Privacy Policy

What the service does

SafeList lets parents curate a collection of approved videos from YouTube for their children, in a distraction-free environment. We provide tools to search, mark, and organize videos into categories, as well as import playlists you've already created on YouTube into your private library inside the app.

What data we collect

• Basic Google account details - name, email address, and profile picture. Required to uniquely identify you in the app.
• Access to your YouTube playlists (read-only, youtube.readonly scope) - only so we can show you your playlist names so you can choose which to import into your private library inside the app.
• Content you create in the app - videos you added, categories you created, playlists you imported, viewing history (session-only).

Use of Google API data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements:

• We use your YouTube data solely to let you import playlists into your private library inside the app.
• We do not sell or transfer your data to third parties.
• We do not use the data for advertising or for services unrelated to operating the app.
• We do not allow humans to read your data unless you specifically approve it, or it is necessary for security reasons (debugging / fraud investigation), or required by law.

How we store the data

• User data (video library, categories) is stored in a secure database (Upstash Redis), in keys namespaced by user ID.
• Google refresh tokens are stored server-side only and are never exposed to the browser or to third parties.
• We use HTTPS for all communication between your browser and the server.

Your rights

• Revoke access - at any moment you can revoke SafeList's access to your Google account through myaccount.google.com/permissions.
• Account deletion - contact us and we'll delete all your data from the server within 7 days.
• Access to your data - you can request a copy of all the data we hold about you.

Cookies and local storage

There are no advertising cookies and no tracking cookies on this site. We run no Google Analytics, no social pixels, and we neither sell nor share data with advertisers. This is the complete list of what is stored:

Essential - always on

Required to deliver the service you asked for. These need no consent under the law, but we list them in full anyway:

• sl_session - an HttpOnly session cookie that keeps you signed in between visits.
• oauth_nonce, last_oauth_done - secure the Google sign-in exchange and avoid asking you for the same permission twice.
• safelist_auth (local storage) - your active identity token.
• safelist_lang (local storage) - the interface language you chose.
• Local storage for the parent PIN and screen-time limits - the core functionality of the service.
• safelist_consent (local storage) - your choice in the cookie dialog. Without it we would have to ask you again on every visit.

Remember my last account - consent only

• last_login_email, last_login_name, last_login_picture - store the details of the account that signed in last so your next sign-in is a single click. If you decline, they are deleted from your browser and the sign-in screen shows a plain Google button.

Embedded YouTube player - consent only

This is the only third party that sets cookies on the site. If you allow it, videos load from youtube.com and Google sets its own cookies (this is also what lets YouTube Premium subscribers watch without ads). If you decline, videos load from youtube-nocookie.com and playback works exactly the same. Either way, Google's privacy policy applies to the playback data.

Other third-party requests

Pages load fonts from Google Fonts and Google's sign-in library. These set no cookies, but your IP address is exposed to them simply by fetching the file.

Changing or withdrawing consent

You can change your choice at any time, and withdrawing consent is exactly as easy as giving it: open cookie settings. You can also delete cookies directly from your browser settings.

Who is responsible

The service is operated by Roy Shalem. For privacy-related contact: royshalem@gmail.com.

Changes to this policy

We may update this privacy policy from time to time. The last updated date will appear at the top of the page. Continued use of the service after an update constitutes acceptance of the updated policy.