Privacy policy

1. Who we are

Clariteon Academy ("Clariteon", "we", "us") publishes free video lessons on YouTube. This policy covers two things:

1. the website at clariteon.ai, and
2. Clariteon Studio — the desktop application we use internally to produce and publish those lessons, which is the application registered with Google for access to the YouTube Data API.

We are the data controller for both. Contact: privacy@clariteon.ai.

2. This website

No cookies, no analytics, no accounts

clariteon.ai is a set of static pages. It sets no cookies at all, embeds no analytics, advertising or tracking scripts, and has no sign-in, comments or forms. Fonts are served from this domain rather than a font provider, so simply reading a page calls out to nobody.

The only thing it keeps in your browser is your answer to the one question below, and that is there so we do not have to ask twice.

Hosting and server logs

The site is hosted on Cloudflare Pages. Like any web server, Cloudflare processes the technical request data needed to deliver a page and to defend against attacks and abuse: your IP address, the time of the request, the page requested, your browser's user-agent string and referring URL. We use this only in aggregate — to know a page is reachable and being read — and we do not combine it with anything else or try to identify you from it. Our lawful basis is our legitimate interest in operating and securing the site. Cloudflare acts as our processor; see Cloudflare's privacy policy.

Your choice about YouTube content

Lessons are hosted on YouTube, and lesson pages link to them. Those pages also show each video's thumbnail, which the browser would load from Google's image servers (i.ytimg.com) — and that request tells Google your IP address and user-agent, as any third-party image would.

So we ask first. Until you allow it, thumbnails are not requested at all and the card shows a plain placeholder; nothing is sent to Google. A banner puts the choice to you on your first visit, with allowing and declining weighted the same, and the footer's privacy choices link reopens it whenever you want to change your mind.

Your answer is kept in your browser's local storage under clariteon.youtube-consent, so the question is not asked again on this device. That entry is strictly necessary for honouring the choice, it is never sent to us or anyone else, and clearing your browser's site data removes it. It is the only thing this site stores in your browser. Declining costs you nothing but the preview image — the lessons themselves are a click away on YouTube either way.

Once you follow a link to YouTube, or play a video there, you are on Google's service and Google's own privacy policy and terms of service apply. Nothing in this policy changes what Google does with your data on its own platform. If we ever embed a player directly on this site, we will use YouTube's privacy-enhanced mode (youtube-nocookie.com) and say so here.

If you email us

If you write to us, we keep the message and your address for as long as needed to deal with it and to keep a record of corrections to lessons — generally no more than 24 months. We do not add you to any mailing list; we do not run one.

3. Clariteon Studio and your Google data

Clariteon Studio is a desktop application that runs on the computer of a Clariteon Academy operator. It takes a finished lesson and publishes it to the Clariteon Academy YouTube channel through the YouTube Data API v3.

There is no Clariteon server. The application runs locally, calls Google's APIs directly from that machine, and keeps its files on that machine.

4. What Google data we access, and why

When an operator connects the application, Google's consent screen asks them to grant specific scopes. We request only what publishing a lesson requires:

https://www.googleapis.com/auth/youtube.upload

To upload the finished lesson video file to the channel. This is the only way to put a video on the channel programmatically.

https://www.googleapis.com/auth/youtube.force-ssl

To finish the listing after the upload: set the custom thumbnail, upload the caption file, set the title, description, tags and category, apply the altered-or-synthetic-content disclosure YouTube requires, add the video to the right playlist, and change its visibility from private to public once a person has reviewed the live listing. It is also used to read back the channel's own videos and playlists so a lesson can link to the correct next lesson.

We request no other scopes. In particular we do not request access to analytics, subscriber lists, comments on other channels, Gmail, Drive, Contacts, Calendar or Google Photos.

The data flowing through these scopes is:

• An OAuth access token and refresh token for the channel's account, plus the channel and video identifiers Google returns.
• Content we created ourselves and are sending to Google: the video file, the thumbnail, the captions and the listing metadata.
• Metadata we read back about our own videos: ids, titles, visibility status and playlist positions, used to wire one lesson to the next.

No viewer data, audience data or personal data belonging to anyone other than the channel operator is accessed through these scopes.

5. Limited use of Google user data

Concretely, data obtained from Google APIs is:

• used only to publish and manage Clariteon Academy's own videos;
• never sold, rented or licensed to anyone;
• never transferred to a third party except as required to provide this functionality (that is, to Google itself), to comply with applicable law, or as part of a merger or acquisition with notice;
• never used for advertising, ad targeting, retargeting, audience building or credit assessment;
• never used to train, fine-tune or evaluate generalised or personalised AI or machine-learning models. Lessons are produced with generative AI tools, but the Google data described above is not sent to them and is not part of any training set;
• never read by a human except where the operator does so in the application to review a listing before publication, or where it is strictly necessary for security, to resolve a technical fault, to comply with the law, or where we have the account holder's explicit consent.

6. Storage, security and retention

OAuth credentials for the channel account are stored locally on the operator's own machine, in the operating system's protected credential store or the application's local configuration directory, on an encrypted disk with a screen lock. They are not placed in the application's source repository, not synced to cloud storage and not transmitted to any Clariteon-operated server, because none exists.

Access tokens are short-lived and expire on Google's own schedule. The refresh token is kept only for as long as the application is in use for the channel, and is deleted when access is revoked or the application is retired. Records of what was published — titles, video ids, timestamps — are kept as our own publishing history for as long as the channel operates.

Access to the machine and to the Google account is limited to the channel operator, and the Google account itself is protected with two-step verification. If we ever become aware of a breach affecting Google user data, we will notify Google and any affected account holder without undue delay.

7. Revoking access and deleting data

The Google account holder can withdraw Clariteon Studio's access at any time, with no notice to us and no effect on videos already published:

1. Open myaccount.google.com/permissions.
2. Select Clariteon Studio in the list of third-party apps.
3. Choose Remove access.

Revoking invalidates our tokens immediately. We then delete the stored credentials from the local machine.

To ask us to delete data we hold — stored Google credentials, our publishing records, or an email exchange — write to privacy@clariteon.ai with "data deletion" in the subject. We will confirm within 30 days. Note that we cannot delete data held by Google about a Google account; that is done through your Google account.

8. YouTube API Services disclosures

Clariteon Studio uses YouTube API Services. By authorising it, the account holder is also agreeing to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

Permissions granted to Clariteon Studio can be reviewed and revoked at security.google.com/settings/security/permissions, as well as at the Google account permissions page linked above.

Clariteon Studio stores no YouTube API data beyond what is described in section 6, keeps nothing it reads from the API for longer than the run that reads it except our own publishing records, and does not aggregate or expose YouTube data to anyone.

9. Your rights

Depending on where you live, you may have the right to ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to our processing of it, and to have it provided in a portable form. If you are in the EU, UK or Switzerland these are rights under the GDPR and equivalent law; if you are in California, under the CCPA/CPRA. We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that front.

Write to privacy@clariteon.ai and we will respond within 30 days. In practice, for a visitor to this website, the honest answer is usually that we hold nothing about you. You also have the right to complain to your data protection authority.

10. Children

Our lessons are made for adult learners and this site is not directed at children under 13 (or under 16 in the EEA and UK). We do not knowingly collect data from children. Viewing happens on YouTube, whose own age requirements and privacy policy apply there.

11. Changes to this policy

If we change how data is handled — a new scope, an embedded player, anything that collects something we do not collect today — we will update this page and change the date at the top. Material changes affecting Google user data will be reflected here before the change takes effect. The page history is public in the site's source repository.

12. Contact

Privacy and data-deletion requests: privacy@clariteon.ai

Anything else: hello@clariteon.ai