8. Data retention

• Transcripts and summaries. Held in memory only for the time needed to answer your request. We do not store them after the response is returned.
• Quota counters and abuse-prevention hashes. Automatically expire after 30 days.
• Operational logs. Retained for up to 30 days for troubleshooting, then deleted.
• Account records (email, Google ID, subscription status). Retained while your account exists and for up to 12 months after deletion to satisfy tax and accounting obligations.

9. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, California CCPA/CPRA, and similar laws), you have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate;
• delete your data ("right to be forgotten");
• object to or restrict our processing;
• receive a portable copy of your data;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local supervisory authority.

To exercise any of these rights, emailprivacy@ytsummarizer.pro. We answer within 30 days. You may also revoke our access to your Google account at any time viaGoogle Account Permissions.

10. Security

All traffic to our backend is encrypted with TLS. Secrets and API keys live in Cloudflare Worker secrets, never in the extension bundle. The extension mounts its UI in a Shadow DOM to isolate it from YouTube's page scripts and other extensions. No security control is perfect; if you discover a vulnerability, please report it toprivacy@ytsummarizer.pro.

11. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with a new "Effective date" and, where required, by email or an in-app notice. Continued use of the Service after a change means you accept the updated policy.

13. Contact

For privacy questions, data-subject requests, or security reports, write toprivacy@ytsummarizer.pro.

Youtube video summarizer is not affiliated with, endorsed by, or sponsored by YouTube, LLC or Google LLC. YouTube is a trademark of Google LLC.