Privacy Policy

Last updated: September 2026

Summary

We collect no personal data. No email, no name, no IP logging, no tracking cookies. You use the tool, you get your thumbnail, you leave. That's it.

Data We Process

Video URLs (temporary, in-memory only)

When you submit a YouTube URL, our server extracts the video ID and calls the YouTube Data API to fetch the video's public metadata (title, channel, duration, view count). The URL is processed in memory and never written to disk, logged, or stored in any database.

No personal identifiers

We do not collect, store, or process:

  • IP addresses (beyond standard web server access logs, which we don't actively review)
  • Browser fingerprints
  • Device IDs
  • Geolocation
  • Referrer data

Cookies & Local Storage

We set zero cookies. No session cookies, no analytics cookies, no advertising cookies, no preference cookies.

We do not use localStorage, sessionStorage, or IndexedDB.

Analytics

We use no third-party analytics by default (no Google Analytics, no Matomo, no Plausible, no Fathom).

If we add privacy-friendly analytics in the future (e.g., Plausible or self-hosted Umami), we will:

  • Update this policy
  • Ensure no personal data is collected
  • Honor Do Not Track headers
  • Provide an easy opt-out

Third-Party Services

The tool interacts with two external services:

  • YouTube Data API (Google) — We send the video ID to fetch public video metadata. Google's privacy policy applies to their processing.
  • YouTube Image CDN (img.youtube.com) — Thumbnails are loaded directly from YouTube's CDN. Your browser makes these requests; we don't proxy them.

We do not use CDNs, font services, or analytics providers that track users across sites.

Security

  • All connections use HTTPS (TLS 1.2+)
  • Content Security Policy headers restrict resource loading
  • No user input is reflected unsanitized in responses
  • Dependencies updated regularly for security patches

Children's Privacy

The tool is not directed at children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. Since we collect no personal data from anyone, COPPA/GDPR-K compliance is inherent.

Your Rights (GDPR, CCPA, etc.)

Since we process no personal data, there's nothing to access, rectify, delete, or port. If you believe we're processing data about you, contact us and we'll investigate.

Changes to This Policy

Any changes will be posted here with an updated "Last updated" date. Material changes (e.g., adding analytics) will be announced on the homepage.

Contact

Privacy questions: privacy@ytthumbdownloader.online