Last Updated: October 28, 2025
Your privacy is our priority. This policy explains exactly what data we collect, how we use it, and your rights.
Purpose: Track downloads, prevent abuse, and maintain security
Duration: Cleared automatically when browser tab closes or after 1 hour
We never store your Gmail or Google account email
Your name or profile information is not stored
Your YouTube identity is not saved
Tokens are temporary and never saved to database
We don't request or store long-term access tokens
We NEVER see or handle your Google password
| Data | Storage Location | Duration | Purpose |
|---|---|---|---|
| Access Token | JavaScript variable | Page session only | Check YouTube subscription |
| File ID | sessionStorage | Until browser tab closed | Track which file to verify |
| Unlock Token | sessionStorage | 1 hour | Prove subscription verified |
Note: sessionStorage = Automatically cleared when browser tab closes. NOT permanent storage.
// From download_free_file.php (lines 134-143)
INSERT INTO download_logs (
file_id, // Which file was downloaded
file_name, // File name
ip_address, // User's IP address
user_agent, // Browser information
download_time, // Timestamp of download
is_free // Whether file was free (1) or not (0)
)We use temporary access tokens ONLY to check if you are subscribed to our YouTube channel. Nothing else.
Download logs help us understand which files are popular and prevent abuse (e.g., excessive downloads).
IP addresses and timestamps help identify and block malicious activity or automated bots.
We maintain logs to comply with legal requirements and respond to valid legal requests.
Our website redirects you to Google's official servers.
You log in at accounts.google.com - We NEVER see your password.
Google asks: "Allow this app to check YouTube subscriptions?" - You decide.
Google redirects you back to our site with a one-time code (expires in seconds).
Our server securely exchanges the code for a temporary access token (in memory only).
We ask YouTube API: "Is this user subscribed?" - Response: Yes or No.
Access token is deleted. If subscribed, you get a temporary unlock token for download.
You can revoke this permission anytime at: https://myaccount.google.com/permissions
All data transmitted between your browser and our server is encrypted using TLS/SSL (HTTPS protocol).
Access tokens are stored only in browser memory and automatically deleted when page closes or refreshes.
All unlock tokens are validated on our server before allowing downloads (format, expiration, file match).
OAuth 2.0 is used by Google, Facebook, Twitter, GitHub, and all major platforms for secure authentication.
We never see, handle, or store your Google password. Login happens entirely on Google's servers.
We only request permission to check YouTube subscriptions. No email, profile, or other data access.
You can revoke our app's permission to check YouTube subscriptions at any time.
Manage Google Permissions →You can request a copy of what download logs we have associated with your IP address.
You can request deletion of download logs. We'll comply unless legally required to retain them.
You have the right to know what data we collect and how we use it (explained in this policy).
You can object to data processing. However, this may prevent you from using the download verification service.
Used for:
Privacy Policy: https://policies.google.com/privacy
Terms of Service: https://policies.google.com/terms
✅ We DO NOT use analytics, advertising, or tracking services.
We retain download logs for:
If you have any questions about this Privacy Policy or how we handle your data, please contact us.
We're committed to protecting your privacy and being transparent about our practices.