Privacy Policy

Data required to improve the product: your approved email, a session cookie, standard technical logs (such as timestamps, errors and rate-limit counters), and other usage information that helps us improve the product. The lists and alerts you create, and the deals you model, stay private to you and anyone you explicitly share them with — they are never surfaced to the Operator or to other subscribers. The same goes for everything in My Radar: the creators you add, their statuses, and the notes you write.

We use Google sign-in to confirm who you are. Google shows you a consent screen that reads “KOL Radar”; we only ever ask for the basic profile scopes openid, email and profile. From Google we receive your email, your name and your profile picture — nothing else. We never see, store or ask for your Google password. You can revoke KOL Radar's access at any time from your Google account permissions page.

No payment cards, no government IDs, no biometrics, no precise location, no cross-site tracking, no advertising cookies, no IP addresses or device fingerprints kept in our records. We do not record what you type, capture screen sessions, or run any form of session replay.

Analytics come from official platform APIs (including the YouTube Data API). We don't scrape HTML pages, don't bulk-download video content, and don't access anything behind a login or paywall. We respect upstream retention and deletion rules — see Google Privacy Policy.

To sign you in, run the features you use, improve the product, and keep your account secure. We do not sell your data, licence it to third parties, or use it for advertising.

Managed cloud hosting, database, authentication provider, transactional email, and the upstream data APIs above. Each gets only the minimum data required.

Kept only while your account is active. Detailed logs are deleted after about 90 days, and only summarised records are kept after that. When an account is closed or expires, its records are deleted or anonymised within about 90 days.

Ask us for a copy of your data, corrections, or deletion at any time — email hello@kolradar.io.

Encryption in transit, session tokens, rate limits, allowlist checks on every request, least-privilege database access. No system is unbreakable — use at your own risk.

One first-party session-token cookie for sign-in. That's it.