Uploader

Privacy Policy

Last updated: 6 May 2026

Who we are

Uploader (the "App") is an internal web application operated by Maneks Plus ("we", "us", "our") and used by our marketing team to upload videos to YouTube channels we own or manage. The App is not available for public sign-up. Contact: sandi@maneks.eu.

Scope

This policy describes what information the App collects, how it is used, and how it is protected. The App accesses YouTube API Services. By using the App you also agree to be bound by the YouTube Terms of Service, and you acknowledge Google's Privacy Policy.

Data we collect

The App stores only what is necessary to perform uploads on the user's behalf:

  • Account information: name, email, and a hashed password for the App's own login (Laravel Breeze).
  • YouTube channel metadata (per connected channel): channel ID, channel display name, channel thumbnail URL.
  • Google OAuth tokens: access token and refresh token, stored encrypted at rest. Tokens are scoped to the OAuth scopes the user grants (youtube.upload, youtube, youtube.readonly).
  • Video upload metadata: file path of the uploaded source video (until the upload completes), title, description, tags, privacy setting, scheduled publish time, and the YouTube video ID returned after upload.
  • Operational data: upload status (queued, uploading, completed, failed), error messages on failure, processing status returned by YouTube, and a thumbnail URL returned by the YouTube API.

We do not collect viewer analytics, watch-time data, comments, search history, or any data about other YouTube users.

How we use the data

  • OAuth tokens are used solely to call the YouTube Data API endpoints channels.list, videos.insert, videos.list, videos.delete, and thumbnails.set on behalf of the authorising user.
  • Channel metadata is used to display the connected channels in the user's dashboard so the user can choose which channel(s) to publish to.
  • Video metadata (title, description, tags, privacy) is sent to YouTube as part of the upload request, and the resulting YouTube video ID is stored so we can link to the uploaded video and optionally delete it later.
  • Source video files are stored on our server only until the upload to all selected channels completes; they are then automatically deleted from disk.

YouTube API Services compliance

The App uses YouTube API Services. By using the App you agree to the YouTube Terms of Service and acknowledge Google's Privacy Policy. We do not transfer YouTube API data to any third party. We do not use YouTube API data for personalised advertising or to infer information about other users.

Data retention

  • OAuth tokens are retained until the user disconnects the channel or revokes access in their Google Account permissions.
  • Channel metadata is retained while the channel is connected. Disconnecting the channel removes its record.
  • Video upload records (title, status, YouTube video ID, etc.) are retained until the user deletes the video record from the App. The user may also choose to delete the corresponding video from YouTube via the App.
  • Source video files are deleted from our server automatically once the upload to YouTube succeeds.

Security

  • OAuth tokens are encrypted at rest using Laravel's encrypted cast (AES-256-CBC with the application key).
  • Passwords are stored as bcrypt hashes; we never store passwords in plaintext.
  • All web traffic is served over HTTPS (Let's Encrypt).
  • Access to the App requires authentication; public registration is disabled.

Revoking access

You can revoke the App's access to your Google account at any time by visiting myaccount.google.com/permissions. Revoking access invalidates the App's OAuth tokens for that account immediately. You may also disconnect a channel inside the App, which removes the stored tokens for that channel.

Third parties

The App communicates only with Google APIs (specifically the YouTube Data API v3 and Google OAuth 2.0). No data is shared with any other third party.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision.

Contact

Questions about this policy? Email sandi@maneks.eu.