Privacy Policy

1. Who we are

Naxatar ("we", "us") operates the website at naxatar.com and the associated authenticated services. You can reach us at [email protected].

2. What we collect

We collect the minimum information needed to run the service:

• Sign-in info via Google. When you sign in with Google we receive your email address, name, profile picture URL, and a stable Google account identifier. We do not receive your Google password.
• Account data you create. Any content you save while signed in (for example, notes) is stored against your account.
• Contact form submissions. If you message us through the contact form on the home page, we store the name, email, and message you provide.
• Operational logs. Our backend records standard server logs (timestamps, IP addresses, request paths) for security and debugging. These are kept for a limited period and then deleted automatically.

We do not use advertising trackers or third-party analytics SDKs on authenticated pages.

3. How we use it

• Identify your account and keep you signed in across page reloads.
• Display your name and profile picture inside the app so you know which account you're using.
• Store and retrieve content you create in the service.
• Respond to messages you send via the contact form.
• Investigate abuse, troubleshoot bugs, and meet legal obligations.

We do not sell your personal information, and we do not use it to train AI models.

4. Who processes it

We rely on a small set of vendors to operate the service:

• Google is our identity provider for "Sign in with Google". This is subject to Google's Privacy Policy.
• Our hosting provider runs the managed database and authentication service behind our backend.

Our data lives in that provider's infrastructure, and we have not handed personal data to anyone else.

5. Cookies and local storage

After you sign in, we store a session token in your browser's localStorage so you stay signed in across page reloads. The token is scoped to naxatar.com and is cleared when you sign out. We do not use third-party cookies.

6. Your rights

You can sign out of the service at any time. You can request a copy of the data associated with your account, or ask us to delete your account and the data tied to it, by emailing [email protected] from the address associated with your account. We will action deletion requests within 30 days unless we have a legal obligation to retain the data.

Depending on where you live, you may also have additional rights under the GDPR, the UK GDPR, the CCPA, or similar laws. Contact us at the address above to exercise them.

7. Children

The service is not directed at children under 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has signed up, please contact us and we will delete the account.

8. Browser extensions

This policy also covers the browser extensions we publish, including Playlist Wrangler. Extensions work differently from our website. Most of what they do happens on your own device, so here is how they handle your data.

• Stored only on your device. The playlists, videos, and details the extension indexes, including titles, channels, durations, categories, descriptions, stats, and any tags you add, are saved in your browser's local storage. We never receive a copy and cannot see this content.
• Your YouTube session. To open your own private or unlisted playlists and add videos to a playlist for you, the extension reads your YouTube session cookie on your device only. It uses that cookie to authorize requests it sends straight to YouTube, and the cookie value never reaches us or any third party.
• Anonymous usage. To understand which features people use, the extension sends us a small, content-free event when you do something, for example playlist_indexed or search. Each event includes a rough size range such as "100 to 499" rather than an exact count, the extension version, and a randomly generated install id that is not linked to your name, email, or Google account. We never receive video titles, channel names, descriptions, your tags, or any of your playlist contents.
• Feedback you send. If you submit the feedback form inside the extension, we receive your message, the feedback type, the extension version, and that anonymous install id. We only receive your email address if you choose to enter one so we can reply. Leave it blank and we have no way to contact or identify you.
• What happens when you uninstall. The playlists, settings, and tags the extension keeps on your device live in your browser's local storage, so your browser clears all of it automatically when you remove the extension. Anything we already received, meaning the anonymous usage events and any feedback you chose to send, stays in our records, because none of it is linked to your identity. If you entered your email with a feedback message and want it removed, email us and we will delete it.

We do not sell any of this data, use it for advertising, or use it to track you across the web. The extension only works on YouTube and inside its own window.

9. Changes

We may update this policy from time to time. Material changes will be communicated via the service or by updating the "Last updated" date above.

10. Contact

Questions or concerns? Email [email protected].