Privacy Policy
This policy covers the private, owner-operated production automation used for the Hearthward Stories YouTube channel. The public website does not use analytics, advertising cookies, account registration or visitor tracking.
Who operates this service
Hearthward Stories is an independent, owner-operated YouTube channel. Privacy enquiries can be directed to the owner through the official Hearthward Stories YouTube channel.
Google user data accessed
The automation connects only to the channel owner’s authorised Google account. Depending on the task, it may access:
- the owner’s YouTube channel identity and channel metadata;
- videos, titles, descriptions, thumbnails, captions, visibility and scheduling settings managed by that account; and
- read-only YouTube Analytics reports for the owner’s channel, including aggregated performance metrics.
How the data is used
Google user data is used only to operate the owner’s channel: to verify the correct channel identity, upload and manage original videos and captions, schedule approved releases, verify publication status, and prepare internal performance reports. It is not used for advertising, credit decisions, surveillance or profiling people.
Storage and security
OAuth client credentials and refresh tokens are stored in Google Secret Manager. Operational records such as video IDs, approval hashes, publication states and aggregated analytics may be stored in the dedicated Hearthward Stories Google Cloud project. Access is restricted through Google Cloud identity and access controls. Secrets are not placed in public source code or channel metadata.
Sharing
Google user data is not sold. It is not shared with advertisers, data brokers or unrelated third parties. It is processed by Google services—including YouTube and Google Cloud—only as needed to provide the authorised production workflow, or when disclosure is required by law.
Retention and deletion
Credentials are retained only while the owner keeps the automation connected. Operational records are retained for channel continuity, rights records, approvals and auditability. The owner can revoke access at any time through Google Account security settings. Privacy or deletion requests can be directed through the contact route above; applicable credentials and personal data will be deleted or disabled unless retention is required for security, legal or rights-record purposes.
Google API Services User Data Policy
The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Children
The channel and automation are intended for adults and are not directed to children. The website does not knowingly collect personal information from children.
Changes
This policy may be updated when the production workflow or legal requirements change. Material changes will be reflected on this page with a revised effective date.