Privacy Policy

This policy explains what NicheGoblin collects, why, and what we do with it. The short version: we collect your email address so you can sign in, and a record of your subscription so we know what to show you. That is almost all of it.

What we collect

• Your email address. Needed to create your account and send sign-in links. We never ask for a password, so we never store one.
• Your subscription record. Which tier you are on, its status, and when the current period ends. Written by our payment provider when you subscribe or change plan.
• Public YouTube data. Channel titles, video titles, publish dates, view counts and thumbnails, from the public YouTube Data API. This is not personal data about you — it is about publicly published videos, and it is collected whether or not anyone subscribes.

What we do not collect

• Payment card details. These go directly to our payment provider; we never see or store them.
• Passwords. Sign-in is by emailed link.
• Access to your YouTube account. We only read data that is public.
• Advertising or cross-site tracking cookies.

Cookies

We set one kind of cookie: the session cookie that keeps you signed in after you click a sign-in link. It is required for the service to function and is not used for advertising or tracking across sites.

Who we share it with

We do not sell your data. We share it only with the providers that run the service:

• Supabase — database and authentication
• Vercel — application hosting
• Lemon Squeezy — payment processing and merchant of record
• Resend — sending sign-in emails

Each processes data on our behalf under its own terms. We share your data with nobody else.

How long we keep it

Your account and subscription record are kept while your account exists. Ask us to delete your account and we will remove both within 30 days, except where we must keep a transaction record for tax or accounting purposes. Public YouTube data is not linked to you and is retained as part of the dataset.

Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email support@nichegoblin.com and we will respond within 30 days. If you are in the UK or EU, you also have the right to complain to your data protection authority.

Security

Data is encrypted in transit and at rest by our providers. Access to subscriber data is enforced in the database itself rather than only in application code, so a bug in the app cannot expose one subscriber's data to another.

Changes

We will update this policy if what we collect changes, and will notify subscribers by email of material changes.

Contact

Privacy questions or requests: support@nichegoblin.com