Privacy Policy

QueryCast · Test mode (OAuth Testing tier) · Last updated: 2026-04-30

What this app is

QueryCast is a personal YouTube subscription-feed curation tool. It is currently in OAuth test mode, available only to manually invited users.

What data we access

When you sign in with Google, you grant QueryCast access to two scopes:

• YouTube Data API — read-only (youtube.readonly): your subscription list and public metadata for videos from those channels (title, duration, views, description, thumbnail, publish date).
• Google Drive — application data folder (drive.appdata): a hidden folder accessible only to this app, used to back up your filter settings and per-video state.

What we do NOT access

• Your watch history, liked videos, comments, playlists, or private videos
• Anything in your Google Drive outside our application data folder
• No write actions on YouTube — we cannot subscribe, like, comment, or share on your behalf

Where data is stored

• In your browser: all app state — filters, channel weights, profiles, watched/saved/not-interested, and cached video metadata — lives in IndexedDB on your device.
• In your Google Drive: a backup copy of your settings + per-video state, in the application data folder. Only QueryCast can read or write this folder; we cannot access your Drive content.
• On our servers: nothing. We operate one minimal serverless function that fetches public YouTube RSS feeds and returns them with CORS headers. No user-identifying data is logged or persisted.

What we send to third parties

• Google APIs (googleapis.com): your access token accompanies API requests. Standard OAuth flow.
• YouTube IFrame Player (youtube.com): when you click a video, YouTube's embedded player loads. YouTube's privacy policy applies to playback. We do not modify the player.
• YouTube RSS feeds (youtube.com/feeds): only the channel ID is sent — no user-identifying data.

Data retention

• Your data lives on your device for as long as you use the app or until you clear browser data.
• Your Drive backup persists until you delete it or revoke this app's Drive access.
• We retain no user data on our servers.

Your rights

• Sign out at any time — clears session tokens.
• Revoke access via your Google Account permissions page.
• Delete local app data via Settings → "Reset all data," or by clearing browser data for this domain.
• Delete your Drive backup via Settings → "Delete Drive backup."

Cookies and tracking

We do not use cookies for tracking, no analytics SDK, no ad network, no third-party tracker. Session tokens live in sessionStorage and are deleted when the tab closes.

Test mode

This app is in OAuth test mode. Available only to users explicitly added via Google Cloud Console. The 100-user cap is a Google policy.

Changes to this policy

If we change this policy, the updated version will be posted at this URL with an updated "Last updated" date. Material changes affecting test users will also be communicated directly.

Contact

Questions or concerns: (contact email to be added before sharing with testers)

← Back to QueryCast