Channel Master – Privacy Policy

Last updated: 15 May 2025

1. Introduction

Channel Master ("Channel Master", "we", "our", or "us") is a lightweight, client‑side web application that helps creators analyse and manage their own YouTube channel data. Protecting your privacy is central to our design. This Privacy Policy explains how the application works and why we do not receive, process, or store any of your personal data.

2. Key Principles

1. Browser‑only execution – The entire application runs in your web browser (HTML, CSS, and JavaScript). There is no server‑side code, database, or external logging on our end.
2. Direct connection to Google – The app interacts only with the YouTube Data API v3 via Google’s OAuth 2.0 consent flow. Your Google credentials are exchanged directly with Google, never with Channel Master.
3. Local storage, not cloud storage – Any channel statistics pulled from the API are saved locally in your browser’s localStorage so you can revisit them until you clear your browser data. They are never transmitted to, nor readable by, Channel Master or any third party.

3. What Data Do We Collect?

None. Channel Master does not:

• collect names, email addresses, or other identifiers;
• log IP addresses or usage metrics on a server;
• track you across sessions with cookies or analytics scripts; or
• ask you to create an account or password.

4. How the App Uses Google OAuth 2.0

When you click “Connect to YouTube”, Google displays its standard OAuth 2.0 authorisation screen. You are asked to grant the app read‑only access to your channel analytics. Once you approve:

• Google returns a short‑lived access token directly to your browser.
• The token is stored only in session memory (not in a database) and is used to fetch your data from the YouTube Data API.
• When you close the tab or revoke access in your Google Account settings, the token becomes invalid and your channel data can no longer be fetched.

5. LocalStorage Explained

• Fetched statistics (e.g., view counts, video lists) are cached in localStorage under keys beginning with ytp‑.
• This cache never leaves your device. It remains available only in the same browser profile on the same device.
• You can delete it any time by clearing your browser’s site data or by clicking “Reset App” in the settings panel.

6. No Third‑Party Sharing

Because we never receive your data, we cannot – and do not – share, sell, or disclose it to advertisers, analytics providers, or anyone else.

7. Data Retention & Deletion

All cached data resides under your control in the browser. Once you clear site data, uninstall the PWA, or revoke Channel Master’s API access in your Google Account, all associated information is permanently removed.

8. Security Measures

• Minimal attack surface – With no backend infrastructure, there are no servers or databases to breach.
• HTTPS only – The site is served over HTTPS to protect the OAuth flow and API requests from eavesdropping.
• Open‑source transparency – The source code is publicly available on GitHub for independent review.

9. Children’s Privacy

Channel Master is not directed at children under the age of 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this policy to reflect changes in technology or legal requirements. When we do, we will revise the “Last updated” date above. Because we do not maintain user accounts, we cannot notify you individually, so please review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or Channel Master’s privacy‑by‑design approach, please email help@yotutuberplus.com.

Summary: Channel Master never sees or stores your private data because everything happens locally in your browser. Granting read‑only OAuth access to your own channel is the only interaction required, and all fetched information stays on your device until you choose to delete it.