Privacy Policy

1. What we collect

We collect only the minimum data necessary to provide the service:

• Server logs: Standard web-server access logs (IP address, timestamp, HTTP method and path, response code, user-agent string). These logs are used solely for security monitoring and are automatically rotated and deleted after 7 days.
• Download requests: The URL you submit is stored to process and track the status of your download, and is not linked to your identity unless you are signed in.
• Rate-limit counters: If you are not signed in, a fingerprint derived from your browser/device is used to enforce a daily download limit. This is not linked to any other data we hold, and is separate from the anonymised IP hash used for general rate-limiting.
• Account data: If you choose to create an account, we store your email address, display name, and a securely hashed password (never the password itself). Creating an account is optional — most features work without one.
• Contact form submissions: If you use the Contact page, we store your name, email address, subject, and message in order to reply to you. See section 5.
• Analytics: We use Google Analytics to understand aggregate traffic and usage patterns (pages viewed, general location by country, device type). See section 6.
• Advertising (blog pages only): Blog pages — not the downloader tool itself — display ads served by Google AdSense, which may set its own cookies and use data for ad personalization. See section 6.

2. What we do not collect

• We do not require an account to use the downloader — registration is entirely optional.
• We do not retain downloaded media files — they are deleted within minutes of delivery (see section 7).
• We do not sell your data, or share it with third parties for their own independent marketing purposes.
• We do not display ads anywhere outside the blog — the downloader tool itself is ad-free.

3. Cookies & session data

We use a minimal session cookie (session) that is required for the download of certin platforms.

Google Analytics is used site-wide (except the admin dashboard) and may set its own cookies. On blog pages specifically, Google AdSense may additionally set cookies for ad personalization — this does not apply to the downloader tool pages. See section 6 for details on both.

The theme preference you set (dark/light) is stored in localStorage, which stays on your device and is never transmitted to our servers.

4. How downloads work

When you request a download:

• Your URL is sent to our server, which uses yt-dlp to fetch the media from the source platform.
• The file is temporarily stored in a server directory while it is prepared for delivery.
• The file is streamed to your browser and then deleted from our server within minutes of the download completing.
• We do not keep copies, build libraries, or retain any downloaded content.

We are not responsible for how you use downloaded content. It is your responsibility to respect the intellectual property rights and terms of service of the platforms you download from.

5. Contact form data

If you contact us via the Contact page, we collect your name, email, subject, and message. This information is:

• Used solely to respond to your enquiry.
• Sent to and stored in our administrative email inbox.
• Never shared with third parties, sold, or used for marketing.
• Retained only as long as necessary to resolve your query, after which it may be deleted on request.

To request deletion of a message you submitted, email us at [email protected] with the subject "Delete my data".

6. Third-party services

We use the following third-party services whose privacy policies apply independently:

• Google Fonts — for typography. Google may log font requests. You can review Google's Privacy Policy.
• Google Analytics — used site-wide (except the admin dashboard) to understand aggregate traffic and usage patterns. May set cookies and collect general location (country-level), device type, and pages visited. See Google's Privacy Policy.
• Google Sign-In — an optional way to create or log into an account without a separate password. If you use it, Google shares your name, email address, and profile picture with us, per Google's own consent screen shown to you at the time.
• Google AdSense — used on blog pages only, never on the downloader tool itself, to display ads. May set cookies and use data for ad personalization; you can opt out of personalized advertising via Google's Ad Settings.
• Hosting — our infrastructure providers process all traffic. They may log IP addresses, request metadata, and other standard server logs. We choose providers with strong privacy commitments and minimal data retention policies.
• Source platforms (YouTube, Instagram, etc.) — when we fetch media on your behalf, those platforms may log the request from our server IP.

7. Data retention

• Server access logs: 7 days, then automatically purged.
• Rate-limit data: up to 1 hour in memory, never persisted.
• Downloaded media files: deleted within minutes of delivery.
• Account data: retained for as long as your account exists; deleted on request (see section 8).
• Contact form messages: retained in email until manually deleted; available for deletion on request.
• Blog comments: stored indefinitely unless you request removal.

8. Your rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, restriction of processing, data portability, and the right to object. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Because we collect so little data, most requests can be fulfilled immediately. We do not have the ability to identify you from an IP address alone.

9. Security

We take reasonable technical precautions to protect data in transit and at rest:

• HTTPS/TLS encryption for all traffic.
• Rate limiting on all public API endpoints to prevent abuse.
• Parameterised database queries to prevent SQL injection.
• Input validation and output escaping on all user-supplied data.
• Session cookies with HttpOnly, Secure, and SameSite flags.
• File upload restrictions (type checking, size limits, sanitised filenames).

No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly by emailing [email protected].

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact us

Questions, concerns, or data requests can be sent to:

• Email: [email protected]
• Contact form: /contact