← Back to Pimp My Channel

Privacy Policy

Last updated: 8 September 2026

Pimp My Channel ("we", "the service") is an AI tool that helps YouTube creators improve their video titles, descriptions, tags and thumbnails. This policy explains exactly what data we handle, why, and what control you have over it. It applies to pimpmychannel.net.

Information we collect

When you sign in with Google

We receive and store your email address. Your Google display name and profile picture are shown in your browser but are not stored on our servers.

When you connect your YouTube channel

We store an access token and refresh token issued by Google, along with your channel ID, channel name and channel thumbnail. These tokens are what allow the service to read your videos and, only when you explicitly click to publish, update them.

Billing

We store your subscription status, plan, remaining credits, and an identifier issued by our payment provider. We never see or store your card details — payments are handled entirely by Stripe and PayPal.

Usage analytics

We record page views and basic actions (such as signing up or generating a thumbnail) to understand how the service is used. We do not store raw IP addresses. Visitors are counted using a salted hash that changes daily, which lets us count visits without being able to identify or track anyone over time. When an owner is signed in, the dashboard labels that authenticated activity separately from external traffic; this label does not use or store an IP address.

Cookies and storage on your device

We store a small amount of information on your own device — in cookies and in your browser's local and session storage — so that signing in works and so the site remembers you between pages. We do not use advertising cookies, and we do not sell or share any of it.

One third party does store something on your device: the free-trial form is protected against bots by Cloudflare Turnstile, which sets its own cookie to tell a real visitor from automated abuse. It is only loaded for anonymous visitors, and Cloudflare's handling of it is covered by their own privacy policy.

  • Sign-in cookie. Set when you sign in, so you stay signed in. It expires after 30 days and cannot be read by JavaScript on the page.
  • Sign-in security cookie. A short-lived value used only during the Google sign-in redirect, to confirm the request came from you. It expires after 10 minutes.
  • Local storage. Your email address and profile picture, kept so the site can show you as signed in without asking again on every page. Your session token is not kept here — it is held in the sign-in cookie described above, which JavaScript on the page cannot read. Cleared when you sign out.
  • Session storage. If you arrived from a link carrying campaign tags, we keep those tags for the current browser tab only, so we can tell which campaign the visit came from. Discarded when you close the tab.

You can clear any of this at any time through your browser's settings, and signing out removes the sign-in cookie and the values in local storage. Clearing them will sign you out but will not delete your account.

How we use YouTube data

The service uses YouTube API Services. When you connect your channel, we request the youtube.force-ssl permission. We use it to:

  • Read your videos — titles, descriptions, tags, thumbnails, view and like counts — so the AI has something to improve on.
  • Read your channel's name, artwork and subscriber count for the channel makeover feature.
  • Update a video's title, description, tags and thumbnail — only for videos you specifically select, and only when you click to publish.
  • Keep a copy of your previous thumbnail and channel details so a change can be rolled back.

We never post new videos, never delete anything, and never change a video you did not pick.

Limited use of Google user data

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Specifically, we do not:

  • Sell Google user data, ever.
  • Use it for advertising, or transfer it to advertising or data brokers.
  • Allow humans to read it, except where you have explicitly asked us to, where it is necessary for security or to comply with the law, or where the data has been aggregated and anonymised.
  • Use it for any purpose other than providing the features described above.

How we protect your data

The access and refresh tokens that let us read and update your YouTube channel are the most sensitive information we hold, so they get particular protection:

  • Encrypted in transit. Every connection to pimpmychannel.net, and every call this service makes to Google's and YouTube's APIs, is HTTPS/TLS only. Tokens are never sent or received unencrypted.
  • Not publicly accessible. Tokens live in a private database on our hosting provider (Railway), reachable only by this application's own backend — there is no public endpoint, admin panel, or API response that exposes a stored token. Only the server process itself reads a token, and only to make an API call on your behalf.
  • Never sent to a third party. Your tokens are not included in what we send to Google Gemini, OpenAI, Stripe or PayPal — see the sections below for exactly what each of those receives.
  • Deleted on disconnect. Disconnecting YouTube from the account menu, or revoking access at myaccount.google.com/permissions, removes the stored tokens for that channel immediately.
  • Session tokens are signed and expire. The token that authenticates you to pimpmychannel.net itself (separate from your Google/YouTube tokens) is a signed, time-limited credential, not a reusable password.

AI processing

To generate titles, descriptions, tags and images, we send your video's title, description, tags and published thumbnail to Google's Gemini API. For videos on a channel you have connected, we also send the caption text — the words spoken in your own video — because that is what the new title and description are written from. We never read captions for a video you do not own. If Gemini is unavailable we may fall back to OpenAI for text.

Some background artwork is generated by Pollinations.ai. It receives only a text prompt describing the image, which includes your video's title. It does not receive your video, your channel, or anything else about you.

None of these providers receive your email address, your tokens, or your billing details.

Who we share data with

We do not sell your data. We share only what is necessary with:

  • Google / YouTube — to read and update your channel at your request.
  • Google Gemini and OpenAI — to generate content, as described above.
  • Pollinations.ai — to generate background artwork from a text prompt containing your video's title.
  • Stripe and PayPal — to take payments. They receive your email and payment details directly.
  • Railway — our hosting provider, which stores the database on our behalf.

Your control and how to delete your data

  • Disconnect YouTube at any time from the account menu in the app. This immediately deletes the stored tokens for your channel.
  • Revoke access directly with Google at myaccount.google.com/permissions. This works whether or not you still have an account with us.
  • Request full deletion of your account and all associated data by emailing us at the address below. We will action it within 30 days.

We keep your account data while your account is active. Generated images are kept so you can re-download them and so a change can be rolled back.

Also worth reading

Contact

Questions, or want your data deleted? Email support@pimpmychannel.net.

Pimp My Channel · Terms of Service