Privacy Policy

1. The short version

• The extension runs inside your browser on www.youtube.com and reads what the page has already loaded. It makes no requests to YouTube of its own, does not sign in for you, and never downloads video or audio.
• What you export never reaches our servers. Transcripts, comments and video lists are assembled in the page and saved straight to your computer or your clipboard.
• What we do receive is limited to what is needed to run the free plan and keep the tool working: an anonymous install ID, usage counts, and anonymous product analytics without location.

2. What stays on your device

Everything you export. Rows are collected in the page, held in the browser while an export is in progress, and saved as a TXT, SRT, VTT or CSV file through your browser's ordinary download. Extracted rows and page text are never transmitted to Mastros, and there is no endpoint on our side that would accept them.

Your settings, your own AI prompt, and the state of an interrupted export are kept in Chrome's local extension storage (storage) so a long export can be resumed. Removing the extension removes that storage.

Summarize with your AI. When you click ChatGPT, Claude or Gemini, the extension puts the transcript and your prompt on your clipboard and opens that assistant's own website in a new tab. It sends nothing there itself: what you paste is between you and that provider, under their terms and privacy policy. We run no AI model and see none of it.

3. What we receive

The free plan and usage

Our licence service at ytexport-api.mastros.workers.dev (Cloudflare Workers) keeps one row per installation containing:

• A random install ID, created by the extension. The extension has no identity permission and never reads your Chrome profile or Google account.
• A browser fingerprint (a canvas hash), used solely to stop one person claiming an unlimited number of free quotas. It is never used for analytics, profiling or advertising.
• Your plan and how many records you have exported in the current cycle. These are counts, not content: the usage call carries the number of rows about to be saved, never the rows.

Only if you choose to move a paid plan to a new device, you type your billing email into the extension and we email you a six-digit code to confirm it is you. That email address is then stored with your licence. Paid plans, if offered, are billed by Stripe; we would hold the Stripe customer and subscription identifiers and your billing cycle dates, never card details.

Product analytics

We use PostHog, hosted in the EU (eu.i.posthog.com), to see whether the tool works. Events are restricted by a strict allow-list in the extension itself: anything not on the list is dropped before the request is built, so a future change cannot leak content by accident. Events are also capped per device per day, and every event asks PostHog not to derive a location from your IP address.

What is sent: the event name, and only these kinds of properties:

• product, plan, extension version, interface language;
• which export was used (for example "transcript" or "comments"), how many rows were gathered, how long it took, which file format or AI assistant button was used, and why a run stopped;
• failure and self-healing causes when YouTube's page changes.

What is never sent: video titles, channel names, transcript or comment text, usernames, URLs, search terms, email addresses, or your location. Counts and causes only.

4. Permissions, and why each one exists

• www.youtube.com: the only site the extension runs on, to read the page you have open.
• storage: settings, your prompt and resumable export state, kept locally.
• ytexport-api.mastros.workers.dev: the licence and usage service described above.
• eu.i.posthog.com: the analytics described above.

That is the whole list. There is no downloads, identity, tabs or history permission, and no access to any video or media server.

5. Processors

• Cloudflare: hosting for this site and the licence service (Workers, D1, KV).
• PostHog (EU region): product analytics, as scoped above.
• Resend: sends the six-digit device code, only if you request one.
• Stripe: payments, if a paid plan is offered and you choose it. Card details go to Stripe directly; we never see or store them.
• SplitForms: the contact and uninstall-feedback forms on this website. It retains submissions in its own dashboard.
• Google: distribution through the Chrome Web Store.

6. Data you export about other people

Comments carry other people's usernames and words. When you export them, you are collecting personal data about people who are not party to this policy. For that data you are the controller, not us. We never receive it and cannot act on it for you.

You are responsible for having a lawful basis to collect and use it, for honouring access and deletion requests from those people, and for complying with YouTube's own terms and with the data-protection law that applies to you.

7. Retention and your rights

Your licence row is kept while you use the extension, and billing records, if any, for as long as tax and accounting rules require. Analytics events are retained by PostHog under its own retention settings and cannot be tied back to you by name, because no name is ever sent.

If the GDPR or a comparable law applies to you, you may request access to, correction of, or deletion of the data we hold about you, and you may object to processing or ask for a portable copy. Write to admin@mastros.online and we will action it; if you verified an email, include it so we can find your licence.

When you uninstall, Chrome opens a short feedback page. Its address carries your plan, whole days since install, a rough bucket of rows exported, your interface language and the extension version, so we can read the feedback in context. Nothing else.

8. Children

The Service is not directed at children under 16, and we do not knowingly create accounts for them.

9. Changes

If what the extension collects changes, this page changes with it and the "last updated" date above moves. Material changes will be called out in the extension or on this site rather than made quietly.

Questions: admin@mastros.online