Privacy Policy

Effective 17 July 2026

This Privacy Policy explains what mutuals ("we", "us") collects, how we use it, and your choices. By using mutuals.tv you agree to this policy.

Information we collect

When you sign in with Google, we receive and store:

• your Google account's display name, profile picture, and account identifier;
• your YouTube subscriptions (channel names, IDs, and subscription dates) via the YouTube Data API read-only scope.

We do not access your email, watch history, private videos, or the ability to make changes to your account. We never see your Google password.

How we use it

• display your subscriptions and group them by topic;
• compute the overlap between your subscriptions and another person's when one of you opens a compare link;
• generate shareable comparison links and preview images that show display names, profile pictures, subscription counts, and overlap.

How we store and protect it

Security procedures are in place to protect the confidentiality of your data, and we use encryption to protect your information. Data is stored on Cloudflare's developer platform (Workers KV and D1). Specifically:

• Encryption in transit — all traffic between your browser, our service, and Google's APIs travels over HTTPS/TLS; we do not accept unencrypted connections, and your session cookie is transmitted only over secure connections.
• Encryption at rest — data held in Workers KV and D1 is encrypted at rest by Cloudflare. Your Google OAuth refresh token — the most sensitive item we hold — is additionally encrypted by us using AES-256-GCM, with a key held as a server-side secret that is not stored alongside the data.
• Access controls — stored data is reachable only through our authenticated service, and access to the underlying infrastructure is restricted to the service's operators.
• Data minimization — we request only the read-only YouTube scope needed to compare subscriptions, and retain your data only to operate the service.

Sharing and disclosure

We do not sell your personal information. A comparison link you create or open makes the participants' display names, pictures, subscription counts, and channel overlap visible to anyone who has that link. We use the following third-party processors:

• Google / YouTube — authentication and subscription data;
• Cloudflare — hosting, storage, and image generation.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• we use the data only to provide and improve the user-facing features described above (viewing and comparing YouTube subscriptions);
• we do not transfer this data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users;
• we do not use this data for serving advertisements, including retargeted, personalized, or interest-based advertising;
• we do not allow humans to read this data unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized.

Cookies

We use a single, strictly-necessary session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Your choices and data deletion

You can sign out at any time. You can revoke mutuals' access to your Google data at myaccount.google.com/permissions. To request deletion of the data we hold about you, email us at hello@mutuals.tv.

Children

mutuals is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by a new effective date above.

Contact

Questions about this policy: hello@mutuals.tv.