Privacy Policy

This policy explains how the private operational integrations for The Dread Index access and use Google user data. These integrations are not a public app or public service.

1. Controller and contact

2. Google data accessed

Only after explicit authorization by the operator, the integrations may access the following data categories:

• YouTube channel analytics: aggregated performance data for the operator-controlled channel, such as views, watch time, impressions, click-through rate, audience-retention metrics, subscriber changes, and video-level performance.
• YouTube channel metadata: limited read-only metadata needed to label analytics rows, such as video titles and publication dates.
• Google Sheets: the fixed operational KPI spreadsheet used to store and review the above analytics snapshots.
• Google Calendar: only calendar events covered by the explicitly granted calendar permission, where the calendar assistant is enabled.

3. Purpose and use

Google data is used solely to operate editorial planning, performance review, and personal calendar-assistance workflows for The Dread Index. Google user data is not sold, rented, used for advertising, used to build advertising audiences, or shared with unrelated third parties.

4. Data minimisation and access controls

• Each workflow is bound to a specific operational resource, such as one channel or one spreadsheet.
• Automated assistants do not receive Google account passwords, OAuth client secrets, refresh tokens, or unrestricted Google Drive access.
• Operational access is limited to approved accounts and narrowly defined read or write functions.
• Public visitors cannot create accounts or authorize themselves through this website.

5. Storage and retention

Analytics snapshots and operational spreadsheet records are retained only for as long as they are needed for channel planning, historical performance comparison, accounting, security, or legal obligations. Access tokens are stored only in protected server-side credential storage and are not exposed to assistants or website visitors. Data that is no longer required is deleted or anonymised where technically and legally appropriate.

6. Sharing and processors

Google data is processed through Google APIs and stored in the operator-controlled Google account and protected server infrastructure. Data is not disclosed to unrelated third parties. Technical providers may process data only where necessary to host or secure the infrastructure.

7. Cookies and tracking

This static website does not use analytics, advertising pixels, social-media tracking, account registration, or non-essential cookies.

8. Your rights and revocation

You may revoke an OAuth authorization at any time through your Google Account security settings. For access, correction, deletion, restriction, objection, or other privacy requests, contact the controller at the address above. Where applicable, you may also lodge a complaint with a competent data-protection supervisory authority.

9. Changes

This policy may be updated when an integration or applicable legal requirement changes. The date of the latest revision appears below.