Last updated: 11/Aug/2026
We collect information you provide directly to us, such as when you create an account, use our services, or contact us.
If you connect YouTube, we store the channel ID and channel name returned by the YouTube Data API. We also store encrypted OAuth access and refresh tokens, the video ID returned after an upload, and upload and processing status needed to resume an interrupted upload. We do not ask for or store your Google or YouTube password.
We use the information we collect to provide, maintain, and improve our services, communicate with you, and comply with legal obligations.
TheBlue uses YouTube data only to show the connected channel, upload the video you scheduled at the selected time, resume that upload after an interruption, and show its processing or failure status. TheBlue requests the https://www.googleapis.com/auth/youtube.upload scope to upload videos and the https://www.googleapis.com/auth/youtube.readonly scope to identify the connected channel and check the processing status of videos TheBlue uploaded. Automated SRT caption upload is temporarily unavailable, and TheBlue does not request the additional permission it requires. You can upload videos without an SRT track and should not reconnect a channel for captions. TheBlue does not read your video library, use YouTube data for advertising, or train machine-learning models with it.
TheBlue's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Google's handling of information is described in the Google Privacy Policy.
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy.
For YouTube scheduling, TheBlue sends the video file, title, description, category, audience declaration, disclosure choice, privacy choice, and subscriber-notification choice to YouTube. Service providers that host TheBlue's application, database, and uploaded files may process the minimum information needed to run the service. We do not let those providers use Google user data for their own purposes.
TheBlue sends Google OAuth and YouTube API data over HTTPS. OAuth access and refresh tokens are encrypted in the database with AES-256-GCM before they are stored. The OAuth client secret stays in the backend environment and is not sent to your browser.
Access to a YouTube connection requires a signed-in TheBlue account. The backend checks that the connected channel belongs to that account before it returns channel data, uses the authorization for an upload, or disconnects the channel. YouTube connection logs record operation outcomes and internal IDs, not OAuth tokens or Google or YouTube passwords.
You have the right to access, update, or delete your personal information. You may also opt out of certain communications from us.
You can disconnect a YouTube channel from the Account page. TheBlue asks Google to revoke the OAuth token, immediately removes its stored credentials, channel identity, upload sessions, video IDs, URLs, and processing/status records, and stops future uploads for that connection. Disconnecting TheBlue does not delete videos or other content hosted by YouTube; manage that content in YouTube. If Google cannot confirm token revocation, TheBlue still removes its copy of the data and tells you to remove TheBlue from your Google Account's third-party connections. You can review those controls at any time. When TheBlue detects revoked authorization, it removes the stored YouTube data immediately. If authorization cannot be verified because of a continuing provider failure, TheBlue removes it no later than 30 days after verification first became unavailable.
To request deletion of your TheBlue account or other stored Google/YouTube user data, email hboon@theblue.social. We delete requested Google and YouTube user data as soon as possible and within seven calendar days. Deleting data stored by TheBlue does not delete data stored by YouTube.
If you have any questions about this Privacy Policy, please contact us through our website.
aca63d493b1a6d621d08c895ffa69b21ff158a51