Privacy Policy
1. Who we are
Shorts Publisher is an application that helps a YouTube channel owner manage channel analytics, video uploads and scheduled publishing. It is operated by the owner of the website okbamed.site (the “operator”) for YouTube channels that the operator owns or is authorized to manage. It is not a general-purpose service open to the public. Contact details are in section 12.
2. Data we access
Shorts Publisher accesses Google and YouTube data only after the channel owner signs in with Google and approves the permissions on Google's consent screen. Depending on those permissions, it accesses:
- YouTube channel information: the channel ID and channel title, used to confirm that the intended channel was authorized.
- Video information: the list of the channel's videos and their details, such as titles, publish dates, privacy and processing status, and public counts such as views and likes.
- YouTube Analytics reports for the authorized channel (see section 3).
- Videos and details you submit for upload: the video file, title, description, tags, language and scheduled publish time that the channel owner has approved.
Shorts Publisher does not request access to Gmail, Google Drive, contacts, passwords, payment information, or the channel's earnings and revenue data.
3. YouTube Analytics data
With the YouTube Analytics read-only permission, Shorts Publisher reads aggregated performance reports for the authorized channel, such as views, watch time, average view duration, subscribers gained or lost, and breakdowns by day, by video, by country, by device type and by traffic source. These reports are aggregated: they do not identify individual viewers.
The reports are used to understand how the channel and its videos perform and to help choose publishing times. They are not used for any other purpose.
4. How we use data
- To confirm that a video is uploaded to the correct channel.
- To upload videos that the channel owner has approved, and to schedule their publication using YouTube's scheduling feature.
- To read analytics and video information so that the channel owner can review performance and plan publishing.
We do not use this data for advertising, profiling, or any purpose unrelated to managing the authorized channel.
5. OAuth permissions and token storage
Shorts Publisher uses Google's OAuth 2.0 sign-in. It asks for these three permissions and no others:
| Google scope | What it allows |
|---|---|
https://www.googleapis.com/auth/youtube.readonly | Read the channel's information and videos. |
https://www.googleapis.com/auth/yt-analytics.readonly | Read the channel's YouTube Analytics reports. |
https://www.googleapis.com/auth/youtube.upload | Upload videos to the channel. |
Each channel is authorized separately, and the credential issued for each channel (an OAuth refresh token) is stored separately from the others. Credentials are stored only in storage controlled by the operator: files with restricted permissions on the operator's computer and, where used, the operator's own Google Cloud Secret Manager. They are used only to call Google and YouTube APIs for the channel they belong to, and they are never shown on this website or shared with anyone.
Passwords and two-step verification codes are entered only on Google's own sign-in pages. Shorts Publisher never sees or stores them.
6. Sharing and advertising
We do not sell data. We do not share data for advertising. We do not transfer data to third parties, except to Google and YouTube through their APIs as needed to provide the features above, or where the law requires it.
Shorts Publisher's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Retention
Credentials are kept only while the channel is being managed and the permission has not been withdrawn. Analytics figures and video details read from YouTube are kept in the operator's own files and databases for as long as they are needed to manage the channel, and are then deleted. Videos uploaded to YouTube belong to the channel owner and remain on the channel until the owner removes them.
8. Security
Access to stored credentials and data is limited to the operator. Credentials are stored with restricted file permissions or in a managed secret store, and each channel's credential is kept separate. Communication with Google and YouTube APIs uses HTTPS. A video is scheduled for publication only after the channel owner has approved that exact video. No method of storing or transmitting data is perfectly secure, and we cannot guarantee absolute security.
9. Deletion requests and revoking access
- Revoke access yourself, at any time: remove Shorts Publisher at your Google Account permissions page. After this, the stored credential for that channel no longer works.
- Ask us to delete data: email us (see section 12) and say which channel it concerns. We will delete the stored credential and the analytics and video data we hold for that channel.
10. This website
This website is a static information site. It has no user accounts, no forms, no cookies and no analytics or advertising scripts. Like any website, the hosting provider may keep standard server logs, such as IP address and browser type, for security and operation.
11. YouTube API Services
Shorts Publisher uses YouTube API Services. By using it, you are also bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
12. Changes and contact
We may update this policy. The date at the top shows when it was last changed.
Questions, privacy requests and data deletion requests: salma@okbamed.site