01 / 读取什么01 / Data accessed
本工具使用YouTube API Services，经Google OAuth取得youtube.readonly和yt-analytics.readonly授权后，可读取：Using YouTube API Services with Google OAuth scopes youtube.readonly and yt-analytics.readonly, the tool can read:
- 授权频道的标识与名称、上传列表，以及可访问视频的标题、说明、链接、缩略图链接、发布时间、公开／预约和处理状态。The authorized channel’s ID, name and upload list, and accessible video titles, descriptions, links, thumbnail links, publication times, visibility/schedule and processing status.
- 视频播放、点赞、评论等API返回的计数，以及观看分钟、平均观看时长／百分比、分享、播放列表加入和订阅增加等可用日报。API-returned video counts and available daily reports for watch minutes, average duration/percentage, shares, playlist additions and subscribers gained.
- 访问与刷新令牌、授权范围、有效期，以及连接、核验、同步和错误记录。不收集Google密码。Access and refresh tokens, scopes, expiry times, and connection, verification, synchronization and error records. Google passwords are not collected.
02 / 如何使用02 / Use of data
用于核对本人频道和既有视频、识别公开／待核验状态、关联本机内容计划、展示当前及历史指标，并排查授权与结果回写问题。原始API响应可作为核验依据保存。当前只读接入没有上传、改文案或删除远端视频的权限。Data is used to verify the owner’s channel and existing videos, distinguish public from pending results, link local content plans, display current and historical metrics, and diagnose authorization and writeback issues. Raw API responses can be retained as evidence. This read-only grant cannot upload, edit or delete remote videos.
所核对的接入代码不包含向广告网络出售数据、广告定向或将YouTube用户数据发送给AI模型训练服务的流程。The inspected integration contains no workflow for selling data to advertising networks, ad targeting, or sending YouTube user data to AI model training services.
03 / 保存与保护03 / Storage and safeguards
工作台数据库在运营者电脑上保存视频记录、指标快照、日报、原始响应、审计及故障记录。另有本机备份、导出和结果回执文件。OAuth凭据存入独立的本机加密库，解密密钥也在本机；这不是硬件密钥保护，也不代表整个数据库、备份或诊断文件均已加密。The operator’s computer stores video records, metric snapshots, daily reports, raw responses, audits and failure records. Local backups, exports and result-receipt files also exist. OAuth credentials use a separate encrypted local store; the decryption key is also local. This is not hardware-backed protection, and the full database, backups and diagnostics are not all encrypted.
本机服务监听回环地址。访问Google接口使用HTTPS。OAuth回调校验state和浏览器Cookie，主服务关闭访问日志以减少授权码泄露；不因此承诺本机日志和数据文件绝不包含敏感信息。The workbench listens on a loopback address. Google API requests use HTTPS. OAuth callbacks validate state and a browser cookie, and the main service disables access logging to reduce authorization-code exposure. This does not guarantee that local logs and data files contain no sensitive information.
04 / 当前保留方式04 / Current retention behavior
当前实现保留历史记录以支持核验和故障恢复，没有针对全部YouTube数据、备份和回执的统一自动删除期限。发布后30天结束自动指标节点，并不意味着30天自动删除数据。The current implementation preserves history for verification and recovery. It has no universal automatic erasure deadline covering all YouTube data, backups and receipts. Ending automatic metric nodes after 30 days does not delete stored data after 30 days.
历史数据需要运营者人工管理。删除请求应覆盖数据库、回执和受控备份；断开连接不代替完整历史数据删除。Historical data requires manual management by the operator. Deletion requests should cover the database, receipts and controlled backups; disconnecting does not replace complete historical-data deletion.
05 / 撤销访问与删除05 / Revocation and deletion
- 撤销Google访问：在Google账号的第三方连接中移除本应用权限。撤销会阻止继续使用该授权，但不会自动清除已存本机数据。Revoke Google access: remove the app in your Google Account’s third-party connections. Revocation prevents continued use of that authorization; it does not automatically erase stored local data.
- 本机断开：工作台“本机断开”会停止该连接的同步／监测并清除该连接的本机令牌，保留帖子和快照。默认本机断开不等于同时向Google撤销授权。Disconnect locally: the local disconnect action stops the connection’s synchronization/monitoring and removes its local token record, while retaining posts and snapshots. The default local action does not also revoke the grant at Google.
- 请求删除历史：邮件联系gmq12138@gmail.com，说明需要删除的频道或数据范围，无需发送密码或令牌。完整删除目前由运营者人工核对数据库、日报、快照、回执、导出及受其控制的备份；没有一键完整删除功能。目前没有自动完成机制。Request historical-data deletion: email gmq12138@gmail.com with the channel or data scope, without passwords or tokens. Complete deletion currently requires the operator to manually review the database, reports, snapshots, receipts, exports and backups under their control. There is no one-click complete-erasure feature or automatic completion mechanism.
本机数据删除不会删除YouTube上的视频或频道内容。远端删除须由账号本人在YouTube中操作。Local deletion does not delete videos or channel content held by YouTube. The account owner must use YouTube to delete remote content.
07 / 联系与政策更新07 / Contact and updates
MQ G · gmq12138@gmail.com
如有数据访问、删除或隐私问题，请联系上述邮箱。功能或数据处理方式变化时，应先更新本政策并按适用要求取得同意。生效日期：2026年10月28日。Use this address for data-access, deletion and privacy questions. Changes to functionality or data practices require policy updates and consent where applicable. Effective date: 28 October 2026.