Account information you provide: your handle, display name, and — if you sign up with one — your email address. If you sign in with Google, we receive your basic Google profile (name, email, and account id) to create and link your account. Passwords are never stored in readable form; we keep only a salted scrypt hash.
Content you create: comments, messages and group chats, club posts and fan-art links, bounties, playlists, timestamp reactions and notes, and your profile customization (theme, backdrop, avatar).
Activity that powers features: your watch history (private to you, capped at the most recent 50 videos, clearable any time), achievement counters (hours watched, categories explored, parties hosted and joined, reactions left), subscriptions, friends, and your block list.
Presence: while you're online, we keep a short-lived record (it expires within about a minute of disconnecting) of whether you're online and — only if you've left "Share what I'm watching" on — which video you're watching, so friends can join you.
To operate YouToo: sign you in, show your content to the people you share it with, sync watch parties, power achievements and recommendations, keep the service secure, respond to reports and feedback, and comply with the law. We don't sell your personal information and we don't show ads.
We use one essential session cookie to keep you signed in (httpOnly, so scripts can't read it). We don't use advertising or tracking cookies. Embedded videos are served by YouTube, which may set its own cookies when a video loads — those are governed by Google's policies.
We share data with the providers that run YouToo's infrastructure (database, email delivery, hosting) under appropriate safeguards, and when required by law. Video content and search results come from the YouTube Data API; watching an embedded video connects your browser to YouTube.
You control what's visible: turn "Share what I'm watching" off in Customize, block users to stop them contacting you, edit or delete anything you've posted, and clear your watch history from your profile. Deleting your account removes your profile, your videos, your bounties, and your club posts and memberships.
Depending on where you live, you may also have legal rights to access, correct, export, or delete your personal data — contact us through the feedback form to exercise them.
We keep your data while your account is active or as needed to provide the service, then delete or anonymize it. Live chats (watch parties, club hangouts) are never stored at all — they exist only while you're in the room. We protect data in transit with HTTPS and apply standard hardening, but no system is perfectly secure.
Questions about privacy? Reach us through the in-product feedback form.
This policy is written in plain language for the YouToo beta. If you operate this service commercially or in regulated jurisdictions (GDPR/CCPA), have counsel review it.