Privacy and data
Privacy
Status: Operational draft. Legal review is required before external submission or production publication.
Personal-library public enablement remains disabled pending issue #264 approval evidence. This page does not enable a YouTube feature.
Last updated: 11 August 2026.
Data Favera uses
Favera uses account and session information to sign you in and keep your data private. When you connect YouTube, Favera stores the connection state and encrypted authorization credentials on the server. It stores normalized channel identifiers and source dates needed to build your private subscription library. Credentials are never shown to users and are excluded from application logs, events, queues, and worker jobs. Raw provider responses and page tokens are validated, normalized, and discarded.
Favera also stores the Favera relationships and organization you create, plus limited security and operational evidence needed to run and protect the service.
YouTube connection
YouTube access is read-only. With your separate choices, Favera may read subscriptions, user-created playlists and playlist items, uploads including private or unlisted inventory, Liked Videos, and your authenticated Channel details. Favera separately retrieves permitted public Channel and Video information from official YouTube APIs. It does not use the connection to subscribe, like, comment, upload, or change your YouTube account.
Favera does not acquire Watch History, Watch Later, playback progress, captions, transcripts, video, or audio. Raw provider responses, provider error bodies, and page tokens are not retained.
Google Takeout imports
A supported Takeout ZIP or subscriptions CSV is previewed in your browser. Favera does not upload or keep the raw file. When you confirm an import, Favera receives bounded normalized channel data and source information. That import remains private, is kept separate from YouTube API data, and is not treated as current public channel metadata.
Retention, disconnect, and deletion
- YouTube API data is refreshed within each 30-day period or deleted when it expires. Favera targets refresh by day 25.
- Disconnecting YouTube asks Google to revoke access immediately. Data held only under that consent is deleted as soon as possible and within 7 calendar days.
- If Google revokes access outside Favera, related API data is deleted after detection as soon as possible and within 30 days.
- Applicable user data is deleted as soon as possible and within 7 calendar days after an account or data deletion request.
Deletion is source-specific. Disconnecting YouTube does not delete an independent Takeout import or unrelated Favera relationships. Expired YouTube titles, descriptions, thumbnails, statistics, and subscription facts are not kept as a historical copy.
Your controls
Signed-in users can review or disconnect a YouTube connection in YouTube connection settings. To request account or data deletion, or ask a privacy question, email support@favera.io.
Do not email passwords, one-time codes, access tokens, or private keys.