Privacy Policy

01Data we collect

• Email address. Obtained from your Google account at sign-in and used for order communication.
• Telegram ID. If you sign in with or link Telegram, used for your balance, the wheel of fortune, and generation quota.
• Order data. Video links, keywords, chosen plan, and order history and statuses.
• Payment data. Top-up amounts and statuses. We do not store card or wallet details; payments are handled by our provider, Heleket.

02How we use data

• Delivering promotion and SEO-analysis services and processing orders.
• User identification, crediting and debiting your balance, bonuses, and the referral program.
• Support, responding to requests, and order-status notifications.
• Security, fraud and abuse prevention, and legal compliance.
• Visit statistics: how visitors find the site and which pages they open, to improve the Service.

03Legal basis for processing

• Performance of a contract: delivering services, processing orders, and running your balance and dashboard.
• Legitimate interest: security, fraud and abuse prevention, support, and improving the Service.
• Legal obligation: financial record-keeping and responding to lawful requests from authorities.
• Consent: where we explicitly ask for it. You can withdraw consent at any time.

04Sharing with third parties

We do not sell your data. We share only the minimum necessary with the processors that run the Service:

• Google: account sign-in.
• Supabase: authentication and account storage.
• Heleket: payment processing for balance top-ups.
• Telegram: sign-in, account linking, and the bot.
• PostHog: website visit statistics (pages opened, referring site, campaign tags, country, device type, clicks on buttons and links on public pages, and the steps of a video check, sign-in, top-up, and order: plan, number of keywords, amount, without email, video links, or card details), stored in the EU.

Data may also be disclosed in response to lawful requests from authorities.

05International data transfers

Some processors may operate outside the European Economic Area. In those cases, we ensure appropriate legal safeguards for your data, including the standard contractual clauses provided for under data-protection law.

06Storage and protection

We keep data for as long as needed to provide the services and meet legal requirements, after which we delete or anonymize it. We apply technical and organizational safeguards: encryption in transit (HTTPS), access control, and protection against unauthorized actions.

07Your rights

You may request access to, correction, deletion, or restriction of your data, receive a copy of it in a portable format, object to processing, and withdraw any consent you previously gave. To do so, contact us (see “Contacts”). If you believe we are infringing your rights, you may lodge a complaint with a data-protection supervisory authority; in the Netherlands this is the Autoriteit Persoonsgegevens. Deleting your account ends the provision of services.

08Age of users

The Service is intended for adults. We do not knowingly collect data from anyone under 18. If such data reaches us by mistake, we will delete it on request.

09Cookies and storage

We use functional cookies and browser local storage: session tokens, selected language, and interface settings, all required for the dashboard to work. For visit statistics (PostHog), local storage also keeps a random visitor ID with no name or email in it. If your browser sends a Do Not Track signal, we do not collect statistics. Clearing the site data deletes the ID.

10The “CloudyTraff for YouTube” extension

The extension runs only on youtube.com, in YouTube Studio (studio.youtube.com) and on the cloudytraff.com/extension connection page.

• Without an account it reads the public data of the video you are watching (title, tags, view count, publish date) and searches YouTube for up to five of its tags directly from your browser, signed out of YouTube, to show ranks. These searches go to YouTube, not to us, and the results stay in your browser.
• When you connect it to your account, the extension keeps a separate access token in the browser and attaches it to its requests to our API, so we know your account and its limit. The token gives no access to orders or balance, and we store only its hash. You can revoke it with “Sign out” in the panel or in the “Extension” section of the dashboard.
• After you sign in, the extension sends us the ID of the video you open, its tags and view count, so we can check ranks by country and calculate views per hour. This is public YouTube data. For the daily limit we count which videos you opened today and keep that list for no longer than two days. We store a video's ranks and views without linking them to you, to show its 30-day history.
• If you press “Track” in the panel or add a video in the dashboard, we keep a list of such videos with your account (video ID, main query and tags, title and channel) and check their ranks once a day. Only you can see this list. After “Stop tracking” a video is deleted from the list after 30 days; until then you can bring it back.
• When you open a YouTube search or a channel page, the extension sends the search query or the channel ID to our server: we use them to show the top 10, YouTube suggestions and channel statistics. Queries and channels are kept in the answer cache without a link to you. These panels can be turned off in the dashboard, “Extension” section.
• If you press “Track channel” on a channel page, we keep a list of such channels with your account (channel ID and name) and check their new videos several times a day. Channel statistics (views and age of recent videos) come from public YouTube data and are stored without a link to you. After “Stop tracking” a channel is deleted from the list after 30 days; until then you can bring it back.
• In YouTube Studio, on the “Video details” page, the extension reads the title, description and tags in the fields to check them against the top 10 results. Only the main query is sent to our server, and when you press “Build from the top”, also the video title: Cloudy AI builds the pack from them, and the generation counts toward your dashboard limit. The description and tags are not sent. The fields are filled in only when you press a button, and you save them yourself.
• The “per hour” badges on thumbnails in the feed (if you turned them on in the dashboard) are calculated in the browser from the card captions; nothing is sent to our server.
• If Telegram is linked to your account, the CloudyTraff bot sends important rank changes of tracked videos, sudden growth of new videos on tracked channels and a morning summary there. To send the summary at 9:00 your time, we keep your browser’s time zone. Messages come in the language of your CloudyTraff dashboard, and until it is known, in your browser’s language. You can turn alerts off in the dashboard, “Extension” section, or with the buttons under a message.
• Apart from the video fields in YouTube Studio, the extension does not read your YouTube or Google account data or cookies and does not see other websites. Of your browsing, only the YouTube videos, searches and channels where the panel is open reach us, as described above.

11Changes

We may update this Policy. The current version is always available on this page with its update date.

12Contacts

For data questions: @Cloudy_Mira on Telegram.