Privacy Policy
Last updated
This policy explains what YTMark collects, why, and what you can do about it. It covers both the website and the browser extension, for Chrome, Edge and Firefox.
Who is responsible
Tomas Rimkus IV Nr. 1194686, Viržių g. 15B-1, Lindiniškių k. LT-14181, Vilniaus r. Lithuania is the data controller for the personal data described here. For any privacy question, or to exercise the rights listed below, contact info@ytmark.com.
What we collect
Only what the product needs to work, and a short record of which features are used. There is no advertising, no tracking pixels, no cross-site tracking, and nothing is sold or shared for marketing.
Account
- Email address — identifies your account and is how we contact you about the service.
- Password — if you sign up with email, handled by our authentication provider and stored only as a salted hash. We never see or store your password.
- Google sign-in — if you choose “Continue with Google”, Google shares your Google account ID, name, email address and profile picture with us. The account ID and email address identify your account; our authentication provider stores the name and picture with it, and we do not use them for anything else. We never receive your Google password and get no access to anything else in your Google account.
Your bookmarks
- Video details — the YouTube video ID, title, channel name and duration of videos you bookmark.
- Timestamps and notes — the position you saved and any note you write (up to 500 characters).
- Folders — the names you give your folders, and which folder each bookmark or clip is in.
- Frame thumbnails — when you save a bookmark, the extension captures a still image of the current video frame in your browser and uploads it to a private storage bucket so your library is recognisable. Only you can read it, via short-lived signed links. If the video is protected, no image is captured and the bookmark is saved without one.
- Shared clips — sharing a clip creates a link. Anyone who has it can watch the clip and see its note, its time range and the YouTube video's title and channel, without an account. Your email address, your other bookmarks and your frame thumbnails are never shown, nothing lists shared clips, and turning sharing off stops the link working. Each shared clip keeps a view count; so that reloads don't count twice, the viewer's browser remembers in local storage, for a day, that it has seen that clip. This is not an identifier and is never sent to us.
If you remove the extension
Your browser opens a page that asks why. If you answer, we keep the reason you pick, anything you write, and the extension's version. If this browser is still signed in to your account on this website, the answer is linked to your account, and the page tells you so before you send it; otherwise it carries no account at all. Not answering sends nothing.
Billing
- Subscription state — a payment-provider customer reference, your plan status and the date the current period ends.
- No card details. Card numbers are entered on our payment provider's own checkout and never reach our servers.
Technical
Our hosting and database providers keep standard server logs (IP address, timestamp, request path) for security and troubleshooting. We do not build profiles from them.
This website uses Vercel Web Analytics to count page views. It sets no cookies and stores no identifier in your browser: each visit is attributed to a hash of the request that is discarded after 24 hours, so visits cannot be linked to you or to each other across days. We see aggregate counts by page, country and browser, never individual visitors.
Our servers send a short record to Mixpanel, our product analytics provider, which stores it in the EU, when an account is created, a bookmark or clip is saved or deleted, a folder is created, a clip is shared, a shared clip is viewed, a free account uses up its free videos, checkout is opened, a subscription starts, or someone who removed the extension says why. A record holds:
- your account's random ID. For a view of a shared clip that is the viewer's, and only if they are signed in; for the reason the extension was removed, it is there only if the answer was linked to your account. Otherwise the record carries no ID at all;
- the time;
- a few facts about the action: whether you signed up with email or Google; whether it was a bookmark or a clip, and the clip's length; whether it was saved from a shared link; whether it was saved into a folder (never which one, or its name); whether a deleted clip had been shared; whether you are on the free or paid plan; how many videos the free plan allows, when you reach that limit; whether the subscription you open checkout for or start is monthly or yearly; and the reason picked for removing the extension, with its version. What you write in that answer is never sent.
It never includes your email address, the video, your notes or your IP address, and nothing is stored in your browser for it. We use these records to see which features are used, so we know what to improve.
Clips, in your library and on shared links, play in YouTube's embedded player, loaded in its privacy-enhanced mode. Once a clip plays, YouTube may set its own cookies; Google's privacy policy covers those. If you switch captions on or off, your browser remembers that choice in its local storage; it is never sent to us.
What the extension can access, and what it does with it
Your browser shows a permission prompt when you install the extension. Concretely, it asks for:
| Permission | Why |
|---|---|
| Access to www.youtube.com | To add the bookmark and clip buttons and progress-bar markers to the player, read the video title, channel and current time, capture the frame thumbnail, and repeat a clip you play from the panel. It runs only on YouTube watch pages and reads nothing else. When you click the extension's icon, it checks whether the tab is a YouTube video, to open the panel there rather than your library. |
| Access to this website | So that signing in here also signs you in inside YouTube, and signing out here signs you out there, and so the welcome page can show whether you have pinned the extension's icon. It reads nothing from the page other than that handshake. |
| Scripting | Chrome and Edge only add an extension to pages opened after it is installed or updated. This adds it to YouTube and YTMark tabs you already had open, so they work without a reload (Firefox does that part itself). It runs only the extension's own code, and only on those two sites. |
| Identity | To open Google's sign-in window when you choose “Continue with Google”. It gives the extension nothing from your Google account beyond that sign-in. |
| Storage | To keep your login session on your own device so you stay signed in, and to remember up to three small things there: whether you have seen the tip shown on your first video, which folder you picked for new bookmarks, and, in Chrome and Edge, when it last asked for an update. |
Firefox also asks you to agree to the kinds of data the extension sends us, in its own words: authentication information and personally identifying information (your email address and password when you sign in), browsing activity (the ID of the YouTube video you are on, which the extension looks up while you are signed in to show what you saved from it) and website content (a saved video's title and channel, and the frame thumbnails). These are the items described above. The lookups aren't kept, beyond the standard server logs mentioned earlier.
The extension does not record your browsing history, the videos you watch without bookmarking, or anything on any other website. It contains no remote code: all of its logic ships in the package that each browser's extension store reviews.
Our use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Why we are allowed to process it
- To perform our contract with you — running your account, storing your bookmarks, taking payment for a subscription.
- Legitimate interests — keeping the service secure, preventing abuse, fixing faults, and understanding which features are used so we can improve them.
- Legal obligation — retaining invoices and tax records for the period the law requires.
Who else processes it
We use a small number of providers, each acting on our instructions under a data processing agreement:
- Supabase — database, authentication and file storage for your account, bookmarks and thumbnails.
- Stripe — subscription payments, checkout and the billing portal.
- Vercel — serves this website and provides the page-view analytics described above.
- Mixpanel — product analytics: the usage records described above, stored in the EU.
Where a provider processes data outside the EEA, that transfer relies on the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
- Bookmarks — until you delete them. Deleting a bookmark also deletes its thumbnail, and deleting a video's last bookmark removes that video from your library automatically.
- Folders — until you delete them. Deleting a folder deletes the bookmarks and clips in it only if you choose that; otherwise they stay in your library, in no folder.
- Account data — until you ask us to delete your account, after which your profile, folders, videos, bookmarks and thumbnails are removed.
- Usage records — kept in Mixpanel for as long as they are useful for improving the service. Deleting your account does not remove them automatically; ask and we will delete them.
- Answers about removing the extension — kept for as long as they help us improve it; ask and we will delete yours. Deleting your account keeps the answer but removes the link to you.
- Billing records — retained for as long as tax and accounting law requires, even after account deletion.
How it is protected
- Every database table enforces row-level security, so one account cannot read another. The one exception is a clip you choose to share, and only through its link.
- Thumbnails live in a private bucket and are served only through short-lived signed links.
- All traffic is encrypted in transit.
- The extension stores your session on your own device using the browser's extension storage. As with any locally stored credential, someone with access to your unlocked computer profile could read it.
Your rights
Under the GDPR you can ask us to:
- give you a copy of your data, or export it in a portable format;
- correct anything inaccurate;
- delete your account and its contents;
- restrict or object to certain processing.
Write to info@ytmark.com and we will respond within one month. If you think we have handled your data badly, you may complain to your national data protection authority.
Children
The service is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has an account, contact us and we will remove it.
Changes
If this policy changes materially we will update the date at the top and, where the change affects you, tell you by email before it takes effect.
Contact
Tomas Rimkus IV Nr. 1194686 — info@ytmark.com. See also our Terms of Service.