Skip to content
iutu.beiutu.be

Privacy Policy

Last updated: October 30, 2026

Who we are

iutu.be is a YouTube Title & Description Optimizer, run by Nicolae Maties. It has three parts: free web tools on iutu.be, a Chrome extension that adds “Enhance” buttons inside YouTube Studio, and a web app at iutu.be/app that helps you find and fix the titles and descriptions of videos already on your channel. Contact: contact@iutu.be.

YouTube API Services

iutu.be uses YouTube API Services. By connecting your YouTube account you also agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. All YouTube data is accessed only through Google's official APIs with the permissions you grant. We do not scrape your account.

Google data we access, and why

We ask for each permission only at the moment a feature needs it. Sign-in alone gives us no YouTube data.

Basic sign-in (openid, email, profile)

When we ask: When you sign in.

What we access: Your name, email address and profile picture.

What we use it for: To create your account, keep you signed in, and link your plan (Free or Pro).

View your YouTube account (youtube.readonly)

When we ask: Only when you click “Connect channel” or use “Export subscriptions”.

What we access: Your channel's name and picture; the list of your uploads with each video's title, description, tags, category, duration, publish date, privacy status and public view, like and comment counts; and, for the export tool only, your subscription list.

What we use it for: To show you which of your videos have title or description problems and to write suggestions for them; to create the subscriptions CSV you asked for.

View YouTube Analytics reports (yt-analytics.readonly)

When we ask: Only when you click “Connect channel”.

What we access: For your own channel: per-video views, watch time and average percentage viewed.

What we use it for: To rank which videos to fix first and to show how a video performed before and after a change you made.

See, edit and permanently delete your YouTube videos… (youtube.force-ssl)

When we ask: Only when you choose to apply a change from iutu.be.

What we access: The title and description of the video you are changing.

What we use it for: To save the exact title or description you approved, on the one video you approved it for. iutu.be never deletes videos, comments, ratings or captions, and never changes anything without that approval.

Other data

  • Text you submit: what you type into the free tools, and the title or description you ask the extension or the web app to rewrite.
  • Usage counts: how many rewrites you used today, to apply the free daily limit.
  • Subscriptions backup: if you use that tool, your subscription list, the Google email of the synced account, and a second email you provide.
  • Payments: handled by Stripe. We receive your email and whether the payment succeeded. We never see your card details.
  • Site analytics: pages visited and buttons clicked, through Minilytics and Microsoft Clarity, to understand how the site is used. These tools do not receive your Google or YouTube data.

AI processing

To write suggestions, we send the relevant text (for example a video's current title, description, length and a few of your other titles) to OpenAI through its API. OpenAI processes it only to return the suggestion. Under OpenAI's API terms, data sent through the API is not used to train their models by default. We do not use your Google or YouTube data to train any AI model.

Limited Use of Google user data

iutu.be's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We use Google user data only to provide the features described above, which you can see in the app.
  • We do not sell Google user data, and we do not use it for advertising.
  • We transfer it only to the service providers needed to run those features (listed below), when required by law, or with your explicit consent.
  • No person at iutu.be reads your YouTube data unless you ask us to (for example for support), or the law requires it.

How we protect your data

We treat your Google user data, YouTube data, OAuth tokens and account details as sensitive data. Security procedures are in place to protect its confidentiality, and we use encryption to protect it:

  • Encryption in transit: all traffic between your browser, iutu.be and our providers, including Google and OpenAI, is encrypted with HTTPS/TLS.
  • Encryption at rest: your data and Google OAuth tokens are stored in an encrypted database.
  • Google OAuth tokens: kept on our servers only and used only to call Google's APIs for the features you use. They are never sent to your browser, to the Chrome extension or to any other provider. The extension uses its own signed token, which expires after one year and is not a Google token.
  • Access controls: requests for your data must come from your signed-in account, and we look up data only for that account. Our servers reach the database through a private API that requires a secret key.
  • Staff access: access to production systems is limited to the founder and protected by multi-factor authentication.
  • Server secrets: the keys for Google, OpenAI and our database are kept in encrypted server settings, never in the browser.
  • Data minimization: we ask for each Google permission only when a feature needs it, and delete YouTube data automatically on the schedule below.

Service providers

  • Google (sign-in, YouTube Data API, YouTube Analytics API)
  • OpenAI (writing suggestions, as described above)
  • Cloudflare (hosting the website and servers)
  • MongoDB (database hosting for accounts, usage counts and the data listed under retention)
  • Stripe (payments)
  • Minilytics, Microsoft Clarity (site analytics; no Google or YouTube data)
  • Tally (the “Leave a Review” form; only what you type into it)
  • Slack (internal notice to the founder when an account is created or a channel is connected: your name, email, and channel name and ID)

How long we keep data

  • YouTube video data and Analytics data from a channel scan: deleted automatically 30 days after your last scan, or sooner when you rescan, as the YouTube API Services policies require.
  • Change history (the previous and new title and description of a video you changed, kept so you can undo): deleted automatically after 30 days.
  • Subscriptions backup: kept until you delete it or ask us to, because keeping it is the purpose of that tool. It is refreshed each time you run the backup.
  • Account data (name, email, plan): kept while your account exists. Deleted within 7 days of your request.
  • Google access and refresh tokens: protected as described above, used only for the features above, deleted when you delete your account.

Revoking access and deleting your data

You can revoke iutu.be's access to your Google account at any time in your Google Account permissions. After that we can no longer read or change anything on YouTube. To delete everything we hold about you, email contact@iutu.be from your account email; we delete it within 7 days and confirm by email.

Chrome extension

The extension runs only on YouTube Studio pages. When you click Enhance, the text of that one field is sent to iutu.be to generate suggestions. It fills the field only after you pick a suggestion, and never saves, publishes or deletes anything on its own. It stores a sign-in token in your browser and does not read your Google password.

Cookies

We use essential cookies to keep you signed in, and analytics cookies from Microsoft Clarity and Minilytics to understand how the site is used. We do not use advertising cookies.

Children

iutu.be is not directed to children under 13, and we do not knowingly collect their data.

Changes to this policy

If we change how we use Google user data, we update this page and the date above, and ask for your consent again where required before the new use starts.

Contact

Questions or requests: contact@iutu.be.

← Back to home