Privacy Policy

The short version

• Your watch history reaches us only when you hand it over: by tapping Capture, by importing a file you exported yourself, or by bringing in a TikTok export you requested.
• We never see your Google or TikTok password.
• We don’t sell your data, don’t use it for advertising, and don’t run analytics or tracking.
• You can delete your account and everything in it at any time.

Information we collect

• Account information. If you sign in with Google, we receive your name, email address, and Google account identifier. If you sign up with an email and password, we store your email address and a securely hashed version of your password. We use this only to create and secure your account.
• YouTube watch history. Only when you choose to give it to us, by capturing it with one of our browser extensions (see Browser extensions) or by importing a Google Takeout file. For each video, this is the video, its title, its channel, the day you watched it where YouTube shows one, and, where YouTube shows it, how far into the video you got. With Takeout, you request the export from Google and hand us the file yourself; we never retrieve it from Google.
• TikTok watch history. Only if you choose to bring it in. TikTok keeps watch history in its app and makes it available only through its own data export. Our Safari extension can ask TikTok for that export on your behalf, but only when you tap Ask TikTok, and it notes when you asked so the app can remind you when the file should be ready. When the file is ready and you tap Bring it in, the extension opens it on your device and keeps only the watch history: which videos you watched and when. The rest of the export (messages, comments, profile, and so on) never leaves your device. You can also pick a TikTok export you downloaded yourself; the app extracts the watch history the same way.
• YouTube subscriptions and liked videos. Only if you connect your YouTube account through Google. The current release doesn’t offer this. When it is offered, we will read the channels you subscribe to and the videos you have liked, with their dates, and use them to count which channels you chose. This access will be read-only.
• Changes you ask us to make on YouTube. If you choose to subscribe to channels from within Unrotted, we record which channels you selected and when you confirmed, so there is a record of what you authorized. We only ever subscribe you to channels you have individually selected and confirmed on a review screen, and we never change anything else about your YouTube account.
• Derived data. Descriptions of each channel or creator (what it is about, how it is made, who makes it, which attention techniques it uses), watch-time breakdowns, your feed score, and related metrics we calculate from your history.
• Age. We collect your birth year solely to confirm you are 13 or older.

We don’t collect your location, contacts, photos, or browsing activity outside the pages described in this policy. The app’s reminders are local notifications scheduled on your device; we don’t collect a push token.

Browser extensions

Unrotted has two browser extensions: a Safari extension that ships inside the iPhone app, and an extension for Chrome, Edge, Brave, Arc and other Chromium browsers. They do the same job.

• Where they run. On YouTube, the extensions act only on your watch history page (youtube.com/feed/history). The Safari extension also runs on TikTok’s download-your-data page, for the TikTok import described above. The Chrome extension also runs on unrotted.com/import, to hand captures to your account. They don’t read any other page, and they don’t record your browsing.
• When they act. Only when you tap Capture (or, for TikTok, Ask TikTok or Bring it in). The extensions read the same watch history list you can see on the page, using the session you are already signed in with. They never see or store your Google or TikTok password or session cookies.
• What they collect. For YouTube: for each video on the history page, its ID, title, channel name and ID, the day you watched it, and how far into it you got where YouTube shows that. For TikTok: the video IDs and times from your export’s watch history. Nothing else.
• Where it goes. The Safari extension hands captures to the Unrotted app on your iPhone through storage the two share on your device. The Chrome extension keeps a capture in your browser’s local extension storage until you open unrotted.com/import while signed in. The page then uploads it to your account over an encrypted connection and the extension deletes its copy. Uninstalling the extension deletes any capture you haven’t imported yet.
• What they keep. Besides captures that haven’t been imported yet, the extensions store only the date your history is complete up to, so the next capture reads only what is new.

Unrotted’s use of information received through its Chrome extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use that data only to provide the features described in this policy. We don’t sell it, don’t use it for advertising or to determine creditworthiness, and don’t let people read it except where you ask us to (for example, for support), where it is needed for security or to comply with the law, or where it has been aggregated and anonymized.

How we use your information

• To compute and display your scores, breakdowns, and recommendations.
• To operate, secure, and improve the service.
• To communicate with you about your account if you opt in.

We do not sell your personal information, and we do not use your watch history for advertising.

How your information is shared

We share data only with service providers that operate the product on our behalf, and only what each one needs:

• Supabase hosts our database, file storage and sign-in.
• Vercel hosts the website.
• Google’s YouTube Data API gives us public channel and video details, such as titles and durations. We send it video and channel IDs only.
• TikTok’s public embed service gives us a TikTok video’s public caption and creator. We send it video IDs only, never who watched them.
• TypeSafe, an AI provider, writes the channel descriptions. For a YouTube channel, we send it the channel’s public name and description and the titles of its recent public videos. For a TikTok creator, whose videos can’t be listed publicly, we send the creator’s name and the public captions of their videos that Unrotted users have watched. Those captions are pooled across all users and never linked to who watched them. We never send your account, your identity, or your watch history.

Channel and creator descriptions are shared across all users, so each is described once. Aggregated, anonymized signals may power “fans also like” recommendations. These contain no personal identifiers and are shown only when enough people are counted in them. We may also disclose information if the law requires it, or to protect the safety and rights of our users or others.

Cookies

The website uses only the cookies it needs to keep you signed in. We don’t use advertising or analytics cookies, and we don’t use third-party trackers on the website or in the app.

Security

Data travels between your devices and our servers over encrypted (HTTPS) connections. Access controls in our database limit each account to its own data. Passwords are stored only as secure hashes, and any access tokens for connected accounts are encrypted when stored. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects your data.

Data retention and deletion

We keep your account, watch history, the archives you upload or capture, and your derived scores until you delete your account. You can delete your account and all associated data at any time from Settings in the app, or by emailing support@unrotted.com from the address on your account. Deletion is permanent. It removes your account, watch history, derived scores, and uploaded archives. Channel and creator descriptions aren’t personal data, so we keep them.

Channel and video details we obtain from the YouTube Data API are refreshed or deleted within 30 days, as the YouTube API Services Terms of Service require. If you connect YouTube in a future release, removing Unrotted from your Google account’s permissions page revokes our access immediately. Channels you subscribed to stay subscribed until you unsubscribe from them on YouTube.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, use in-app deletion or contact us at support@unrotted.com. For users in the EEA/UK, our legal basis for processing is your consent and our legitimate interest in operating the service. You may also complain to your local data protection authority.

Our service providers may process data in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for those transfers.

Children

Unrotted is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us data, contact us at support@unrotted.com and we will delete it.

Google user data

Unrotted’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features described above, and never for advertising.

Our use of YouTube data is also governed by the YouTube Terms of Service and the Google Privacy Policy. Signing in with Google gives us only your name, email address and account identifier. The current release requests no YouTube permissions. Your history reaches us only through a browser-extension capture or a Takeout file you provide. Subscribing to a channel from a Starter Pack opens that channel on YouTube for you to confirm there. When the connect feature is offered, it will request the narrowest permissions that make it work: read-only access to your subscriptions and liked videos, and permission to manage your subscriptions only when you ask us to subscribe you. Outside YouTube’s official APIs, we access YouTube only through the history page you choose to capture.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the date above, and we will tell you in the app or by email before a change that materially affects how we use data we already hold.

Contact

Questions? Email us at support@unrotted.com.