Paul · Privacy

Last updated 15 August 2026 · Contact ezioxxk@gmail.com

Who we are

PAUL (this website) and shorts (a local publishing tool) are operated by the same developer. Together they publish and display Shorts for the YouTube channel kuroshibacyberpunk. This is a small operator tool, not a consumer social network.

What this product does

The website lists public videos, characters, and story material. Visitors are not asked to sign in with Google. The shorts desktop tool, used only by the channel operator, requests YouTube OAuth access so the operator can upload videos to their own channel.

Google user data we access

When the operator authorizes shorts, the app requests the YouTube Data API scope https://www.googleapis.com/auth/youtube. That lets the operator:

• upload a video file they already have on disk to their YouTube channel
• set title, description, tags, privacy, and thumbnail for that upload
• confirm the upload succeeded and record the public video ID

We do not request Gmail, Drive, Calendar, Contacts, or other Google scopes. We do not read other people’s YouTube accounts. Visitors to this website never grant Google access.

How we use that data

Google user data is used only to provide the user-facing upload feature of shorts: publishing the operator’s own Shorts to YouTube. We do not use it for advertising, credit scoring, sale to brokers, or training unrelated models.

This website also calls the YouTube Data API with a server API key to list public videos on the kuroshibacyberpunk channel (titles, IDs, thumbnails, publish times, watch URLs). That catalog does not include private or unlisted videos.

How we store data

• Operator machine: OAuth tokens are stored locally in a file under tokens/ and as YOUTUBE_REFRESH_TOKEN in a local .env. They are not uploaded to this website.
• This website (Cloudflare Worker + D1): public video metadata (video ID, title, description excerpt, thumbnail URL, watch URL, duration, privacy status if public, channel ID). No OAuth tokens. No visitor accounts.
• Cloudflare logs: standard request logs (IP, user agent, path) may be retained briefly for security and debugging.

Sharing

We do not sell Google user data. We do not transfer it to advertising platforms or data brokers. We share it only when required by law, to investigate abuse, or as part of a transfer of the project after asking the operator first.

Public YouTube URLs shown on this site are already public on YouTube.

Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Humans do not read Google user data except to debug a failure the operator reports, to meet a legal obligation, or with the operator’s explicit request to inspect a specific upload.

YouTube API Services

This product uses YouTube API Services. By using the publisher you also agree to the YouTube Terms of Service. Google’s privacy practices are described in the Google Privacy Policy. See also our Google & YouTube data page and YouTube’s API Developer Policies.

Cookies and visitors

This website does not set advertising cookies and does not run a visitor login. We do not build profiles of people who only browse PAUL.

Retention and deletion

The operator can stop Google access at any time:

• revoke shorts at Google Account permissions
• delete the local tokens/youtube_token.json file and clear YOUTUBE_REFRESH_TOKEN
• email ezioxxk@gmail.com to ask us to wipe the public video cache in D1

We will action a deletion request for data we control within 30 days.

Children

This product is not directed at children under 13. We do not knowingly collect their data.

Changes

If how we use Google user data changes, we will update this page and the date above. Continued use of the publisher after an update means the new policy applies to later use.

Contact

Developer contact: ezioxxk@gmail.com. Related: Terms of Service, Google & YouTube data.