Privacy policy

What we store

• Account: your email address and, if you use an email password, a password that is stored only in scrambled (hashed) form by our sign-in provider. If you sign in with Google we receive your name, email address and profile picture from Google.
• Profile: the username and display name you choose, an optional short bio and a profile picture if you have one.
• Activity: the videos you log (the YouTube video ID), whether you watched or recommend them, your star rating, your review text and when you did it.
• Connections: who you follow, who follows you and follow requests that are still waiting.
• Technical data: a sign-in cookie that keeps you logged in, a saved light or dark setting in your browser, and the standard request logs that our hosting provider keeps for security and troubleshooting.

YouTube and Google

VidList uses YouTube API Services to look up the title, thumbnail and channel of the videos you log. By using VidList you also agree to the YouTube Terms of Service, and Google's use of data is described in the Google Privacy Policy. We store this video information to show it to you and we refresh it regularly, as YouTube requires.

We do not see or store your YouTube watch history, subscriptions or account. Google sign-in is used only to log you in. You can remove VidList's access at any time at myaccount.google.com/permissions. Videos always open on YouTube; VidList never plays them.

What we use it for

To run VidList: sign you in, build your feed, show your reviews, send follow requests and notifications and keep the service secure. We do not sell your data and we do not show ads.

Who can see what

• Your reviews, ratings and the name you chose can be seen by other VidList users, including on a video's page.
• Your profile page (your logged videos and your follower lists) opens fully only for you and for people who follow you or whom you follow. Everyone else sees a basic card with your name and username.
• Your email address is never shown to other users. The people who run VidList can see account details, including email addresses, to keep the service working and to moderate it.

Services we rely on

We use trusted providers to run VidList: Supabase (database and sign-in), Vercel (hosting), Google (sign-in and YouTube data) and Cloudflare (domain and email forwarding). They process data on our behalf and under their own privacy terms. If we add an email delivery service for account emails, it will receive your email address for that purpose only.

Keeping and deleting your data

We keep your data while your account exists. To delete your account and the reviews, ratings and connections that belong to it, email privacy@getvidlist.com from the address you signed up with. Copies in backups can remain for a limited time after deletion. You can also ask us for a copy of your data, or to correct it.

Children

VidList is not meant for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will update the date at the top and, where appropriate, tell you in the app.