Privacy

Owner review required. This describes the current implementation; a finalized privacy notice is still needed.

What the app uses

Breakfeed stores your email, a password hash if you set a password, expiring login-link hashes, sessions, and rate-limit records. Cookies keep you signed in and protect form submissions.

Connecting YouTube uses Auth0 and Google. The server stores the connected account identifier and provider tokens, including a refresh token when available, to read your liked videos. The browser receives video metadata and loads YouTube’s embedded player.

Disconnecting in Account removes Breakfeed’s saved provider tokens. To revoke Google’s authorization grant, remove access through your Google account’s third-party connections.

Details still needed

The owner must provide the operator identity, hosting and email-provider details, retention and deletion policy, privacy-request contact, applicable rights, and effective date. Account deletion and a public privacy contact are not available yet.

See Google’s Privacy Policy for Google and YouTube services.