YouTube Research Studio

Your channel data

Privacy policy

Updated October 28, 2026

This policy covers YouTube Research Studio, its public website, and its remote channel-connection service. The application uses YouTube API Services to support research and channel performance analysis. The app operator is the person running the desktop application who sends a channel owner a connection invitation.

Information accessed and its purpose

The app uses public YouTube information such as video and channel titles, descriptions, identifiers, and available statistics for research. When you approve a remote connection, it can also access the selected channel's identity and non-revenue YouTube Analytics and Reporting data, such as views, watch time, subscriber changes, traffic sources, and available audience breakdowns.

These reports help the operator understand channel performance and prepare research. Availability depends on YouTube and the permissions granted. This remote connection requests read-only channel and non-monetary analytics permissions. It does not request Gmail access or permission to upload, edit, or delete videos. Separate desktop features that require additional permissions use a separate authorization flow.

Google authorization and local storage

You sign in on Google's website. The app does not receive your Google password. Google issues authorization tokens that allow the desktop application to obtain the approved data and renew access.

The desktop app stores channel identifiers, channel names, permission information, authorization tokens, and connection dates on the operator's computer. Saved research and chats are also stored locally. The current application does not encrypt these local files or its research database; protection depends on the operator's device and account security.

The connection website and cookies

Cloudflare hosts the public website and connection service. During connection, the service temporarily holds invitation records, security values, connection status, and Google's single-use authorization code. Invitations expire after 15 minutes; a claimed approval is removed from the active connection store. Expired records are cleaned up by scheduled processing or later requests.

The service sets a short-lived security cookie to match the browser's Google approval to the invitation. The cookie is removed when the callback completes or expires after 15 minutes. The public pages contain no advertising or visitor-analytics scripts.

Google client secrets and long-lived channel access and refresh tokens are stored by the desktop app, not by this connection service. Cloudflare's infrastructure processing and backups are subject to its own privacy policy; removal from active application storage does not guarantee immediate deletion from infrastructure backups.

Who can receive data

Approving an invitation makes your selected channel's reports available to the app operator who sent it. Google processes authorization and API requests, and Cloudflare processes requests to this website and the connection service.

Private Analytics sharing with an AI provider is off by default. If the operator separately enables “Allow private Analytics in chat,” private reports may be included in requests to the AI provider selected in the desktop app. Chat messages, attachments, and tool results used for an AI conversation can also be sent to that provider. Google approval of a channel connection is not a separate approval of optional AI sharing. Discuss that use with your app operator before enabling it.

The selected provider's terms and retention settings govern data already sent to that provider. Turning the app's sharing setting off prevents the guarded private-analysis features from continuing to use private reports; it does not delete earlier provider copies or exported material.

Retention, removal, and revocation

Saved connections remain on the operator's computer until removed or until the app detects invalid authorization. While the app is running, its retention process expires saved YouTube evidence after 30 days. That is not a blanket deletion of every file: user-written messages, supplied documents, exports, and backups can remain until separately deleted.

You can revoke the application's access through your Google Account's third-party connections. You can also ask the operator to disconnect your channel in the app. Disconnecting removes that channel's local credential record and associated private chats and proposals, and attempts to revoke access with Google.

Disconnecting does not delete videos from YouTube, exported files, backups, or data previously sent to an AI provider. Remote revocation is detected when the application next checks or uses the authorization; the desktop app cannot run cleanup while it is closed.

Contact and deletion requests

For privacy questions or to request removal of channel data held by the app operator, email ernestodelrio04@gmail.com. Include the channel URL and identify the operator or invitation involved. Do not email passwords, authorization codes, or access tokens.

Google's own data practices are described in the Google Privacy Policy. Use of the application's YouTube features is also subject to the YouTube Terms of Service.