Privacy Policy

The email address and name you provide when signing up. Your password is stored only as an irreversible hash — we cannot see it or recover it.

If you sign in with Google, we receive from Google only your email address, name and account identifier (the openid, email and profile scopes). Signing in does not give us access to your Gmail, contacts or Google files.

AutoStream uses YouTube API Services. You grant access to your channel yourself, through a separate consent on Google's page, and only if you connect a channel through your Google account.

With the youtube.force-ssl scope, the service creates and manages live broadcasts on your channel: it sets the title, description, thumbnail, privacy status, category, ad and recording settings, starts and ends the broadcast, and reads the number of concurrent viewers. If you set a chat message in the stream settings, the service posts it on behalf of the channel to the broadcast's live chat — once per broadcast. We also store the channel's ID, title and avatar in order to show them in your dashboard.

With the yt-analytics.readonly scope, the service only reads reports for the broadcasts it created itself: views, watch time and average view duration. This scope does not allow changing anything.

The service does not read or modify your other videos, comments, subscriptions or channel settings.

Access tokens issued by Google are stored encrypted. If you connect a channel with a stream key instead, the key is stored encrypted as well.

Uploaded videos, thumbnail images and stream branding texts. After a video is prepared for streaming, the original file is deleted and only the prepared copy is kept.

If you give a link to a video, the service downloads the file from that address to the server on your behalf; the link itself is not stored after the download, and only the host name is written to the event log.

The event log of your streams: starts, stops, failures and their causes.

Messages you send through the “Idea or problem” field in the dashboard: the text, your email address and the dashboard page it was sent from. The message goes to the operator of the service and is written to the service log.

The web server records the IP address, time and URL of each request. These records are used to protect against abuse and to investigate failures, and are deleted automatically within 14 days.

Only to provide the service: run streams on your schedule, apply your branding, recover the stream after a failure, show statistics in your dashboard, send service emails and answer your requests.

We do not sell data, show ads, build advertising profiles, or use YouTube data for anything other than the features you have turned on.

AutoStream's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google (YouTube) — to perform the actions on your channel that you have consented to.

Hetzner Online GmbH, Germany — the servers that run the service and store the data.

Cloudflare — the domain's DNS and forwarding of emails sent to the support address.

Resend — delivery of service emails: email confirmation, notifications and your messages from the dashboard to the operator of the service.

Payoneer — if you choose to pay by card: to issue the invoice we give Payoneer your email address, name and the amount. Card details are entered on Payoneer's page; we do not see or store them.

Telegram — service notifications to the operator of the service: the email address on a new sign-up, stream and file names on failures, and the text of your messages from the dashboard.

No one else, except where the law expressly requires it.

The website does not use advertising or analytics cookies and does not load third-party trackers.

To keep you signed in between visits, a session token and a user identifier are saved in your browser's storage (localStorage). Signing out removes them.

The Google sign-in page belongs to Google and follows Google's rules.

You can disconnect a channel in your dashboard: the service revokes access with Google and immediately deletes the tokens and everything it received from YouTube for that channel — its name, handle, avatar, subscriber count, broadcast data and broadcast statistics. Deleting the channel from the dashboard does the same.

If you revoke access on Google's page instead, the service detects it the next time it contacts the channel and in any case within a day, and then deletes the same data. While a channel is connected, its details are refreshed from YouTube at least every 30 days.

You can also revoke access without us — on your Google Account permissions page.

To delete your account and all associated data — materials, channels, tokens, statistics and data received from YouTube — email support@autostreamapp.com from the address your account is registered to. We delete it within 7 days and confirm by email. Data disappears from backups automatically within 30 days.

So that the free trial can only be received once, after an account is deleted we keep only one-way fingerprints (hashes) of the email address and the Google account ID. The address cannot be recovered from them; they are used only to check new sign-ups.

The website works over HTTPS only. Access tokens and stream keys are stored encrypted, passwords as a hash. Only the operator of the service has access to the server.

YouTube is a Google service. How Google itself processes data is described in the Google Privacy Policy.

We notify you by email in advance about material changes to this policy. The date of the current version is shown at the bottom of this page.