NNaudina
Legal

Privacy Policy

How Naudina handles the information needed to provide authorised YouTube livestream-management features.

Last updated: 14 October 2026

Overview

This Privacy Policy explains how Naudina (“we”, “us”, or “the Service”) handles personal information and YouTube API data when you use the Service. The Service uses YouTube API Services to provide authorised YouTube channel and livestream-management features.

By using the Service, you agree to this Privacy Policy and to the YouTube Terms of Service. Please also review the Google Privacy Policy.

Data we handle

We handle only the information needed to provide the features you choose to use, which may include:

  • The identifier and name of the YouTube channel you connect;
  • OAuth access and refresh tokens that Google provides after you authorise the Service. Tokens are stored encrypted. We never ask for, receive or store your Google or YouTube password;
  • Livestream settings and metadata that you enter or authorise us to retrieve, such as titles, descriptions, thumbnails, audience designation and privacy/visibility choice;
  • Statistics of the Service’s own broadcasts, such as live viewer counts, views and likes;
  • Your channel’s subscriber, view and video counts, which we read from YouTube every three hours;
  • The videos you upload to your gallery, a copy of each prepared for streaming, and a preview picture of each;
  • The tags you give your videos, and each tag’s titles, thumbnails, description and visibility;
  • For people invited to use the workspace: a name, a password hash and an encrypted authenticator secret;
  • For each sign-in attempt, the account name entered and the network address it came from; for each signed-in session, its network address and browser;
  • Operational information needed to keep the Service reliable, such as stream health, API error messages, audit events and timestamps; and
  • Support messages and contact details you send to us.

How we use this data

We use this information only to provide, secure, support and improve the features you have requested—for example, storing the videos you upload, preparing them for streaming (a copy in your channel’s streaming format and a preview picture) and streaming them to the channel you connected; connecting the channel you select; creating, starting, ending and replacing live broadcasts automatically on a channel whose owner connected it and agreed to automated broadcasting; using the statistics of those broadcasts to decide which streams to keep and to show which streams work; and diagnosing a problem you report.

We do not sell personal information or YouTube API data. We do not use your channel access to generate artificial views, likes, comments, subscribers or engagement. We do not use YouTube API data for advertising or any unrelated purpose.

Sharing and security

We do not share YouTube API data with unrelated third parties. Data may be processed by the infrastructure providers that host the Service and its encrypted database, only to operate the Service on our behalf. Operational alerts about the Service, which may include a channel's name, stream and broadcast identifiers, and status or error messages returned by YouTube, are sent to the Service's operators through Telegram, which we use only as our notification provider for this purpose. We use HTTPS for data in transit and access controls and encryption for sensitive credentials at rest.

Your gallery and your channel’s streams are visible to the accounts your channel is shared with (usually only yours) and to Naudina’s admin, who runs the Service and can see and manage every channel and its gallery: its videos, tags, titles, thumbnails, streams and settings. We don’t publish your videos anywhere except as live broadcasts on the YouTube channel you connected.

No system is perfectly secure. If we identify a security issue that materially affects your information, we will take reasonable steps to investigate and address it.

Cookies and your browser

This website, naudina.com, sets no cookies and stores nothing on your device.

The Naudina app at app.naudina.com stores small pieces of information in your browser, only to make the app work:

  • A sign-in cookie (__Host-session), set when you sign in. It holds a random code that tells our server the request comes from your signed-in session. It is sent only to app.naudina.com, only over HTTPS, and page scripts can’t read it. It ends when you sign out, and our server stops accepting it after 7 days at most;
  • Two short-lived cookies used only by Naudina’s administrator: invite-link, which shows a new account’s invitation link once and expires after 5 minutes, and __Host-dropbox-state, which protects the step that connects a Dropbox folder and expires after 10 minutes;
  • A local storage check: the app’s page script may write and remove a test value in your browser’s local storage to see whether it works. It keeps nothing there.

We use no analytics, advertising or tracking cookies, and we let no third party place cookies through our website or app. When you connect a YouTube channel, you sign in on Google’s own pages, where Google sets and reads its own cookies under the Google Privacy Policy.

You can delete these cookies at any time in your browser’s settings. If you block or delete the sign-in cookie, you are signed out of the app.

Your choices and Google access

You can stop the Service from accessing your YouTube data at any time by using the Service’s Disconnect and delete data control. You can also revoke access directly through Google Security Settings.

Disconnecting revokes the Service’s OAuth token for the connected channel and deletes the YouTube data we hold for it. It does not delete videos, broadcasts or other content stored by YouTube. Those must be managed in YouTube or another authorised YouTube client. It also leaves the videos in your Naudina gallery; you delete those in the gallery.

Retention and deletion

We retain information only for as long as needed for the active feature you authorised, support, security and legal obligations. If you disconnect a channel through the Service or request deletion, we revoke the authorisation and delete the associated authorised YouTube API data as soon as possible, and no later than seven calendar days, except where we must retain a minimal record to meet a legal obligation or protect the Service.

If you revoke access in Google Security Settings, we detect invalid authorisation during our scheduled checks and delete related API data within 30 calendar days. You can request deletion directly at any time using the form on our Disconnect and deletion page.

YouTube API data we store, such as the channel’s name and identifier, broadcast and stream identifiers, and status or error messages returned by YouTube, is refreshed from YouTube or deleted within 30 days. While the Service runs streams for a channel, it reads each live broadcast’s concurrent viewers, views and likes from YouTube every five minutes to decide which streams to keep. These statistics are deleted within 30 days: each reading 30 days after it was taken, and a stream’s latest counts 30 days after the stream ends. They are deleted at once when you disconnect the channel. Titles, descriptions and thumbnails that the Service itself sets are the Service’s records and are kept with the stream history. Backups are deleted within 30 days.

Your videos stay in your gallery, on our servers, until you delete them, and so do the copy of each prepared for streaming and its preview picture. When you delete a video, it leaves your gallery at once and is never streamed again. Its file, its prepared copy and its preview picture are removed from our servers within minutes, or, if a broadcast is playing it, within minutes of that broadcast ending. An upload that stops before it is finished is removed a day after its last part arrived. The tags on a video stay until you remove them or delete the video. A tag’s description and visibility stay until you change them or the tag is deleted. A tag’s titles and thumbnails stay until you remove them; each title leaves its tag’s list when a broadcast uses it, and is then kept with that broadcast’s history. We keep the names of deleted files in our records of what the Service did. Our backups don’t include your videos, your thumbnails or the titles still waiting in your tags’ lists; a title a broadcast has used is part of that broadcast’s history, so it is in the backups too. Keep your own copies of your videos.

For your account we keep your name, a password hash and an encrypted authenticator secret until the account is deleted. Sign-in attempts are kept for 30 days. A signed-in session lasts at most 7 days; its network address and browser are deleted 30 days after its 7-day limit runs out, so at most 37 days after you sign in.

To close your account and delete your gallery, ask the person who invited you, or write to us at Urbanautomation7@gmail.com. Within seven calendar days we delete your account, every video in your gallery with its prepared copy and preview picture, your tags’ titles, thumbnails and descriptions, and the YouTube data we hold for your channel. We keep a minimal record of what the Service did and when, such as the names of deleted files and the titles of past broadcasts; sign-in records and backups are deleted on the schedule above.

Contact

For privacy questions or complaints, contact Urbanautomation7@gmail.com. Please do not include your Google password or stream key in an email.