What is collected, and where it goes

Last updated 18 October 2026. This page covers this website, My YT tool, a private analytics tool I use on YouTube channels I own or manage, and the first emails I send to businesses.

This website

No analytics, tracking pixels or advertising cookies. The site sets no cookies.
The site is served by Cloudflare Pages. Cloudflare handles standard request data, such as IP address and browser type, to deliver and protect the site (Cloudflare privacy policy).
The audit request form sends what you type (name, business, website, what you sell, your main headache, email and an optional note) as one email to [email protected] through Resend (Resend privacy policy). It is not stored in a database.
What you send through the form or by email is used to reply to you, to scope and quote work you ask about, to run an audit you order (the Customer Leak Audit costs each leak from the booking figures you send) and to deliver work you buy.
I read it myself. I also use AI tools, Anthropic's Claude (Anthropic privacy policy) and models that run on my own computer, to sort messages and draft replies; I check and send every reply myself. Your message stays in my Google email account until you ask me to delete it, and it is not sold.
The intro video uses YouTube's privacy-enhanced mode and loads from YouTube only when you press play.

My YT tool

What it reads. When a channel owner signs in with Google, the tool asks for one permission: Google's read-only YouTube Analytics permission ("View YouTube Analytics reports"). With it the tool reads that channel's analytics: views, watch time, average view duration, audience retention, traffic sources, like, comment and share counts, subscribers gained, and thumbnail impressions and click-through rate, split by traffic source, device type and operating system. These are totals for the channel and its videos, not data about individual viewers. It also reads public video details, such as titles, lengths and thumbnails, through the YouTube Data API with a public-data key, not with the owner's sign-in.

What it cannot do. It cannot upload, edit or delete videos, read or post comments, or change any channel setting. The only thing it creates on YouTube is a reporting job, which asks YouTube to prepare the channel's daily thumbnail reports for download.

Where the data goes. Everything the tool reads is saved in local database and report files on the one computer that runs it, outside its code repository. The sign-in token is saved on that computer too, also outside any code repository. Apart from its requests to Google's own APIs, the tool sends nothing to any other server. The data is not sold, not shared with anyone, not used for advertising, not passed to any AI service and not used to train AI models.

Google user data. Information received from Google APIs is used only to show the channel's own reports to its owner and to me, and is handled under the Google API Services User Data Policy, including the Limited Use requirements: it is not transferred to anyone else, not used for advertising and not used to train AI models.

YouTube. The tool uses YouTube API Services. By granting access you also agree to the YouTube Terms of Service, and the Google Privacy Policy covers how Google handles your data.

Removing access. You can revoke the tool's access at any time at myaccount.google.com/permissions. Revoking stops the tool from reading anything new; it does not delete what is already saved. To have the saved data and the sign-in token deleted, email [email protected] and I will delete them from the computer that holds them.

Who can use it. It runs only on YouTube channels I own or manage, and only after the channel owner grants access. It is not offered to the public.

Outreach

When I write to a business for the first time, I use its name, the contact address or phone number it publishes on its own website or Google listing, and what I measured on its homepage that day. I do this under legitimate interests (Article 6(1)(f) of the GDPR and the UK GDPR): offering my services to businesses I think I can help. I don't buy lists. These details are kept in my Google email account and in files on my own computer; AI tools, as above, help me draft the email, and I read and send every one myself. If you reply "no thanks" or ask me to stop in any other way, I stop and keep only your address on a do-not-contact list so I never write again. If we never talk, I delete the details 12 months after my last message. You can ask what I hold, have it corrected or deleted, or object at any time at [email protected], and you can complain to your data protection authority (the ICO in the UK, the Data Protection Commission in Ireland).

Contact

Questions or deletion requests: [email protected]