Privacy Policy — Andermatter Uploader
Last updated: 27 October 2026. This policy explains exactly what data the Andermatter Uploader application collects, why it is collected, where it is stored, how long it is kept, and how it can be deleted.
1. Controller and scope
Andermatter Uploader ("the Application") is a private, non-commercial utility operated by the owner of the Andermatter YouTube channel ("the Operator"). The Application has no public users, no registration, no accounts, and no website login. It is not offered as a service to third parties. The only person whose data is processed is the Operator.
Contact for all privacy matters: andermatter.official@gmail.com.
2. Categories of data processed
| Category | Examples | Source |
|---|---|---|
| OAuth credentials | client identifier, client secret, refresh token, access token | Google OAuth 2.0 authorisation granted by the Operator |
| Channel identity | channel ID, channel title, uploads playlist ID | YouTube Data API |
| Video files | finished music videos recorded by the Operator | Provided by the Operator |
| Video metadata | title, description, tags, thumbnail image, privacy status, scheduled publish time | Provided by the Operator |
| Upload results | video ID, public link, processing status | YouTube Data API responses |
| Technical logs | timestamps of commands, error messages | Generated by the Application |
No other categories are collected. In particular the Application does not collect viewer data, does not read or store comments, does not access audience demographics or watch-time analytics beyond what YouTube Studio shows by default, does not use cookies or tracking pixels on this website, and does not create advertising profiles.
3. Purposes of processing
- Uploading the Operator's own videos to the Operator's own YouTube channel.
- Setting video metadata (title, description, tags, thumbnail, privacy, schedule).
- Verifying that uploads are sent to the correct channel.
- Reporting the result of an upload back to the Operator.
There is no secondary purpose. Data is not used for advertising, profiling, resale, model training, or any form of automated decision-making about individuals.
4. Legal basis
The Operator processes their own personal data, and the only personal data involved is the Operator's own Google account authorisation. Where the GDPR applies, the basis is the Operator's consent, expressed by granting the OAuth authorisation, and it can be withdrawn at any time (see section 7).
5. Storage location and security
Credentials and queued video files are stored on a private server controlled by the Operator. Access is restricted to SSH with public-key authentication; the OAuth token file is readable only by the Application's service account and is stored outside the web root. All communication with Google services happens over HTTPS with certificate validation. The Application contains no mechanism to transmit stored data to any party other than Google.
6. Sharing and third parties
Data is not sold, rented, shared or disclosed to third parties. The only third party that
receives data is Google LLC, as the operator of YouTube, and only the video file and the
metadata necessary for publishing it. Google's processing is governed by the
Google Privacy Policy. The Application uses
the following Google API scopes:
youtube, youtube.upload, youtube.readonly.
7. Retention and deletion
| Data | Retention | How to delete |
|---|---|---|
| OAuth refresh token | Until access is revoked or the Application is removed | Revoke at myaccount.google.com/permissions — the stored token becomes invalid immediately |
| Video files | Deleted after a successful upload unless the Operator keeps an archive copy deliberately | Deleted automatically, or manually by the Operator |
| Upload results and logs | Up to 90 days, for troubleshooting | Deleted automatically |
Revoking access at the address above is immediate and requires no request to the Operator. Deleting local data is equally immediate, because the Operator has direct access to the server that stores it.
8. Individual rights
Because the only data subject is the Operator, rights of access, rectification, erasure, restriction, portability and objection are exercised directly by the Operator on their own server. Written requests may also be sent to andermatter.official@gmail.com and are answered within 30 days.
9. Children
The Application is not directed to children under 13, is not published, and is not used by anyone other than the Operator.
10. AI, model training and prohibited content
The Application does not use YouTube API data to train, fine-tune or evaluate machine learning models. It does not generate synthetic media. It never creates, requests or processes AI-generated non-consensual intimate imagery, and it does not use Google APIs for any such purpose.
11. Compliance
The Application is used in compliance with the YouTube Terms of Service, the YouTube API Services Terms of Service, and the Google APIs Terms of Service.
12. Changes to this policy
If this policy changes, the updated version is published at this address with a new date. Material changes are also noted in the video descriptions of the channel.
13. Contact
Email: andermatter.official@gmail.com
Channel: youtube.com/@Andermatter