Privacy Policy

Effective date: April 9, 2026

TubeDeck is operated by Skye Helfant Creative (“we,” “us,” or “our”). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

Information We Collect

Account Information

When you create an account we collect your email address and, optionally, your name. If you sign up with a password, it is hashed using bcrypt before storage—we never store plaintext passwords. If you sign in with Google, we receive and store an OAuth token provided by Google.

YouTube Data

TubeDeck retrieves publicly available YouTube data through the YouTube Data API v3, including channel names, subscriber counts, video titles, view counts, thumbnails, and publish dates. When you request a deep analysis, we may also retrieve a video’s transcript. This data is cached on our servers to reduce API usage and improve performance.

Usage Data

We store your dashboard configuration—which channels you track, column order, and filter preferences—so your workspace persists between sessions.

Cookies & Local Storage

We use cookies and browser local storage strictly for functionality, not for advertising or third-party tracking.

• Session cookie — a signed JSON Web Token that keeps you logged in.
• Preference cookies — store your tracked channel IDs, sidebar state, and onboarding progress.
• Demo cookies — track demo usage limits for unauthenticated visitors.
• Local storage — caches the same preference data client-side for faster page loads.

AI-Powered Analysis

When you request an AI analysis, we send the selected video metadata (titles, view counts, descriptions, and optionally transcripts) to Anthropic’s Claude API for processing. We do not send your email address, account credentials, or any other personally identifiable information to Anthropic.

Payment Processing

Payments are processed by Stripe. We do not receive, store, or have access to your full credit card number. Stripe collects your payment method details, billing address, and fraud-prevention signals directly. We store only your Stripe customer ID, subscription status, and billing email so we can manage your account. For details on how Stripe handles your data, see Stripe’s Privacy Policy.

Third-Party Services

In addition to the services described above, TubeDeck relies on the following third parties:

• Vercel — hosting and edge infrastructure.
• Neon — managed PostgreSQL database.
• Google Fonts — the Inter typeface is loaded from Google’s servers, which may collect basic usage data per Google’s privacy policy.

We do not use any third-party analytics, advertising, or tracking services.

Data Security

All connections to TubeDeck are encrypted via HTTPS. We enforce strict security headers including Content Security Policy, HTTP Strict Transport Security, and X-Frame-Options to protect against common web vulnerabilities. Passwords are hashed with bcrypt and are never stored or transmitted in plaintext.

Data Retention & Deletion

We retain your account data and dashboard configuration for as long as your account is active. Cached YouTube data is refreshed periodically and older records may be pruned automatically. You can request deletion of your account and all associated data at any time by emailing skye.helfant@gmail.com. We will process deletion requests within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where possible, notify you by email or through the TubeDeck dashboard.

Contact

If you have questions about this Privacy Policy or your data, contact us at skye.helfant@gmail.com.