Privacy Policy

Effective date: August 4, 2026

PlayRivet ("PlayRivet", "we", "us") maintains dynamic YouTube playlists on behalf of users who connect their Google account. This policy explains what data PlayRivet accesses, why, and how it is stored, used, and deleted. PlayRivet's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the YouTube API Services Terms of Service.

YouTube API Services

PlayRivet uses YouTube API Services to read channel and video metadata and to manage the playlists you designate. By connecting your Google account you also agree to the YouTube Terms of Service.

What we access and store

• Google account profile basics — your email address, display name, and profile picture URL, used to identify your account and display it in the app.
• OAuth tokens — stored encrypted at rest (Fernet symmetric encryption). Tokens are used only to call the YouTube Data API on your behalf, for the actions you configure.
• Playlist rule configuration — the channels, filters, sort order, and schedule you set up for each playlist you ask PlayRivet to manage.
• Cached video metadata — titles, durations, and publish dates of candidate videos, used to evaluate your filters and sort order. This cache is refreshed on every sync and deleted when the associated playlist rule or your account is deleted.

What we never access

PlayRivet never accesses your YouTube watch history, search history, or any private data beyond the scopes you explicitly grant during sign-in. We do not sell your data, and we do not share it with third parties, advertisers, or data brokers.

How playlist modifications happen

PlayRivet only creates, reorders, or removes items in playlists you have explicitly designated for it to manage. Each such playlist has a consent record created when you attach it and revoked when you delete it or disconnect your account. After reconnecting, you must explicitly resume management of each retained playlist. Every modification PlayRivet makes is written to an activity log.

Retention and deletion

Deleting your PlayRivet account removes your profile, stored tokens, playlist rules, cached video metadata, and activity history. Disconnecting your Google account revokes and deletes your stored OAuth tokens; PlayRivet stops syncing until you reconnect and explicitly resume each retained playlist. You can also revoke PlayRivet's access directly from your Google account security settings.

Google's own privacy practices

Your use of Google services, independent of PlayRivet, is governed by the Google Privacy Policy.

Changes to this policy

We may update this policy as PlayRivet evolves. Material changes will be reflected by updating the effective date above.

Contact

Questions about this policy or your data can be sent to [email protected].