Your digest needs very little data.

What we store

Your email address, chosen YouTube sources, delivery schedule, confirmation state, email delivery records, and any useful or not useful feedback you submit. Google sign-in supplies your account identity, email address and basic profile information through Supabase Auth. Necessary, secure cookies keep you signed in. We do not request access to your Gmail, Drive or contacts. Your sign-in identity can be linked to a separate digest delivery address through a one-time verification email.

How processing works

We use Supabase for storage and authentication, Google for sign-in, YouTube and Supadata for episode transcripts, OpenRouter for summaries, Cloudflare for scheduled work, Resend for email, and Netlify for hosting. These providers process only the data needed for their role.

Optional AI connections

If you connect an AI app, we verify your digest email with a one-time code and ask you to approve the requested permissions. We store the client identity, approved permissions, connection and last-use times, and protected authorization credentials. Necessary secure cookies remember your connector verification for up to 30 days. Your chosen AI provider receives the saved digest or transcript content it requests within those permissions and handles it under its own privacy terms.

If you separately approve video requests, your AI can submit public or unlisted YouTube links you provide for caption retrieval or audio transcription. We send the video link to YouTube and Supadata and associate the requested job with your account. These jobs and their transcripts are kept for up to seven days.

You can revoke a connection to stop future access and requests. This cannot remove copies your AI provider already received. Deleting your account removes its connector records. Verification codes are valid for up to 10 minutes; temporary verification records expire after 30 minutes. Expired verification records and browser sessions are removed during daily cleanup. Revoked connection records are removed during daily cleanup after 30 days.

Problem reports

If you use the Feedback button, we email your report, the page section, and any reply email you provide to the Podcasty team through Resend. Private page links, URL tokens, and browser history are not attached. Reports remain in our support inbox for follow-up; deleting your digest account does not automatically remove these emails.

Retention

Account and delivery data remains while your account exists. Records from retired phone notifications are kept in a restricted administrative archive and removed when your account is deleted. Raw transcript and debug content is cleared after 14 days, except transcript copies retained for saved digests. Saved digests preserve their episode summaries, podcast selection, and available transcripts while your account exists. Shared transcript copies are kept only while a saved digest references them. Reusable episode summaries may remain without your email or subscription data so the same episode does not need to be processed twice.

Your choices

Every digest includes links to manage or unsubscribe. The management page also lets you permanently delete your account, schedule, source choices, delivery records, and feedback. With Google sign-in enabled, personal digest and settings links require the owning account. If you explicitly create a transcript export link, anyone you share that temporary link with can read the selected transcript content until the link expires.