When you use the Service, we may collect the following information:

• Account information: when you create an account, we collect your email address and display name through Firebase Authentication.
• Google account and YouTube data: when you choose to sign in with Google to fill in your YouTube channel, we access your YouTube channel ID, channel name, and channel profile image using the read-only YouTube scope (youtube.readonly).
• Content you provide: the greeting letter you create, including your name, your message, an optional rich-text message, an optional fan-art image, and the YouTube channel ID you attach to it.
• Automatically collected data: basic technical information such as your browser type, device information, and log data, used to operate and secure the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Automatically fill in your YouTube channel ID when you create a greeting letter.
• Authenticate you and manage your account.
• Display the greeting letters and fan art that users choose to submit.
• Protect the Service against fraud, abuse, and security threats.
• Comply with our legal obligations.

Our Service uses YouTube API Services. By signing in with your Google account through the Service, you also agree to be bound by the YouTube Terms of Service, and any information handled by YouTube API Services is also subject to the Google Privacy Policy.

We use the read-only YouTube scope only to retrieve your YouTube channel ID, channel name, and channel profile image. We use this data solely to identify your channel and to fill in the YouTube channel ID field when you create a greeting letter. We do not read your private data, watch history, or subscriptions, and we do not upload, modify, or delete any content on your YouTube channel.

We store only the YouTube channel ID that you submit as part of a greeting letter. We do not retain your channel name or profile image after the sign-in process.

You can revoke the access you have granted to the Service at any time through the Google security settings page at https://myaccount.google.com/permissions.

We do not sell your personal information. We may share information with:

• Service providers such as Google Firebase and Google Cloud, which host our authentication and data on our behalf.
• Public visitors, to the extent that greeting letters and fan art are intended to be displayed publicly within the Service.
• Authorities or third parties when required by law, or to protect our rights, safety, and property.

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us. We will delete or anonymize your information when it is no longer required, unless a longer retention period is required by law.

We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access, correct, or delete the personal information we hold about you.
• Withdraw your consent or revoke access granted to third-party services such as Google.
• Object to or restrict certain processing of your information.

To exercise any of these rights, please contact us using the details below.

The Service is not directed to children under the age required by the laws of their country to consent to the processing of personal data. We do not knowingly collect personal information from such children. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy, you can contact us at [email protected].