Privacy Policy

This policy explains what data ComboVideos.com (“ComboVideos,” “we,” “us”) collects from you, why, and what we do with it. We wrote it in plain language because legal documents that nobody reads don't protect anyone.

1. What we collect

If you visit without signing in

• Anonymous usage data: pages visited, browser type, approximate geo from IP, referrer URL. This is server-log level data, not tied to an identity.
• Anonymous saves & preferences: stored in your browser via localStorage. We don't see these — they stay on your device.

If you sign in

• Account info from Google: email address, display name, profile image URL. We don't request anything else from your Google account.
• Your activity on the site: videos saved, collections you build, reactions you post, channels you follow, content you submit via Submit or Help Fix.
• Authentication metadata: session tokens to keep you logged in, last-active timestamps.

What we do NOT collect

• Your Google password or any Google data beyond email + name + profile image.
• Payment information — we don't take payments.
• Precise GPS location, contacts, microphone, camera, or anything from your device.
• Your activity on other websites.

2. Why we collect it

The data above exists for a small set of reasons:

• To run the features you use — saves can't sync across devices without your account, collections need somewhere to live.
• To prevent abuse — rate-limiting spam, blocking malicious bots, banning bad actors.
• To improve the product — understanding which games, channels, and features get used so we know what to invest in next.
• To debug — server logs help us fix outages, slow pages, and broken embeds.

3. Who we share it with

We share data only with the third-party services that make ComboVideos run. These are our “sub-processors”:

• Vercel — web hosting + edge CDN. They see request logs, IPs, and the data passing through their servers as they serve you the site.
• Neon — managed Postgres database. They host our database (US-East region).
• Google — OAuth sign-in. Google sees that you authenticated to ComboVideos, but not what you do here.
• YouTube — video embeds. YouTube/Google see that an embed loaded on a page on our site; they may set cookies in your browser per their own policies.
• Resend — transactional email (when we add features that send mail). They process the outbound email for delivery.

We do not share data with advertisers, brokers, or data resellers. If that ever changes — for example, if we add a sponsored content partner — we will update this policy in advance and you will see it disclosed clearly.

4. Cookies & similar tech

See our separate Cookie Policy for the full breakdown. The short version:

• We set essential cookies to keep you signed in and to remember preferences like content-type filters.
• Embedded YouTube videos set Google's cookies in your browser. We don't control those; you can manage them via your browser or by not playing embedded videos.
• We do not currently set advertising or cross-site tracking cookies.

5. How long we keep it

• Account data: as long as your account exists. Delete your account and we remove your profile, saves, and collections within 30 days.
• Anonymous server logs: typically 30–90 days, then rolled off.
• Indexed video metadata (titles, channels, descriptions, our SEO descriptions): retained as part of the public catalog. This is not personal data about you.
• Reactions, comments, collection items you posted: retained until you remove them or delete your account.

6. Your rights

Depending on where you live, you may have rights to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Object to or restrict our processing.
• Port your data to another service in a machine-readable form.

To exercise any of these, email combovideos.com@gmail.com from the email tied to your account. We'll respond within 30 days. We never charge for these requests.

EU/UK users: You also have the right to lodge a complaint with your local supervisory authority if you believe we've mishandled your data.

California users (CCPA/CPRA): You have rights to know what we've collected, request deletion, and opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information for behavioral advertising. You may exercise any CCPA right via the email address above.

7. Children

ComboVideos is not directed at children under 13. We don't knowingly collect personal data from anyone under 13. If we learn that we have, we'll delete it. Parents or guardians may contact us to request deletion.

8. Security

We use industry-standard measures to protect your data: TLS in transit, encryption at rest for the database, scoped access for our third-party sub-processors, and security headers on every page (CSP, HSTS, X-Frame-Options where appropriate). No system is perfectly secure, but if we ever detect a breach involving your data we will notify you and the appropriate authorities as required by law.

9. International transfers

ComboVideos is operated from the United States. If you use the site from outside the US, your data will be transferred to and processed in the US, where data-protection laws may differ from those in your country. By using the site you consent to this transfer. Our sub-processors that handle EU/UK personal data rely on Standard Contractual Clauses or equivalent safeguards.

10. Changes to this policy

We may update this policy as the site evolves. When we make material changes, we'll update the “Last updated” date at the top and, where appropriate, notify registered users. Continued use of the site after changes means you accept the updated policy.

11. Contact

Privacy questions or data-rights requests: email combovideos.com@gmail.com.