Privacy Policy
This policy explains what information SCROLLBREAK Publisher (“the app”) accesses, why, where it is kept and how you can revoke access. The app is a private tool operated by Cemalettin Altınsoy (“we”) to publish the SCROLLBREAK YouTube channel. It is used only by the owner of that channel; it has no other users.
1. YouTube API Services
SCROLLBREAK Publisher uses YouTube API Services. By using the app you are also bound by the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy.
2. Google OAuth authorization
The app signs in with Google OAuth 2.0 (desktop/loopback flow with PKCE) and asks for exactly two permissions:
https://www.googleapis.com/auth/youtube.upload— to upload videos to the authorized channel.https://www.googleapis.com/auth/youtube.readonly— to view the authorized channel and its videos.
It does not request access to Gmail, Drive, Contacts, Calendar or any other Google product.
3. Information the app accesses
| Data | Purpose |
|---|---|
| Your channel ID (and, once during setup, the channel name) | Confirm the app is connected to the SCROLLBREAK channel and to no other channel. Checked before every upload. |
| Your channel's uploads list: IDs, titles, privacy status and scheduled publish time of the 25 most recent uploads | Only after an interrupted upload, to detect whether the video already exists and avoid uploading it twice. |
| For videos the app uploaded: title, description, tags, category, privacy status, scheduled and actual publish time, upload/processing status, duration, “made for kids” and altered/synthetic-content settings | Verify that YouTube processed the video and that its details and schedule match what the owner approved. |
| Public availability of videos the app uploaded (YouTube's public oEmbed endpoint, without sign-in) | Confirm a published video is publicly reachable. |
The app also sends data to YouTube: the episode video file and the title, description, tags, category, audience and disclosure settings approved by the owner.
The app does not access comments, subscribers, messages, analytics, revenue, viewer or audience information, playlists other than the channel's own uploads list, or any other user's data.
4. How the information is used
Only to upload, schedule and verify SCROLLBREAK episodes and to keep the operator informed. It is not sold, not used for advertising, not used to build profiles, and not used to train AI or machine-learning models. The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Where information is stored
There is no database and no cloud storage service. Everything is kept as files on a single private server (VPS) operated by us:
- OAuth refresh token — in a file readable only by the app's own operating-system user (file permission 600, folder permission 700). It is never printed, logged or committed to source control.
- Access tokens — short-lived; held only in memory while the app runs and never written to disk.
- Upload records — for each upload: YouTube video ID, channel ID, title, scheduled publish time, the requested audience/disclosure settings, a SHA-256 checksum of the video file and, while an upload is in progress, YouTube's resumable-upload session address.
- Verification records — the result of each verification (which checks passed, the video ID and time of the check).
- Operational logs — events such as “upload started” or “verification failed”. Credentials are removed from logs before they are written.
6. Sharing and Telegram notifications
Information is not shared with anyone except as follows. The app sends short notifications to the operator's own private Telegram chat through the Telegram Bot API. These messages can contain: episode identifiers and titles, YouTube video IDs, scheduled publish times, upload/verification/publication status, short error descriptions, and a daily summary (episode counts, upcoming slots, free disk space). They never contain OAuth tokens, passwords or the video files. Telegram processes these messages under its own privacy policy.
7. Retention and deletion
- Upload and verification records and logs are kept on the server for as long as the channel is operated, so the publishing history and audit trail remain available. They are not currently deleted automatically; the operator deletes them manually.
- If Google access is revoked (section 8), we delete the stored refresh token and the YouTube data described in section 5 from the server within 7 days of noticing the revocation. This is a manual step performed by the operator.
- Local copies of published video files may be deleted after a successful, independently verified publication; this does not affect the records above.
- You can ask for deletion at any time using the contact address below.
8. How to revoke access
You can remove SCROLLBREAK Publisher's access to your Google account at any time on the Google security settings page: https://security.google.com/settings/security/permissions. After revocation the stored refresh token stops working and the app can no longer read from or upload to YouTube.
9. This website
This website is a static information page. It sets no cookies, runs no analytics or advertising scripts and collects no form data. It is delivered through Cloudflare, which processes technical request data (such as IP addresses) to deliver and protect the site.
10. Children
The app is a publishing tool for the channel owner and is not directed to children.
11. Changes
If the app's data handling changes, this page will be updated and the effective date above changed before the new behaviour is used.
12. Contact
Questions or deletion requests: cemalettin.altinsoy123@gmail.com