Privacy Policy
Last updated: May 3, 2026
This Privacy Policy explains how YT Unlocker collects, uses, and protects your information. It specifically covers our use of YouTube API Services and how we handle data obtained through Google OAuth.
1. Who we are
YT Unlocker ("we," "us," or "our") operates the YT Unlocker platform at https://unlocknewcontent.com. We help YouTube creators set engagement-based content unlock goals for their audience.
For questions about this policy, contact us through your account or at the email address associated with your account.
2. Information we collect
Information you provide directly
- Account information: Your email address, password (stored as a secure hash), and optional display name when you register
- Rule content: Video IDs, threshold settings, unlock content (text/HTML), email subjects and bodies, and redirect URLs you configure
- Waitlist information: Name, email, and optional note if you join the waitlist
Information from YouTube / Google OAuth
When you connect a YouTube channel, we receive and store:
- YouTube channel ID — the unique identifier for your channel (e.g. UCxxxxxx)
- Channel name and thumbnail — displayed in your dashboard
- OAuth access and refresh tokens — used to read video statistics and, where authorised, update video/playlist privacy settings on your behalf
We access YouTube video statistics (view count, like count, comment count) for videos you specify. We do not access your watch history, private messages, financial data, or any YouTube data beyond what is necessary to provide the Service.
YouTube API Services disclosure: YT Unlocker's use of information received from Google APIs adheres to the
Google API Services User Data Policy, including the Limited Use requirements. We do not use YouTube API data for advertising, do not sell it to third parties, and do not use it for any purpose other than providing and improving the Service.
Fan/subscriber information
When a fan subscribes on a public unlock page, we collect their email address. This email is used solely to send the unlock notification email configured by the creator. We do not use fan emails for marketing or share them with third parties.
Automatically collected information
- Session data: We store session tokens in our database to keep you logged in, along with your IP address and browser user agent at login time
- Log data: Server logs may capture IP addresses, browser types, pages visited, and timestamps for security and debugging purposes
3. How we use your information
We use the information we collect to:
- Provide, operate, and improve the Service
- Authenticate you and maintain your session
- Connect to YouTube on your behalf to read stats and perform authorised actions
- Send unlock notification emails to fans who have subscribed to your unlock pages
- Send transactional emails such as password reset links
- Monitor for abuse and enforce our Terms of Service
- Respond to your support requests
We do not use your data for advertising. We do not sell your data. We do not share your data with third parties except as described in this policy.
4. YouTube API data — limited use disclosure
Our use of data obtained through YouTube API Services is limited to:
- Displaying your channel name and thumbnail in your dashboard
- Reading video statistics (views, likes, comments) for videos you specify in your unlock rules
- Updating video or playlist privacy status from private to public when an unlock threshold is met and you have configured this action
We do not use YouTube API data to serve advertisements, build user profiles for third-party use, or for any purpose not directly related to operating the Service for you.
You can revoke our access to your YouTube data at any time by:
5. Data sharing and third parties
We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:
- Service providers: We use third-party infrastructure (web hosting, database hosting) to operate the Service. These providers process data only as necessary to provide their services to us.
- Payment processing: When paid plans are introduced, payment information will be handled by Stripe. We will not store full payment card details on our servers.
- Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of YT Unlocker, our users, or the public.
- Business transfers: If YT Unlocker is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you of any such change.
6. Data retention
- Account data is retained as long as your account is active. You may request deletion at any time.
- OAuth tokens are deleted when you disconnect a channel or delete your account.
- Fan subscriber emails are retained until the associated unlock rule is deleted.
- Unlock event logs are retained indefinitely to support debugging and audit trails, but contain no personal data beyond rule identifiers.
- Session data expires after 30 days of inactivity and is purged periodically.
7. Security
We take reasonable technical and organisational measures to protect your data, including:
- Passwords stored using bcrypt hashing (never in plain text)
- OAuth tokens stored in the database, not in cookies or client-side storage
- HTTPS enforced for all connections
- Session tokens are cryptographically random and stored server-side
No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Revoke YouTube API access at any time
- Object to or restrict certain processing of your data
To exercise these rights, contact us through your account or at the email associated with your account. We will respond within a reasonable timeframe.
9. Children's privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
10. Cookies and tracking
We use a single session cookie (yt_session) to keep you logged in. This cookie is essential to operate the Service and is not used for tracking or advertising. We do not use third-party analytics trackers, advertising cookies, or fingerprinting.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy. We will make reasonable efforts to notify you of material changes.
12. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us through the Service or at the email address associated with your account.