Privacy Policy

Last updated: 9 November 2026 · Effective immediately

The Serões Sagrados Publishing Tool is a private, internal application used only by the owner of the YouTube channel @seroessagrados to publish that channel's own videos and read that channel's own statistics. It is not available to the public and does not collect personal data from viewers or other users. This Policy explains, in full and transparently, what data the Application accesses, why, how it is protected and how access can be revoked.

Who we are
Scope of this Policy
Nature of the Application
Google and YouTube data accessed
How the data is used
Limited Use disclosure
Sharing and disclosure
Storage and security
Retention and deletion
Revoking access
Cookies and tracking
Children
Your rights (GDPR)
International transfers
Changes to this Policy
Contact

1. Who we are

This Privacy Policy is issued by JOAO REBELO SANTOS, UNIPESSOAL, LDA (“we”, “us”, “our”), a company registered in Portugal, which owns and operates the YouTube channel Serões Sagrados (youtube.com/@seroessagrados) and the software application “Serões Sagrados Publishing Tool” (“the Application”). For the purposes of the EU General Data Protection Regulation (GDPR), we are the controller of any personal data processed by the Application.

2. Scope of this Policy

This Policy applies to the Application and to the website at seroes.stilkobenhavn.dk. It does not apply to YouTube itself, to Google services, or to any third-party website linked from here; those are governed by their own policies, in particular the Google Privacy Policy and the YouTube Terms of Service.

3. Nature of the Application

The Application is a private, single-tenant, internal tool. It manages exactly one YouTube channel: Serões Sagrados.
It has no public registration, no external user accounts and no customers. The only person who signs in with Google is the channel owner.
It runs automatically on servers controlled by us and on our own computers, to prepare and publish episodes on a schedule set by the channel owner.
It does not display advertising, does not sell anything and does not interact with viewers.

4. Google and YouTube data accessed

The Application uses the official YouTube Data API v3 and YouTube Analytics API. It accesses data only after the channel owner explicitly grants permission on Google's OAuth consent screen, and only for the Serões Sagrados channel.

Permission (OAuth scope)	Data accessed	Why it is needed
`youtube.upload`	Ability to upload video files to the channel.	To publish the channel's own finished episodes and Shorts.
`youtube`	The channel's own videos, playlists, thumbnails and video metadata (title, description, tags, privacy status, scheduled time).	To set the metadata and thumbnail of each uploaded video, add it to playlists and schedule its publication.
`yt-analytics.readonly`	Aggregated statistics of the channel's own videos (views, watch time, average view duration, audience retention, traffic sources, aggregated geography).	To produce a weekly internal report so the owner can decide which Bible stories to tell next.

The Application does not access Gmail, Google Drive, contacts, calendars, location, payment information or any Google service other than YouTube. It does not access the personal data of viewers, subscribers or commenters. Analytics data received from YouTube is aggregated and does not identify individual viewers.

The only personal data processed is the minimum needed to authenticate the channel owner: the OAuth access and refresh tokens issued by Google, and the channel identifier.

5. How the data is used

Data obtained through YouTube API Services is used only to provide the Application's user-facing functions to the channel owner:

uploading the channel's own videos, Shorts and thumbnails;
setting and updating the metadata, playlists and publication schedule of those videos;
sending the channel owner private notifications (for example, “episode published”) through a private channel controlled by the owner;
compiling private, aggregated performance reports of the channel's own content.

The data is never used for advertising, profiling, credit or lending decisions, surveillance, or for training artificial-intelligence or machine-learning models, and it is never sold.

6. Limited Use disclosure

The Application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the YouTube API Services Developer Policies. In particular:

data is used only to provide or improve the user-facing features described above;
data is not transferred to others, except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition with prior notice;
data is not used to serve advertisements;
no human reads the data unless the channel owner asks for it, it is necessary for security purposes or to comply with law, or it is aggregated and anonymised for internal operations.

7. Sharing and disclosure

We do not sell, rent or trade any data. Data obtained from YouTube API Services is not shared with third parties. The Application relies on reputable cloud infrastructure providers solely to run its own operations — application hosting, automated video assembly, encrypted storage of credentials and storage of the channel's own media files before upload. These providers act on our behalf, under their own security and confidentiality commitments, and do not use the data for their own purposes. Private status notifications (for example, a video title and its publication time) are sent only to the channel owner and never contain access credentials.

We may disclose information if required by law, court order or a competent authority.

8. Storage and security

OAuth refresh tokens are stored encrypted, as protected secrets of our hosting and automation providers. They are never written to source code, public repositories or logs.
All communication with Google APIs and between our systems uses HTTPS/TLS encryption.
Access to the Application's servers, secrets and accounts is restricted to the channel owner and protected by strong passwords and two-factor authentication.
The Application requests only the minimum OAuth scopes necessary for its functions.

No method of transmission or storage is completely secure, but we apply measures appropriate to the limited nature of the data processed.

9. Retention and deletion

OAuth tokens are kept only while the Application is authorised. They are deleted when access is revoked or when the Application is discontinued.
Aggregated analytics retrieved from the YouTube Analytics API are kept in internal reports for no longer than 30 days, unless refreshed from the API, in accordance with the YouTube API Services Developer Policies.
Media files created for the channel (images, audio, videos) belong to the channel and are kept for as long as needed to operate it.

The channel owner may request the deletion of all data held by the Application at any time by writing to the contact address below; deletion is completed within 7 days.

10. Revoking access

Access granted to the Application can be revoked at any time, instantly, through the Google security settings page: myaccount.google.com/permissions. Once revoked, the Application can no longer access the YouTube account, and the stored tokens become invalid and are deleted.

11. Cookies and tracking

This website does not use cookies, analytics, advertising pixels or any form of tracking. The Application does not track visitors or YouTube viewers.

12. Children

The Application is not directed to children and is used only by the adult owner of the channel. It does not collect data from anyone under 16. The Serões Sagrados channel content is designated on YouTube in accordance with YouTube's audience settings.

13. Your rights (GDPR)

Where personal data is processed, the data subject has the right to access, rectify, erase, restrict or object to its processing, the right to data portability and the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. The legal basis for processing is the consent given on Google's OAuth consent screen and our legitimate interest in operating our own channel. Requests may be sent to the contact below. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

14. International transfers

Some of our infrastructure providers may process data outside the European Economic Area. Where this happens, transfers are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

15. Changes to this Policy

We may update this Policy to reflect changes to the Application or to legal requirements. The date at the top of the page shows the latest revision. If the Application begins to use data in a materially different way, the channel owner's consent will be requested again before the change takes effect.

16. Contact

JOAO REBELO SANTOS, UNIPESSOAL, LDA — Serões Sagrados
Portugal
Email: mindfulness1717@gmail.com