Privacy Policy

1. Introduction

Welcome to YouTube Thumbnail Downloader ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we handle your information. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you use our YouTube thumbnail extraction and editing service.

Our service operates entirely within your web browser as a client-side application. This means that most of your data processing happens locally on your device, and we have designed our service with privacy-by-design principles to minimize data collection and maximize user control.

By using our service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide Directly

YouTube URLs: When you paste a YouTube video URL into our service, this URL is processed locally in your browser to extract the video ID and generate thumbnail URLs. We do not store these URLs on our servers.

Contact Information: If you contact us through our contact form or email, we may collect your name, email address, and any message content you provide. This information is used solely to respond to your inquiry.

2.2 Automatically Collected Information

Usage Analytics: We may collect anonymous usage statistics through web analytics services to understand how our service is used and to improve user experience. This may include:

• Pages visited and time spent on our service
• Browser type and version
• Operating system information
• Screen resolution and device type
• General geographic location (country/region level)
• Referral sources (how you found our service)

Technical Information: Our web server automatically collects certain technical information including IP addresses, browser user agents, and access timestamps in standard web server logs. This information is used for security monitoring and service optimization.

2.3 Information We Do NOT Collect

We want to be clear about what we do NOT collect:

• We do not store the actual thumbnail images you download
• We do not track which specific YouTube videos you process
• We do not collect personal information without your explicit consent
• We do not use cookies for tracking purposes (only essential functionality)
• We do not collect sensitive personal information such as financial data, health information, or biometric data

3. How We Use Your Information

3.1 Service Provision

The primary use of any information we collect is to provide and improve our thumbnail extraction service. Specifically:

YouTube URL Processing: URLs you provide are processed entirely within your browser to extract video IDs and generate thumbnail download links. This processing happens locally and the URLs are not transmitted to our servers.

Video Title Extraction: To provide video titles alongside thumbnails, we may use YouTube's oEmbed API through a CORS proxy service. This involves sending the video URL to a third-party proxy service, but we do not store or log these requests.

3.2 Service Improvement

We use aggregated, anonymous usage data to:

• Understand which features are most valuable to users
• Identify and fix technical issues
• Optimize performance and user experience
• Plan new features and improvements

3.3 Communication

If you contact us, we use your contact information to:

• Respond to your questions or support requests
• Provide technical assistance
• Send important service updates (only if you opt-in)

3.4 Legal Compliance

We may use or disclose information as necessary to:

• Comply with applicable laws and regulations
• Respond to legal requests from authorities
• Protect our rights and property
• Ensure user safety and prevent abuse

4. Information Sharing and Disclosure

4.1 Third-Party Services

CORS Proxy Services: For video title extraction, we use third-party CORS proxy services (such as allorigins.win) to bypass browser cross-origin restrictions. These services may temporarily process YouTube URLs but are not under our direct control. We recommend reviewing their privacy policies.

Analytics Services: We may use web analytics services (such as Google Analytics) to understand service usage. These services may collect anonymous usage data according to their own privacy policies.

Content Delivery Networks (CDNs): We use CDNs to deliver static assets (fonts, icons) which may collect basic access logs.

4.2 No Sale of Personal Information

We do not sell, rent, or trade personal information to third parties for commercial purposes. We do not engage in data brokerage activities.

4.3 Legal Requirements

We may disclose information if required by law, such as:

• In response to valid legal process (subpoenas, court orders)
• To comply with regulatory requirements
• To protect against legal liability
• In connection with the investigation of suspected illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will provide notice before personal information is transferred and becomes subject to a different privacy policy.

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction:

Encryption: All data transmission between your browser and our servers is encrypted using industry-standard TLS/SSL protocols.

Access Controls: We limit access to personal information to authorized personnel who need it for legitimate business purposes.

Regular Security Reviews: We regularly review and update our security practices to address emerging threats.

Incident Response: We have procedures in place to detect, respond to, and recover from security incidents.

5.2 Client-Side Processing

A key security feature of our service is that most data processing happens locally in your browser:

• Thumbnail extraction and editing occurs entirely on your device
• No thumbnail images are uploaded to our servers
• Your editing work remains private and local
• You have complete control over what data leaves your device

5.3 Limitations

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to using reasonable measures to protect your data.

6. Your Rights and Choices

6.1 Access and Control

You have several rights regarding your personal information:

Access: You can request information about what personal data we have collected about you.

Correction: You can request that we correct inaccurate personal information.

Deletion: You can request that we delete your personal information, subject to certain legal limitations.

Portability: You can request a copy of your personal information in a structured, machine-readable format.

6.2 Communication Preferences

If you have provided contact information, you can:

• Opt out of non-essential communications
• Update your contact preferences
• Request removal from our contact lists

6.3 Browser Controls

You can control certain data collection through your browser settings:

• Disable JavaScript (though this will prevent the service from working)
• Clear local storage and cookies
• Use private/incognito browsing mode
• Configure privacy settings and extensions

6.4 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

7. International Data Transfers

Our service may be accessed from anywhere in the world. If you are accessing our service from outside the country where our servers are located, please be aware that your information may be transferred to, stored, and processed in a different country.

We take steps to ensure that international transfers of personal information meet applicable legal requirements and provide adequate protection for your data.

For users in the European Economic Area (EEA), we ensure that any international transfers comply with the General Data Protection Regulation (GDPR) through appropriate safeguards such as adequacy decisions or standard contractual clauses.

8. Children's Privacy

Our service is not intended for children under the age of 13 (or the minimum age required by law in your jurisdiction). We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so we can take appropriate action.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Provide notice of significant changes through our website
• For material changes, provide additional notice such as email notification (if we have your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our service after any changes indicates your acceptance of the updated Privacy Policy.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For users in the European Union, you also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.

11. Additional Information for Specific Jurisdictions

11.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

11.2 European Union Residents (GDPR)

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making