Subject Playlists home · Private dashboard

Privacy Policy

Subject Playlists · Effective October 29, 2026

Subject Playlists is a personal video-playlist service operated by Ernie Braganza at playlist.braganza.me. This policy explains how the service handles information you provide and information accessed through Google and YouTube API Services.

The current version saves subject settings, provides a YouTube connection flow, and supports selection previews after authorization. Playlist publication and scheduled generation are not enabled. Descriptions below identify information collected when you use a feature or connect an account; they do not mean that Google has approved the application.

Information we handle

• Subject settings: names, prompts, preferred duration, schedule preferences, pause status, and timestamps. Prompts may reveal your interests; include only information needed to describe what you want to watch.
• Sign-in information: Cloudflare Access verifies your email and supplies a signed identity assertion to restrict the dashboard to its owner.
• YouTube connection information: if you authorize access, the service verifies your YouTube channel and stores its channel ID, title, connection time, and an encrypted offline authorization token. Temporary OAuth state and a proof-key verifier protect connection attempts.
• Operational information: Cloudflare processes connection and security information, such as IP addresses and request metadata, to deliver and protect the service. Application error logs are designed to omit prompts, authorization codes, and tokens.

Purpose and Google permissions

We use subject settings to maintain your viewing preferences and connection information to verify the intended YouTube channel. The planned playlist features will use your instructions to create separate private, dated playlists and retain selection history to avoid reusing videos. They will require further implementation before they run.

The connection requests Google's YouTube account-management permission because Google does not offer a playlist-only write permission. The service's intended use is channel verification and creating and populating its playlists. It does not upload videos, subscribe to channels, post comments, like videos, or delete existing YouTube playlists. It does not collect your Google password.

Subject Playlists' use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is used only for the features disclosed here, not for advertising, sale, credit decisions, or training general-purpose AI models.

Storage, security, and sharing

The service runs on Cloudflare Workers and stores application records in Cloudflare D1. OAuth client credentials and the token-encryption key are stored as Cloudflare Worker secrets. Offline tokens are encrypted before storage, and connections use HTTPS. Dashboard and API access are restricted; this policy is public.

Google receives authorization and YouTube API requests. Cloudflare processes information to host, secure, and operate the service. When you request a selection preview, Cloudflare Workers AI processes your subject prompt and public YouTube video metadata (titles, description excerpts, channels, publication dates, and durations) to suggest relevant videos. Authorization tokens and private account data are not sent to the model. The service uses standard inference without AI Gateway content logging or caching. Cloudflare states that it does not use Workers AI customer content to train models. The service does not use advertising or marketing analytics. We do not sell or rent personal information. Information may also be disclosed when legally required or necessary to investigate abuse or protect the service.

Videos and playlists opened on YouTube are handled by YouTube under the Google Privacy Policy and YouTube Terms of Service. YouTube may use its own cookies, personalization, and advertising when you visit it.

Selection previews use titles and descriptions when transcripts are unavailable; they do not claim to have watched or independently fact-checked videos. Preview metadata and reasons are returned to your browser without being saved in the service database. They remain visible until you close or reload the page. Monthly attempt counts and temporary preview locks contain no video metadata. Google approval is still required before this owner can authorize the connection.

Cookies

Cloudflare uses sign-in and security cookies. Connecting YouTube sets a Secure, HttpOnly, SameSite=Lax cookie for up to ten minutes to bind the authorization attempt to your browser. It is cleared when the callback completes. Subject Playlists does not add advertising cookies.

Retention and deletion

Subject settings are retained until you delete them or request removal. Deleting a subject stops its future generation but retains existing playlist records and selection history. A request to delete all your service data also covers that history and overrides repeat-prevention preferences.

Connection tokens are retained only while needed for the access you authorize, until replaced, revoked, or deleted. OAuth attempts expire after ten minutes; expired records are removed when another connection attempt starts.

To request deletion of data held by this service, email ernie.braganza@gmail.com. The operator will remove the requested service data as soon as possible and within seven calendar days. This is currently an operator-handled process, not an automated dashboard feature. Provider-managed backups may retain residual copies through their normal retention cycle; those copies are not used for active processing.

Deleting service records does not delete playlists or other data held by YouTube. Manage those separately in YouTube.

Revoke Google access

You can revoke Subject Playlists' access through Google Account security permissions. Revocation stops the service from obtaining new authorized Google data. To request prompt removal of stored connection information as well, contact the operator above. Automatic revocation monitoring and retention enforcement must be completed before unattended generation is enabled.

Changes and contact

We will update this page when data practices change and request additional consent before using Google data for a new purpose. This personal service is not intended for children under 13.

For privacy questions, requests, or complaints, contact Ernie Braganza at ernie.braganza@gmail.com.