Privacy Policy — Youtube Video Transcript: AI Summary & Tags

Last updated: April 22, 2026 · Contact: luyovanay124@gmail.com

This Privacy Policy describes how the Chrome extension "Youtube Video Transcript: AI Summary & Tags" ("the Extension", "we") handles data. The Extension is available on the Chrome Web Store and interacts with our backend service at api.transcriptyoutube.app.

The Extension has no user accounts, no login, no registration, no payment processing, and no email marketing. We do not collect your name, email address, phone number, or any other personally identifiable information.

1. What data we process

1.1 Stored locally on your device

  • Installation UUID (section 1.2) — stored in chrome.storage.local (stays only on this browser, not synced to your Google account).
  • User preferences — stored in chrome.storage.sync, which means Chrome synchronizes them across other browsers signed into the same Google account. The synced preferences are limited to:
    • Theme (light or dark)
    • Preferred summary output language
    • Preferred summary length (auto / short / long)

We do not store your browsing history, page content, or any personal identifiers.

1.2 Anonymous installation identifier

On first launch, the Extension generates a random UUID using crypto.randomUUID() and stores it in local extension storage. This UUID is sent as the X-Extension-Id HTTP header with every request to our backend. It is not linked to your identity — it is used solely to enforce per-installation daily rate limits (to prevent abuse of our free service). You can reset it by uninstalling and reinstalling the Extension.

1.3 Data sent to our backend (api.transcriptyoutube.app)

When you request a transcript, summary, or tags for a YouTube video, the Extension sends to our backend:

  • The YouTube video ID of the video you are currently viewing (e.g. dQw4w9WgXcQ)
  • The installation UUID (see 1.2)
  • Your IP address (automatically included in every HTTP request by the browser)

Your IP address is used in-memory only for daily rate limiting (limits reset at midnight UTC). It is written to server logs (journalctl) for operational diagnostics and is automatically rotated by standard log retention. We do not build user profiles from IP addresses and do not sell or share them.

1.4 Third parties that receive data

a) Poix.io
When you request a transcript, our backend forwards the YouTube video ID to Poix.io (https://api.poix.io) to fetch caption data. Poix.io receives only the video ID and our server's IP. See Poix.io's privacy terms at their website.

b) Google Gemini API
When you request an AI summary, our backend sends the transcript text and the video title/description to Google's Gemini API to generate the summary. Google receives the transcript content but does not receive your IP address, UUID, or any identifier linking the request to you — requests originate from our server. See Google's API data usage policy: https://ai.google.dev/gemini-api/terms.

c) Amplitude (Analytics)
The Extension sends anonymous product-analytics events to Amplitude EU (api.eu.amplitude.com) to help us understand feature usage and improve the product. These events include:

  • Extension opened / sidepanel opened
  • Transcript / summary / tags requested or completed
  • Copy, download, or share actions
  • Tab switches, language changes, settings changes
  • Errors and crashes

Amplitude receives your IP address (used by Amplitude to derive approximate country/city for aggregated statistics) and the installation UUID. Amplitude does not receive your name, email, or any PII. Data is stored on Amplitude EU servers. See Amplitude's privacy policy: https://amplitude.com/privacy.

d) Google Forms (uninstall feedback)
When you uninstall the Extension, Chrome opens a Google Forms page (forms.gle/UmoHPTWVmZkU6FZV7) where you can optionally provide feedback. Submitting the form is entirely voluntary. If you choose to submit it, your responses are processed by Google according to Google's privacy policy (https://policies.google.com/privacy). We do not collect any data from uninstall unless you submit the form.

1.5 Page scanner (non-YouTube sites)

On non-YouTube websites, the Extension scans the current page's DOM to detect embedded YouTube videos (links, iframes, lite-youtube elements, lazy-loaded embeds). This scan happens entirely inside your browser. We do not send the page's URL, content, title, or any other information about the pages you visit to our servers or any third party. Only the YouTube video IDs discovered on the page are displayed to you inside the side panel, and those are only transmitted if you explicitly click to open a transcript.

1.6 Welcome page

On first install, the Extension opens https://transcriptyoutube.app/welcome.html in a new tab. This is a static page on our website. Our web server logs the visit (IP, user-agent, timestamp) in standard web-server logs, which are retained for operational diagnostics only.

2. What we do NOT collect

  • Names, email addresses, phone numbers, postal addresses
  • Account credentials, passwords, authentication tokens
  • Payment or financial information
  • Health or biometric data
  • Content of web pages you visit (other than extracting YouTube video IDs, which stay local until you act on them)
  • Your browsing history
  • Keystrokes, mouse movements, or screen recordings
  • Data from children under 13

3. Permissions we request and why

  • sidePanel — to display the Extension UI in Chrome's side panel
  • storage — to save your preferences and the installation UUID locally
  • scripting — to seek the YouTube video when you click a timestamp, and to inject the page scanner into pre-existing tabs
  • tabs — to detect when you are on a YouTube video page and refresh the transcript when you navigate to a new video
  • host permission https://*/* — to allow the page scanner to find embedded YouTube videos on any HTTPS website you choose to scan

All permissions are used only for the purposes described above.

4. Data retention

  • Local data (preferences, UUID) — stays on your device until you uninstall the Extension or clear Chrome's extension storage
  • Backend rate-limit counters — kept in memory, reset daily at midnight UTC
  • Server logs — rotated automatically according to standard journalctl retention (typically a few weeks)
  • Amplitude events — retained by Amplitude according to their standard retention policy

5. Data sharing and selling

We do not sell, rent, or trade any data. We do not share data with advertisers. The only third parties that receive data are the service providers listed in section 1.4, strictly for the purposes described.

6. Your rights

Because we do not collect personal identifiers, we cannot look up data tied to "you" personally. However, you can:

  • Delete your local data by uninstalling the Extension
  • Reset your installation UUID by uninstalling and reinstalling the Extension
  • Opt out of analytics by uninstalling the Extension (there is currently no in-product analytics opt-out; this may be added in a future version)
  • Contact us at luyovanay124@gmail.com with any questions or requests

If you are located in the EEA, UK, or California, you have rights under GDPR / UK GDPR / CCPA including access, rectification, erasure, and objection. Contact us at the email above to exercise these rights.

7. International data transfers

  • Our backend is hosted on a VPS in the European Union
  • Amplitude data is stored in the EU (Frankfurt, Germany)
  • Poix.io and Google Gemini are US-based services; data sent to them is transferred outside the EU under the standard safeguards provided by those vendors

8. Security

Data in transit is protected by HTTPS/TLS. The backend enforces strict CORS and rate limiting. Secrets (API keys) are stored server-side only and never exposed to the Extension. No electronic transmission is 100% secure, but we use industry-standard protections.

9. Children

The Extension is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has used the Extension, contact us and we will take appropriate action.

10. Changes to this policy

If we change this policy, we will update the "Last updated" date at the top. Material changes will be communicated via the Chrome Web Store listing and/or our website.

11. Contact

Questions, requests, or privacy concerns:
luyovanay124@gmail.com