Privacy Policy

What the service does

SafeList lets parents curate a collection of approved videos from YouTube for their children, in a distraction-free environment. We provide tools to search, mark, and organize videos into categories, as well as import playlists you've already created on YouTube into your private library inside the app.

What data we collect

• Basic Google account details - name, email address, and profile picture. Required to uniquely identify you in the app.
• Access to your YouTube playlists (read-only, youtube.readonly scope) - only so we can show you your playlist names so you can choose which to import into your private library inside the app.
• Content you create in the app - videos you added, categories you created, playlists you imported, viewing history (session-only).

Use of Google API data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements:

• We use your YouTube data solely to let you import playlists into your private library inside the app.
• We do not sell or transfer your data to third parties.
• We do not use the data for advertising or for services unrelated to operating the app.
• We do not allow humans to read your data unless you specifically approve it, or it is necessary for security reasons (debugging / fraud investigation), or required by law.

How we store the data

• User data (video library, categories) is stored in a secure database (Upstash Redis), in keys namespaced by user ID.
• Google refresh tokens are stored server-side only and are never exposed to the browser or to third parties.
• We use HTTPS for all communication between your browser and the server.

Your rights

• Revoke access - at any moment you can revoke SafeList's access to your Google account through myaccount.google.com/permissions.
• Account deletion - contact us and we'll delete all your data from the server within 7 days.
• Access to your data - you can request a copy of all the data we hold about you.

Cookies

We use essential cookies only (session identification, remembering the last email used to reduce sign-in friction). No tracking or advertising cookies.

Who is responsible

The service is operated by Roy Shalem. For privacy-related contact: royshalem@gmail.com.

Changes to this policy

We may update this privacy policy from time to time. The last updated date will appear at the top of the page. Continued use of the service after an update constitutes acceptance of the updated policy.