Version 1.0, effective November 1, 2026. This policy explains how YouTube Transcript processes personal information when you use our website and service. Questions and requests go to privacy@youtube-transcript.app.
1. Who is responsible for your data
The data controller is Code Canyon LLC, a limited liability company registered in Wyoming, United States, with its address at 30 N Gould St Ste N, Sheridan, WY 82801, USA. We have not appointed a data protection officer. The privacy contact is privacy@youtube-transcript.app.
2. What we collect
- What you submit: the YouTube links you paste and the options you choose.
- What we generate: transcripts built from the videos' existing captions, and the status of each transcript.
- Account data: the email address you sign in with, the name your Google account shares if you sign in with Google, and your credit balance.
- Order data: the plan you bought, the amount, the order reference and the payment status. We never see your card number.
- Technical data: request logs, IP address, browser type and security events.
- Support messages and the references you send with them.
We do not collect your contacts, location, precise device identifiers for advertising, or any biometric template.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Produce transcripts built from the videos' existing captions from what you submit, and deliver the result | Performing our contract with you |
| Sign you in, keep your balance and process payments and refunds | Performing our contract, and legal obligations for accounting |
| Investigate reports, prevent abuse and fraud, and keep the service secure | Our legitimate interests and legal obligations |
| Measure which sources bring visitors and buyers (first-party attribution) | Our legitimate interest in understanding our own site |
4. How we process what you submit
When you ask for a transcript, your browser requests the video's captions from YouTube directly, so YouTube (Google) receives that request and your IP address under Google's own privacy policy. If that does not work, the video link is sent to our servers, which request the captions from YouTube instead. In bulk mode the list of videos is also sent to our servers so that credits can be counted.
We do not use your content or results to train any model, and we do not sell them.
5. Cookies and tracking
Strictly necessary cookies keep you signed in and protect your account. They cannot be switched off. First-party attribution records an anonymous visitor ID, the time of your first visit, the landing page, the referring website and campaign parameters, and can link them to your account when you register or buy. Site statistics come from Plausible Analytics, a privacy-focused service hosted in the EU. We use it to count visits and to see how many visitors reach each step of using the service, such as signing in or buying credits. Plausible sets no cookie and stores nothing on your device. It receives the page address, the referring website, campaign parameters, your browser and device type and an approximate country. It uses your IP address and browser type only to create a daily anonymous identifier and does not store them. It never receives what you submit, your name, your email address or an order number. We do this because of our legitimate interest in understanding and improving the service, and we honour the Do Not Track setting of your browser. We do not use advertising or other third-party tracking scripts, so there is no optional cookie to accept or decline.
6. Who we share data with
We do not sell personal information. We share it only with service providers that help us run the service, and they are bound to protect it: Cloudflare (hosting, storage and delivery), YouTube (Google), which provides the captions, Google (sign-in), Plausible Analytics (cookieless site statistics), Link by Stripe (checkout and payment, as the reseller) and our support and email provider. We may disclose information when the law requires it or to protect people from harm, for example to report child sexual abuse material to the authorities.
Purchases are sold through Link, Stripe's checkout service, which acts as the reseller and merchant of record for your order. Link collects your payment details, billing address and any sales tax or VAT. We receive the order status, the amount and the email on the order, but never your full card details.
7. Security
Data is encrypted in transit. What you submit and the results we generate are not kept on our servers after your request is answered. Access to production systems is limited. If a breach affects your personal information we will tell you and the relevant authority without undue delay and, where the law sets a deadline, within it (for example 72 hours).
8. How long we keep data
| Data | Kept for | Then |
|---|---|---|
| What you submit | Only while the transcript is being fetched | Not stored |
| Results we generate | Only in your browser, not on our servers | Not stored |
| Diagnostic logs | About 7 days | Deleted |
| Account data | While your account is open, and up to 2 years after it is closed | Deleted or anonymized |
| Order, credit and refund records | As long as tax and accounting law requires, normally 7 years | Deleted or anonymized |
| Support messages | 2 years after the case closes | Deleted |
| Reports of misuse and the decisions on them | 3 years | Deleted |
Download the results you want to keep, because we do not store them.
9. Your rights
You can ask us to give you access to your data, correct it, erase it, restrict its use, give you a portable copy, object to its use, and withdraw consent you gave. You also have the right to know how your data is used. Write to privacy@youtube-transcript.app from the email address of your account. We answer within 30 calendar days and may need to verify that the account is yours. You may complain to your local data protection authority. Some data, such as payment records, must be kept by law, and a request does not override that.
10. Marketing
We do not send marketing email. We send only messages that the service needs, such as sign-in codes, order receipts and replies to your support requests.
11. Transfers across borders
Our providers operate in several countries, so your data can be processed outside the country where you live, including in the United States. Where the law requires it, we rely on appropriate safeguards for these transfers.
12. Children
The service is for adults only. You must be at least 18 years old. If you believe a child has given us personal information, tell us at privacy@youtube-transcript.app and we will delete it.
13. Links and changes
Our pages may link to other websites that have their own policies. We may update this policy when the service or our processing changes. For material changes we post the new version with its date at least 14 days before it applies, and we tell signed-in users where the law requires it.
14. Contact
Code Canyon LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Privacy: privacy@youtube-transcript.app. General support: support@youtube-transcript.app. We monitor both mailboxes on business days.