Privacy Policy

1. Who I am

Naxatar ("I", "me") operates the website at naxatar.com and the associated authenticated services. You can reach me at hello@naxatar.com.

2. What I collect

I collect the minimum information needed to run the service:

• Sign-in info via Google. When you sign in with Google I receive your email address, name, profile picture URL, and a stable Google account identifier. I do not receive your Google password.
• Account data you create. Any content you save while signed in (for example, notes) is stored against your account.
• Contact form submissions. If you message me through the contact form on the home page, I store the name, email, and message you provide.
• Operational logs. My backend records standard server logs (timestamps, IP addresses, request paths) for security and debugging. These are kept for a limited period and then deleted automatically.

I do not use advertising trackers or third-party analytics SDKs on authenticated pages.

3. How I use it

• Identify your account and keep you signed in across page reloads.
• Display your name and profile picture inside the app so you know which account you're using.
• Store and retrieve content you create in the service.
• Respond to messages you send via the contact form.
• Investigate abuse, troubleshoot bugs, and meet legal obligations.

I do not sell your personal information, and I do not use it to train AI models.

4. Who processes it

I rely on a small set of vendors to operate the service:

• Google is my identity provider for "Sign in with Google". This is subject to Google's Privacy Policy.
• My hosting provider runs the managed database and authentication service behind my backend.

My data lives in that provider's infrastructure, and I have not handed personal data to anyone else.

5. Cookies and local storage

After you sign in, I store a session token in your browser's localStorage so you stay signed in across page reloads. The token is scoped to naxatar.com and is cleared when you sign out. I do not use third-party cookies.

6. Your rights

You can sign out of the service at any time. You can request a copy of the data associated with your account, or ask me to delete your account and the data tied to it, by emailing hello@naxatar.com from the address associated with your account. I will action deletion requests within 30 days unless I have a legal obligation to retain the data.

Depending on where you live, you may also have additional rights under the GDPR, the UK GDPR, the CCPA, or similar laws. Contact me at the address above to exercise them.

7. Children

The service is not directed at children under 13 (or 16 in the EU/UK). I do not knowingly collect personal information from children. If you believe a child has signed up, please contact me and I will delete the account.

8. Browser extensions

This policy also covers the browser extensions I publish, including Playlist Wrangler. Extensions work differently from my website. Most of what they do happens on your own device, so here is how they handle your data.

• Stored only on your device. The playlists, videos, and details the extension indexes, including titles, channels, durations, categories, descriptions, stats, and any tags you add, are saved in your browser's local storage. I never receive a copy and cannot see this content.
• Your YouTube session. To open your own private or unlisted playlists and add videos to a playlist for you, the extension reads your YouTube session cookie on your device only. It uses that cookie to authorize requests it sends straight to YouTube, and the cookie value never reaches me or any third party.
• Anonymous usage. To understand which features people use, the extension sends me a small, content-free event when you do something, for example playlist_indexed or search. Each event includes a rough size range such as "100 to 499" rather than an exact count, the extension version, and a randomly generated install id that is not linked to your name, email, or Google account. I never receive video titles, channel names, descriptions, your tags, or any of your playlist contents.
• Feedback you send. If you submit the feedback form inside the extension, I receive your message, the feedback type, the extension version, and that anonymous install id. I only receive your email address if you choose to enter one so I can reply. Leave it blank and I have no way to contact or identify you.
• What happens when you uninstall. The playlists, settings, and tags the extension keeps on your device live in your browser's local storage, so your browser clears all of it automatically when you remove the extension. Anything I already received, meaning the anonymous usage events and any feedback you chose to send, stays in my records, because none of it is linked to your identity. If you entered your email with a feedback message and want it removed, email me and I will delete it.

I do not sell any of this data, use it for advertising, or use it to track you across the web. The extension only works on YouTube and inside its own window.

9. Changes

I may update this policy from time to time. Material changes will be communicated via the service or by updating the "Last updated" date above.

10. Contact

Questions or concerns? Email hello@naxatar.com.