Privacy policy

Last updated October 19, 2026

This policy explains what we collect, why, and what you can do about it. Short version: we read public YouTube data, we keep as little about you as we can, and we never sell it.

1. What we collect

  • Your email address, if you create an account, so we can send sign in links and account notices.
  • The channels you scan or track. For channels you track, we store snapshots of their public statistics over time, such as subscriber count, total views and the views of public videos. This powers the live dashboard.
  • Billing details from Lemon Squeezy, our merchant of record: your plan, whether it is active, billing country and payment dates. We never see or store your full card number. If you cancel and choose to tell us why, we keep that answer to improve Runrate.
  • Technical data: IP address, browser type and request logs, kept briefly by our hosting provider for security and to stop abuse.
  • Basic page view counts: our own server counts each page view with the page, the referring site, your country and your device type, with no third party analytics and no extra cookies.
  • Cookies: one sign in cookie for account holders. Your light or dark theme choice is saved in your own browser. We use no advertising cookies and no third party ad trackers.

You can scan channels without giving us any personal data.

2. YouTube API Services

Runrate uses YouTube API Services to read public channel and video data, such as titles, subscriber counts, view counts, upload dates and video lengths. We do not access your YouTube or Google account, and we never see private YouTube Analytics.

By using Runrate you agree to the YouTube Terms of Service. Google's use of data is described in the Google Privacy Policy. We store, refresh and delete YouTube API data in line with the YouTube API Services Developer Policies.

Runrate does not ask you to sign in with Google or connect a YouTube account. If we ever add that, we will update this policy first, and you will be able to remove our access at any time on your Google account permissions page.

3. How we use data

  • to run Runrate: scans, estimates and the live dashboard;
  • to send sign in links and messages about your account or plan;
  • to handle billing, refunds and support requests;
  • to keep the service safe and stop abuse;
  • to understand overall usage, such as how many scans run each day, in aggregate.

We do not sell personal data, and we do not use it for advertising.

4. Who we share it with

Only the service providers that run Runrate for us, each for its own job:

  • Cloudflare: hosting, database and security.
  • Lemon Squeezy: checkout, payments, receipts and taxes, as merchant of record.
  • Brevo: delivers account emails, such as password resets and tracking alerts.
  • Google: YouTube API requests. These contain channel and video IDs, not your personal data.

We may also share data if the law requires it, or to protect our users and the service.

5. How long we keep it

  • Account data: until you delete your account.
  • Snapshots of a tracked channel: while you or another user tracks it, and within the limits set by the YouTube API Services Developer Policies. When nobody tracks a channel any more, its snapshots are deleted.
  • Request logs: a short period, set by our hosting provider.
  • Billing records: kept by Lemon Squeezy as long as tax law requires.

6. Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it. Email hello@runratestudio.com from the address on your account and we reply within 30 days. If you are in the EU or UK, our legal bases are the contract with you (to provide the service), our legitimate interest (to keep it safe and improve it), and your consent where we ask for it. You can also complain to your local data protection authority.

7. Children

Runrate is not meant for children under 13, and we do not knowingly collect their data. If you think a child has given us data, email us and we will delete it.

8. Data location and security

Our providers may process data in countries other than yours, with safeguards required by law. We use encrypted connections, keep access to data limited, and store only what the service needs.

9. Changes

If we change this policy we post the new version here with a new date, and we email account holders about important changes.

10. Contact

Privacy questions: hello@runratestudio.com.