Privacy Policy

1. Who is responsible

The service is published and operated by DIGITIZ PTE. LTD., a company registered in Singapore under unique entity number 202037013D, whose registered office is at 160 Robinson Road #14-04, Singapore Business Federation Center (SBF Center). For any question about this policy or your data, write to hello@videotrends.io — we answer from the same address.

2. What we collect

Only three categories, all tied to having an account:

• Account data: your name, your e-mail address, and your password (never stored in clear text — it is hashed by our authentication library). The e-mail confirmation code sent at sign-up is stored hashed and expires after 10 minutes.
• Session data: a session token, plus the IP address and browser user-agent recorded when you log in. This is what keeps you signed in and lets us spot abuse of the sign-up and code-sending endpoints.
• Product data: the channels you follow, the videos you bookmark or ignore, your inspiration languages, your interface language and theme, your optional own-channel declaration, and the search terms you run in the discovery tab.

3. What we do NOT collect

We never ask for and never receive your YouTube credentials: VideoTrends only reads public data through the official YouTube Data API, and cannot post, modify or access anything on your channel. Declaring your own channel is purely a label on our side — it grants us no access to it.

We do not sell, rent or share your personal data with third parties for advertising, and we run no advertising trackers.

4. Why we handle it

Account and session data: to create your account, keep you signed in, and protect the service against abuse — this is necessary to provide the service you asked for, and our legitimate interest in keeping it secure.

Product data: to compute your feed of outlier videos and remember your preferences. Without it, the product has nothing to show you.

5. Who else processes data for us

We rely on a small number of providers, each for one job:

• Hostinger — the server hosting the application and its database, located in the European Union.
• Resend — sending the e-mail confirmation code at sign-up. It receives your e-mail address and the code.
• YouTube Data API (Google) — reading public channel and video data. We send channel and video identifiers, never your personal data.
• Apify — running channel discovery searches. It receives the search term you type, never your identity.
• Plausible Analytics — self-hosted audience measurement on our own server. It uses no cookie, stores no personal data, and does not follow you across sites.

6. Cookies

We only set cookies that are strictly necessary: your session cookie, which keeps you signed in, and a preference cookie remembering your dark or light theme. There is no advertising or tracking cookie, which is why you are not greeted by a consent banner.

7. How long we keep it

Account and product data are kept as long as your account exists. Sessions expire on their own and are removed. Confirmation codes expire after 10 minutes. Database backups are kept for 14 days, then deleted automatically.

When you ask us to delete your account, we erase your personal data — account, sessions, preferences, bookmarks and follows. The public YouTube statistics we collected about channels are not personal data and remain in the product.

8. Your rights

The service is offered to users in the European Union and we apply the GDPR to their data: you may access your data, correct it, have it deleted, object to its processing, or ask for a portable copy. Write to hello@videotrends.io and we will act on it within one month. You may also lodge a complaint with your national data protection authority — in France, the CNIL.

9. Security

The site is served exclusively over HTTPS with strict transport security. Passwords are hashed, confirmation codes are stored hashed, session cookies are signed, and the database is not reachable from the public internet. Sensitive credentials live in server-side environment variables, never in our source code.

No system is perfectly secure. If a breach ever affects your data, we will notify you and the competent authority as required by law.

10. Changes

If this policy changes in a way that affects you, we will update the date at the top of this page and inform registered users by e-mail before the change takes effect.