ajay.app

Privacy Policy for SponsorBlock




# Privacy Policy for SponsorBlock SponsorBlock is a browser extention that allows you to submit segments in YouTube videos and fetch segments that other people have submitted. Also see [the terms of use](https://gist.github.com/ajayyy/9e8100f069348e0bc062641f34d6af12). ## Log Files Almost all data that is collected through this extension can be downloaded from https://sponsor.ajay.app/database. Some more sensitive data such as votes and _hashed_ IPs are stored in a private database. The only things I keep are: - Information you submit (segments, votes) - A hashed version of your userID (a randomly generated value assigned when you first install the extension) - The time the submission happened - A hashed + salted version of your ip address for ratelimiting. This process makes it close to impossible to retrieve the original value if they don't have access to the salt. - The name of your client (if using an extension, another port, etc.) The extention also optionally logs whenever you skip a segment. This is used to let other users know how much their submissions have helped others (leaderboard). The skip tracking is completely anonymous and can be disabled in settings. # Requests sent to the server while using the extension Each time you browse to a new YouTube video: - An anonymous request is sent asking for the segments for that video. - This request contains a [**prefix** of the videoID hash](https://github.com/ajayyy/SponsorBlock/wiki/K-Anonymity), and returns a list of videos that potentially could be the one you are looking for - This request contains no personally identifiable information and no IPs are logged connected with this request Each time you skip a segment: IF you have skip tracking enabled: - An anonymous request is sent with the ID of the segment to record one skip - This request contains no personally identifiable information and no IPs are logged connected with this request Each time you vote on a submission: - A request with your userID and the segment ID is sent - A hashed IP is stored with this information to help prevent spammers Each time you submit a segment - A request with the video ID, your user ID and the submission is sent - A hashed IP is stored with this information to help prevent spammers ### User counting For every request: - A hashed + salted (salt rotated every 48 hours) IP address is temporarily stored **without** the actual request details - This allows the stats page to have count the number of users of the API - This data is stored in a seperate program from the main server and stored in memory. Form more details on how it works, [see here](https://github.com/ajayyy/PrivacyUserCount/#privacy-user-counter) # Extension Local Storage This data stays on your device Each time you skip a segment: - A sum is counted of the amount of time you have skipped in total Each time you downvote or hide a segment: If you have downvote storage enabled: - A hash prefix of the videoID is stored locally along with a hash of the segment ID to keep that segment hidden when you watch the video in the future ## Children's Information Children under 13 are not allowed to use this service without permission from a legal guardian. ## Consent By using this browser extension or API, you hereby consent to the Privacy Policy. ## Data Access/Deletion Requests (GDPR) Please email me with your request. ## Error logging and Cloudflare While I try to keep it's use to a minimum, I sometimes have to enable Cloudflare proxy to reduce load on the servers. I don't want to use it, but have to use it at the moment until I figure out a solution to this problem. When it is enabled, it logs some information itself that I cannot control, such as the number and location of connecting IPs. More information can be found at https://www.cloudflare.com/privacypolicy/ I sometimes need to enable error logging in nginx. This does log IPs associated with connection errors (not all requests), but I will delete these logs within 72 hours whenever that is enabled. ## Additional Info If you have additional questions or require more information, contact me through email at dev@ajay.app. You can also ask me questions on Discord (Ajay#1922) or [Matrix](https://matrix.to/#/@ajay:ajay.app).





Comments:
No comments found