Privacy and data use — local testing

WorthMyWatch is a local prototype, not a public service. Sign-in stores your Google account identifier, name, and email to maintain your account. Local registration stores your name, email, and a salted password hash, never the plaintext password. Local email ownership is not yet verified and password recovery is not yet available. Local and Google accounts are separate unless an explicit linking flow is added. Session cookies are used to keep you signed in.

Connecting YouTube is optional and requests read-only access. WorthMyWatch stores an encrypted connection token and the channel identifiers and titles you import or verify. You can also link channels manually by URL or handle on your standalone WorthMyWatch account. Tokens remain on the server. Imported subscriptions and linked channels belong to your account and are not sent to the analysis service. Stored subscription entries expire from the active list after 30 days unless refreshed.

Choosing Analyze sends the public video URL, title, and thumbnail to Google Gemini. It can incur API charges. Your subscription list and sign-in details are not included. Saved results include metadata, evidence, model, date, and rubric version; they remain until you delete your account data. Google’s applicable service terms govern processing.

Disconnect YouTube revokes access and deletes imported subscription and OAuth-verified channel records. Delete account data also removes your profile, saved analyses, linked channels, imports and connection token even if Google revocation fails. Remove Google access manually in that case. The anonymous daily request count remains, with account identifiers and video details removed. Reported token usage is recorded; unknown dollar costs are not estimated. Signing out does not delete them. You can also revoke access from your Google account connection controls. Videos play using YouTube’s embedded player when selected.

The unauthenticated local demo library is separate from signed-in account libraries. Exported files and backups must be managed separately by the person who made them.

Production privacy terms, retention, verification, and policy eligibility still require review before public use.

YouTube Terms of Service · Google Privacy Policy · Google connection controls