Effective date: 30 June 2026 Last updated: 2 July 2026
This Privacy Policy explains how Anthony Hull (trading as TubeCrunch) (“TubeCrunch”, “we”, “us”) collects, uses, and protects information when you use the TubeCrunch browser extension and related services (the “Service”).
Operator / contact: Anthony Hull (trading as TubeCrunch), United Kingdom. Contact: support@tubecrunch.app.
a) Account information. When you create an account or sign in (via Google Sign-In or email and password, managed through Supabase Auth), we collect your email address and a user identifier. If you use Google Sign-In, we receive basic profile information per the permissions you grant.
b) Video content you choose to summarize. When you summarize a video, playlist, channel, or search selection, the extension retrieves publicly available information for those videos as presented by YouTube in your browser — including video identifiers and available captions/transcript text — and may send it to our hosted backend and AI providers (see §4) to generate your summary, answer, or report. The extension accesses only data for the items you select; it does not access your YouTube account credentials, private playlists, or watch history beyond what is needed to perform the action you request. TubeCrunch is independent and is not affiliated with, endorsed by, or sponsored by YouTube or Google.
c) Local extension data. Extension search collections, summaries, transcripts, Q&A, and local history are stored locally in Chrome/IndexedDB on your device. This local extension data is device-specific and may be removed by uninstalling TubeCrunch or clearing extension storage.
d) Usage and metering data. Counts of summaries and bulk jobs, feature usage, tier/entitlement, and limits — used to enforce fair-use caps, prevent abuse, and operate the Service.
e) Subscription data. Your plan, status, and billing events. Payment is processed by our payment provider Stripe (Stripe Managed Payments); we receive confirmation of your subscription status but do not store your full card details.
f) Technical & log data. IP address, browser/extension version, device and diagnostic data, and error logs, used for security, debugging, and abuse prevention.
g) Preferences. Your settings (such as your preferred language) may be stored in your browser for convenience.
We do not intentionally collect special-category data, and the Service is not directed to children (see §10).
Legal bases (UK GDPR): performance of our contract with you (providing the Service and billing); our legitimate interests (security, abuse prevention, product improvement); your consent where required; and compliance with legal obligations.
To deliver the Service we share data with service providers acting on our behalf:
We do not sell personal data and do not share it with third parties for their own marketing.
We are based in the United Kingdom. Supabase is used for auth/account identity, subscription/usage/account services, and secure backend access in the United States (AWS us-west-1, Northern California), and other providers (e.g. AI providers and Stripe) may also process data in the US. Local extension data remains stored locally in Chrome/IndexedDB on your device unless video/transcript content is sent for processing as described above. Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses, together with the providers’ equivalent transfer mechanisms.
We use reasonable technical and organizational measures to protect your data, including encryption in transit, server-side handling of AI credentials (our AI keys are never stored in the extension), access controls, and rate limiting. No method of transmission or storage is 100% secure.
Depending on your location (UK/EU GDPR, California CCPA/CPRA, and similar laws), you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. California residents have the right to know, delete, correct, and opt out of “sale”/“sharing” (we do not sell or share personal data as defined by the CPRA).
To exercise any right, contact support@tubecrunch.app. You may also lodge a complaint with your local supervisory authority (UK: the ICO).
The Chrome Web Store User Data Policy applies to all user data this extension handles, regardless of how it is obtained. We limit our collection and use of your data to providing the user-facing features described in this Policy, handle it securely, and do not sell it or use it for unrelated purposes.
TubeCrunch uses Google Sign-In (OAuth) for authentication. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use it only to provide and improve user-facing features, do not transfer it except as necessary to provide the Service, do not use it for advertising, and do not allow humans to read it except for security, to comply with law, or with your consent. We do not use the official YouTube Data API; video captions are retrieved within your browser session as described in §2(b).
The Service is not directed to, and we do not knowingly collect data from, children under 13. If you believe a child has provided us data, contact us and we will delete it.
We may update this Policy. Material changes will be notified in the extension or by email, and the “Last updated” date will change. Continued use after changes means you accept the updated Policy.
Anthony Hull (trading as TubeCrunch) United Kingdom support@tubecrunch.app