Privacy Policy

Rauhan’s Toolhub is a personal, single-user set of tools operated by Rauhan Sheikh. Access is restricted to an allowlist of Google accounts; it is not a public service and does not accept general sign-ups.

What this app accesses

When you sign in with Google, the app requests three scopes and no others:

• openid and email— to confirm which account you are, and to check it against the allowlist.
• youtube.readonly— read-only access to your YouTube playlists, so the app can total their runtime. This is what makes private playlists work; a public API key cannot see them.

The access is read-only. The app cannot modify, create or delete anything in your YouTube account.

What is stored

There is no database. After sign-in, your email address and Google refresh token are encrypted (AES-256-GCM) and placed in an httpOnly cookie in your own browser. The server keeps no copy.

Playlist data is fetched from YouTube when you ask for it, used to compute the result on screen, and then discarded. It is never written to disk.

Files you download with the downloader tool are saved to the server’s own disk, which only the operator can reach.

What is not done

• No analytics, tracking pixels, or advertising.
• No sharing, selling or transfer of data to third parties.
• No profiling, and no automated decisions about you.
• No email is sent to you by this app.

Logs

The web server records ordinary access logs — timestamp, IP address, requested path, response status — as any web server does. These are used for debugging and are not linked to your Google account.

Removing access

Signing out clears the cookie, which is the only place your token is held. To revoke the app’s access to your Google account entirely, visit myaccount.google.com/permissions and remove it. That takes effect immediately and independently of this app.

Contact

Questions about this policy: rauhan1998@gmail.com.