Privacy Policy

What this is

Video Roster is a private, family-operated application. It lets children in one household prepare videos, have a parent review them, and see statistics for the family’s own YouTube channels. It is not offered to the public and has no sign-up: accounts exist only when a parent creates them.

Information we store

• Account details. A display name, an avatar emoji, a role (parent or child), and a system-generated address used only as an internal identifier. We do not ask for real email addresses for children, and we never store passwords.
• Videos. Video files uploaded by family members, plus the title, description, tags and thumbnail entered for them.
• YouTube data.For channels a parent connects: the channel name and ID, the list of videos on the channel with their titles, thumbnails, visibility and view/like/comment counts, and day-by-day view and watch-time figures. This is fetched from the YouTube API using the parent’s authorisation.
• Sign-in material. Public keys for passkeys, and a random identifier for devices a parent has approved. Sign-in codes and recovery codes are stored only as one-way hashes.
• An activity log of actions taken in the app, such as who approved a video.

Google and YouTube data

This application uses YouTube API Services. By using it you agree to be bound by the YouTube Terms of Service, and Google’s Privacy Policy applies to their handling of your data.

When a parent connects a YouTube channel, Google issues this application a token allowing it to read the channel’s videos and analytics and to upload or update videos on that channel. The token is encrypted before storage and is never shown to children or sent to a browser.

You can revoke that access at any time from within this app by removing the channel, or from Google’s security settings. Removing a channel here deletes the stored token and every piece of YouTube data we hold for it.

YouTube data we store is refreshed at least daily. Any YouTube data that has not been refreshed within 30 days is deleted automatically.

Children

Children using this application do not have Google or YouTube accounts and never sign in to Google. All YouTube access happens through a parent’s authorisation. Children cannot browse YouTube through this application; they see only the channels a parent has granted them and only their own videos.

Who we share it with

Nobody. Data is not sold, rented, or shared with third parties, and is not used for advertising. It is stored using Supabase (database and authentication), Cloudflare R2 (video files) and Railway (application hosting), which process it solely to operate this application.

Deletion

A parent can delete any video, remove any account, or disconnect any channel from within the app, which deletes the associated data immediately. To request deletion of everything, contact the operator of this installation; requests are actioned within 7 days.

Contact

This is a private family deployment. Enquiries go to the parent account holder who operates it.