Home

Privacy Policy

Effective date: 13 October 2026

This policy covers the private, read-only YouTube Reporting Pilot used for authorized UAC internal reporting. It is not a public consumer service.

Google data accessed

Only after the actual YouTube channel owner explicitly completes Google OAuth consent, the pilot requests the minimum read-only Google scopes needed for reporting: https://www.googleapis.com/auth/yt-analytics.readonly and https://www.googleapis.com/auth/youtube.readonly. These may provide channel and video metadata and performance analytics needed to create the approved report.

How data is used

Authorized data is used only to create internal UAC social-media performance reports. The pilot does not use Google user data for advertising, sale, profiling, or any purpose unrelated to the approved reporting function. It does not request permission to upload, edit, delete, or publish YouTube content.

Storage, sharing, and retention

No live UAC channel data is collected until channel-owner consent and organization-approved storage are in place. When activated, reporting data and OAuth tokens are handled only in the organization-approved infrastructure needed for the reporting service. Access is limited to authorized personnel and service components. Data is retained only as required for the approved reporting function and the organization’s applicable retention rules.

OAuth client credentials, refresh tokens, raw reporting data, and operational logs are never published to this website or its public source repository. Google user data is not sold or shared with third parties except approved service providers required to operate the reporting system, or where required by law.

Security

The pilot is designed to use read-only scopes, secure secret storage for OAuth tokens, encrypted transport, least-privilege access, and access-token renewal without exposing tokens in source control, logs, spreadsheets, or this public site.

Your choices

The channel owner can decline consent or revoke the application’s Google access at any time through the Google Account security and connected-app controls. Revocation stops future authorized API access; it does not automatically delete records that an organization is otherwise permitted or required to retain.

Website hosting

This is a static policy site. It does not provide forms, user accounts, or site analytics. GitHub Pages may process technical information about visitors under GitHub’s own privacy practices.

Contact and changes

For questions or requests about this policy or OAuth consent, use the support contact displayed on the Google OAuth consent screen. This policy will be updated before any material change to the pilot’s data practices.