Privacy Policy
Last updated
This policy explains what YTMark collects, why, and what you can do about it. It covers both the website and the Chrome extension.
Who is responsible
Tomas Rimkus IV Nr. 1194686, Viržių g. 15B-1, Lindiniškių k. LT-14181, Vilniaus r. Lithuania is the data controller for the personal data described here. For any privacy question, or to exercise the rights listed below, contact info@ytmark.com.
What we collect
Only what the product needs to work. There is no advertising, no tracking pixels, no analytics profile, and nothing is sold or shared for marketing.
Account
- Email address — identifies your account and is how we contact you about the service.
- Password — handled by our authentication provider and stored only as a salted hash. We never see or store your password.
Your bookmarks
- Video details — the YouTube video ID, title, channel name and duration of videos you bookmark.
- Timestamps and notes — the position you saved and any note you write (up to 500 characters).
- Frame thumbnails — when you save a bookmark, the extension captures a still image of the current video frame in your browser and uploads it to a private storage bucket so your library is recognisable. Only you can read it, via short-lived signed links. If the video is protected, no image is captured and the bookmark is saved without one.
Billing
- Subscription state — a payment-provider customer reference, your plan status and the date the current period ends.
- No card details. Card numbers are entered on our payment provider's own checkout and never reach our servers.
Technical
Our hosting and database providers keep standard server logs (IP address, timestamp, request path) for security and troubleshooting. We do not build profiles from them.
What the extension can access, and what it does with it
Chrome shows a permission prompt when you install the extension. Concretely, it asks for:
| Permission | Why |
|---|---|
| Access to www.youtube.com | To add the bookmark button and progress-bar markers to the player, read the video title, channel and current time, and capture the frame thumbnail. It runs only on YouTube watch pages and reads nothing else. |
| Access to this website | So that signing in here also signs you in inside YouTube, and signing out here signs you out there. It reads nothing from the page other than that sign-in handshake. |
| Storage | To keep your login session on your own device so you stay signed in. |
The extension does not record your browsing history, the videos you watch without bookmarking, or anything on any other website. It contains no remote code: all of its logic ships in the package Chrome reviews.
Our use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Why we are allowed to process it
- To perform our contract with you — running your account, storing your bookmarks, taking payment for a subscription.
- Legitimate interests — keeping the service secure, preventing abuse, and fixing faults.
- Legal obligation — retaining invoices and tax records for the period the law requires.
Who else processes it
We use a small number of providers, each acting on our instructions under a data processing agreement:
- Supabase — database, authentication and file storage for your account, bookmarks and thumbnails.
- Stripe — subscription payments, checkout and the billing portal.
- [HOSTING PROVIDER] — serves this website.
Where a provider processes data outside the EEA, that transfer relies on the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
- Bookmarks — until you delete them. Deleting a bookmark also deletes its thumbnail, and deleting a video's last bookmark removes that video from your library automatically.
- Account data — until you ask us to delete your account, after which your profile, videos, bookmarks and thumbnails are removed.
- Billing records — retained for as long as tax and accounting law requires, even after account deletion.
How it is protected
- Every database table enforces row-level security, so one account cannot read another.
- Thumbnails live in a private bucket and are served only through short-lived signed links.
- All traffic is encrypted in transit.
- The extension stores your session on your own device using the browser's extension storage. As with any locally stored credential, someone with access to your unlocked computer profile could read it.
Your rights
Under the GDPR you can ask us to:
- give you a copy of your data, or export it in a portable format;
- correct anything inaccurate;
- delete your account and its contents;
- restrict or object to certain processing.
Write to info@ytmark.com and we will respond within one month. If you think we have handled your data badly, you may complain to your national data protection authority.
Children
The service is not directed at children under 16, and we do not knowingly create accounts for them. If you believe a child has an account, contact us and we will remove it.
Changes
If this policy changes materially we will update the date at the top and, where the change affects you, tell you by email before it takes effect.
Contact
Tomas Rimkus IV Nr. 1194686 — info@ytmark.com. See also our Terms of Service.