CloutOrbitCloutOrbit

Privacy Policy

Last updated: 2026-05-12

How CloutOrbit collects, uses, and protects your data, and how we comply with YouTube API Services policies.

1. Who we are

CloutOrbit ("we", "our", "the Service") is an independent analytics platform operated at cloutorbit.com. We provide public ranking and growth analytics for YouTube channels and videos with an Asia-first perspective. We are not affiliated with, endorsed by, or sponsored by YouTube, Google LLC, or Alphabet Inc.

2. Use of YouTube API Services

The Service uses YouTube API Services to retrieve publicly available metadata about channels and videos (e.g. titles, subscriber count, view count, publish date, thumbnails). By using the Service you also agree to be bound by:

We do not request OAuth authorization from end users, do not collect any private YouTube account data, and do not store YouTube user video content. We only access data that is publicly available through the YouTube Data API v3.

3. Information we collect

  • Public YouTube metadata: channel id, channel title, handle, country, subscriber/view counts, video metadata. Retrieved via YouTube Data API v3.
  • Account data (optional): when you register, we store email, password hash, plan tier. We do not require linking to YouTube.
  • Operational data: server logs, IP address, user agent, error traces, retained no longer than 30 days for abuse prevention.
  • Cookies & local browser storage: necessary cookies and browser local storage for language / theme / login / recent searches (recent searches are stored only in your browser, never transmitted to our servers, never used for advertising); optional analytics cookies only after explicit consent.

4. How we use the information

  • To generate public rankings, market overviews, and SEO content pages.
  • To compute growth and trend signals on top of public YouTube data.
  • To operate, maintain, and secure the Service.
  • To respond to user requests including correction, deletion, or takedown.

We do not sell your personal account data, and do not share it with third parties except as required by law. Note that third-party advertising partners may set their own cookies — see the Advertising section below.

5. Data retention & refresh

We refresh the public data for channels and videos we actively track on a regular basis so the figures we display stay reasonably current, and we retain public metadata and historical snapshots to provide ranking and trend analysis. We do not store private or OAuth-protected YouTube data. If a channel is removed or set to private on YouTube, or its owner asks us to stop displaying it, we will remove it from our public listings. To request removal, use our Compliance Center. We handle stored data in line with applicable YouTube API Services policies.

6. Your rights

  • Access — receive a copy of the account data we hold about you.
  • Correction — request correction of inaccurate channel metadata.
  • Deletion — request removal of your channel from our public listings, or deletion of your registered account.
  • Cookie preferences — change analytics consent at any time on the Compliance Center.

To exercise these rights, submit a request through our Compliance Center or email [email protected]. We respond within 30 days.

6a. Account deletion request — scope & 30-day grace period

When you click "Request deletion" in your account settings, we mark your account for deletion and a 30-day grace period begins. During the grace period, signing back in or clicking "Cancel deletion" on your profile page restores your account automatically. If you do not sign in within 30 days, we permanently process your request the next morning (04:30 SGT):

  • Hard-deleted: all favorite channels and categories you created.
  • Anonymized on tube_user: email, Google account ID (sub), avatar URL, display name and password hash are cleared; account status set to "9" (deactivated). The numeric account ID is retained only as a foreign-key reference for payment records.
  • Retained for legal & tax reasons: subscription, order and coupon-redemption history are kept for up to 7 years to satisfy PayPal/Stripe merchant agreements, anti-money-laundering, and tax-reporting obligations (GDPR Art. 17(3)(b) / CCPA §1798.105(d) carve-out). Admin operation audit logs are kept permanently.
  • Because Google sub is cleared, signing in again with the same Google account after deletion creates a fresh account with no prior data.

If your jurisdiction provides a stronger erasure right and you require us to also erase retained payment metadata, contact [email protected] with proof of identity and we will evaluate the request on a case-by-case basis.

7. Revoking access to YouTube data

Because the Service does not request OAuth from end users, there is no per-user YouTube authorization to revoke. If you wish to remove your YouTube channel data that we display publicly, use the takedown form on the Compliance Center. You can additionally revoke access to all third-party apps via the Google security settings page.

8. Security

We use industry-standard transport encryption (HTTPS), hashed password storage, and least-privilege access controls. No system is perfectly secure; if you suspect a breach, contact us immediately.

9. Children's privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us for prompt removal.

10. International transfers

The Service is operated from servers that may be located outside your country of residence. By using the Service you consent to transfer and processing of your data in those jurisdictions.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the Service. Continued use after the effective date constitutes acceptance.

12. Advertising & third-party cookies

We may display third-party advertising, including Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this Service and/or other sites on the Internet.

You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of third-party vendor cookies at aboutads.info/choices. Where required (e.g. EEA, UK, Switzerland), we request your consent for advertising cookies through our cookie banner before such cookies are set.

14. Legal bases for processing (UK GDPR / GDPR Art. 6)

We process your personal data on the following legal bases:

  • Contract (Art. 6(1)(b)) — account registration, login sessions, plan billing, and delivering the paid features you subscribe to.
  • Legitimate interest (Art. 6(1)(f)) — operating, securing and improving the Service; 30-day operational logs for abuse prevention; aggregating publicly available YouTube metadata into rankings and trend signals. We have assessed these interests as not overriding your fundamental rights, in particular because we do not process special-category data and we offer easy opt-out for analytics and advertising.
  • Consent (Art. 6(1)(a)) — analytics cookies, advertising cookies, and any optional marketing communications. You can withdraw consent at any time on the Compliance Center without affecting the lawfulness of processing before withdrawal.
  • Legal obligation (Art. 6(1)(c)) — retention of payment and tax records, and response to lawful requests from competent authorities.

15. International data transfers

The Service is operated from servers located in Singapore. When personal data is transferred from the United Kingdom, the European Economic Area, or Switzerland to Singapore or any other third country that lacks a UK/EU adequacy decision, the transfer is protected by:

  • UK International Data Transfer Agreement (UK IDTA) or the UK Addendum to the EU Standard Contractual Clauses — for transfers originating in the UK;
  • EU Standard Contractual Clauses (SCCs, 2021/914) — for transfers originating in the EEA;
  • Swiss FDPIC SCC addendum — for transfers originating in Switzerland.

You can request a copy of the safeguards in place by emailing [email protected].

16. Retention periods

We retain personal data only as long as necessary for the purposes set out in this Policy:

  • Account profile (email, hashed password, plan tier, display name, Google sub): for the lifetime of the account plus the 30-day deletion grace period (see §6a).
  • Public YouTube metadata snapshots: retained to support historical ranking and trend analysis; refreshed periodically as described in §5.
  • Server logs, IP addresses, error traces: 30 days, for abuse prevention and incident response.
  • Subscription, order and coupon-redemption records: up to 7 years, to satisfy PayPal/Stripe merchant agreements, anti-money-laundering and tax-reporting obligations (GDPR Art. 17(3)(b) / CCPA §1798.105(d) carve-out).
  • Admin operation audit logs: retained permanently for accountability.
  • Cookie consent records (stored in your browser's localStorage): until you clear them or change preferences on the Compliance Center.

After the applicable retention period expires, data is either permanently deleted or anonymized as described in §6a.

17. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data-protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law:

  • United Kingdom — Information Commissioner's Office (ICO): ico.org.uk/concerns, or call +44 0303 123 1113.
  • EEA — your national Data Protection Authority. A list is maintained at edpb.europa.eu.
  • Switzerland — Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.

We would, however, appreciate the chance to deal with your concerns first — please email [email protected] before contacting a supervisory authority.

18. Contact

Privacy questions: [email protected]
General contact: Contact page