tldr.yt

Privacy Policy

At tldr.yt, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and protect the information you provide while using our platform. By accessing or using tldr.yt, you consent to the practices described in this policy.

1. Data Controller

The data controller for this website is:

Sylvester Aswin
Germany
Contact: tldr@sylvesteraswin.com

2. Information We Collect

2.1 Information You Provide

  • Email address (when you create an account)
  • Authentication data
  • YouTube video URLs you submit for summarization

2.2 Information Automatically Collected

  • IP address
  • Browser type and version
  • Device information
  • Usage data (e.g., summaries generated)

3. How We Use Your Data

We process your data for the following purposes:

  • To provide our video summarization service
  • To maintain and improve our service
  • To communicate with you about your account
  • To enforce our usage limits and prevent abuse
  • To comply with legal obligations

4. Legal Basis for Processing

We process your data based on the following legal grounds under GDPR Article 6:

  • Contract performance (Art. 6(1)(b))
  • Legal obligations (Art. 6(1)(c))
  • Legitimate interests (Art. 6(1)(f))
  • Consent (Art. 6(1)(a)) where applicable

6. Data Sharing and Third Parties

We share your data with the following third parties:

  • Supabase - For user authentication and database services
  • Vercel - For hosting and infrastructure
  • OpenAI - For generating video summaries
  • PostHog - For privacy-friendly product analytics

All our service providers are GDPR-compliant and process data within the EU or under adequate safeguards.

PostHog Analytics

We use PostHog for product analytics to improve our service. PostHog is GDPR-compliant and provides:

  • Privacy-first analytics with data hosted in the EU
  • Automatic personal data redaction
  • Data minimization and purpose limitation
  • User opt-out capabilities
  • Configurable data retention periods

The analytics data we collect through PostHog includes:

  • Page views and feature usage
  • Device type and browser information
  • Interaction patterns (anonymized)
  • Performance metrics

7. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

  • Essential cookies for service functionality
  • PostHog analytics cookies for understanding user behavior
  • Authentication cookies for managing user sessions

Analytics Cookies (PostHog)

PostHog uses cookies to provide privacy-friendly analytics. These cookies:

  • Are set only after user consent (where required by law)
  • Can be disabled through your browser settings
  • Do not track personally identifiable information
  • Expire after a maximum of 365 days

You can opt-out of PostHog analytics at any time by:

  • Using your browser's Do Not Track setting
  • Blocking cookies through your browser settings
  • Contacting us to request opt-out

8. Data Retention

We retain your data only for as long as necessary to provide our services and comply with legal obligations. Specifically:

  • Account data: Until account deletion
  • Video summaries: Stored until the video is deleted from the app.
  • Usage logs: 90 days

9. Your Rights

Under the GDPR, you have the following rights:

  • Right to access your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent

To exercise these rights, please contact us attldr@sylvesteraswin.com. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or through our website.

12. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Email: tldr@sylvesteraswin.com

13. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. In Germany, you can contact your state's data protection authority.