Privacy Policy
Video Research Vault — a Chrome extension by Six Cents Productions
Last Updated: February 22, 2026 • Effective Date: February 22, 2026
1. Who We Are
Video Research Vault is a Chrome extension developed and operated by Six Cents Productions, LLC ("Six Cents," "we," "us," or "our"). We are a YouTube strategy and content agency based in the United States.
For the purposes of the EU General Data Protection Regulation (GDPR), Six Cents Productions, LLC is the data controller for the processing activities described in this policy - specifically, newsletter subscriber email addresses and activation key validation.
Contact: contact@sixcentsprod.com
Website: sixcentsprod.com
2. What Video Research Vault Does
Video Research Vault is a Chrome extension that allows you to save YouTube video and thumbnail reference data to your own Google Sheet with a single click while browsing YouTube watch pages. It is designed for YouTube content creators, thumbnail designers, and video strategists who need a fast way to build reference libraries.
Architecture note: Video Research Vault has no backend server. We do not operate a database or cloud infrastructure that stores your personal data. All extension data is stored locally on your device in your browser's local extension storage, or written directly to the Google Sheet you designate. The only exceptions are activation key validation (via LemonSqueezy, described below) and optional newsletter subscription (via Kit/ConvertKit, described below).
3. Information We Collect and Where It Lives
a) Data Stored Locally on Your Device
Video Research Vault stores the following data locally on your device using Chrome's extension storage (chrome.storage.local). This data never leaves your device except where explicitly noted:
| Data | Purpose |
|---|---|
sheet_id | The Google Sheet ID you've designated for saving videos |
sheet_name | The name of the sheet tab where data is saved |
save_count | A local counter tracking how many videos you've saved |
saved_video_ids | A list of video IDs you've already saved, used to prevent duplicate entries |
| Collection data | Any collection categories or groupings you've organized within the extension. If you delete a collection tab directly in your Google Sheet, the extension automatically detects and removes the corresponding local metadata the next time you open the collection picker. |
license_key | Your activation key, if you've entered one |
license_valid_until | The expiry timestamp of your locally cached key validation result |
pending_saves | Any saves queued while you're offline, to be retried automatically when you reconnect. Queued saves are retained locally for up to 7 days and are automatically discarded if they cannot be completed within that period. |
We have no access to this data. It is not transmitted to us. To delete all local data, use the Sign Out button inside the extension - this clears all locally stored data as part of the sign-out flow. You can also uninstall the extension to remove all local data.
b) YouTube Video Metadata (via YouTube Data API)
When you click the save button on a YouTube watch page, Video Research Vault uses the YouTube Data API v3 to retrieve publicly available metadata about the video, including:
- Video title
- Video ID and URL
- Thumbnail image URL
- Channel name
- View count
- Upload date
This metadata is written directly to your designated Google Sheet. We do not store this data on our servers. You are responsible for managing data in your own Google Sheet in compliance with YouTube's Terms of Service. Six Cents does not retain any YouTube API data.
c) Google Account Access (via OAuth 2.0)
To access the YouTube Data API and to write data to your Google Sheet, Video Research Vault requests access to your Google account through OAuth 2.0, managed by Chrome's Identity API (chrome.identity.getAuthToken).
The OAuth scopes we request are:
- youtube.readonly - allows the extension to retrieve publicly available video metadata from the YouTube Data API on your behalf. We do not access your YouTube account settings, private videos, watch history, subscriptions, or any personal YouTube account data.
- spreadsheets - allows the extension to write video data to the specific Google Sheet you have designated. We do not access any other Google Drive files.
We do not access your Gmail, Google Contacts, Google Calendar, or any other Google service.
We do not persist or transmit your OAuth tokens. Tokens are managed by Chrome's identity system and are only used in-memory to make authorized API calls on your behalf. We never see, store, or have independent access to these tokens. You may revoke Video Research Vault's access to your Google account at any time through your Google Account security settings.
d) Activation Key Validation (LemonSqueezy)
If you have entered an activation key, the extension validates that key by sending a request to LemonSqueezy, our licensing platform. The validation request contains only:
- Your license key string
- A static identifier indicating the request comes from the Chrome extension (the string "chrome-extension")
We do not send your name, email address, IP address, or any other personal data to LemonSqueezy during key validation. Validation results are cached locally on your device for 7 days. LemonSqueezy's privacy policy: lemonsqueezy.com/privacy
e) Email Address (Newsletter Subscribers Only - Optional)
If you choose to subscribe to the Josh Howard newsletter (joshuahoward.me) to receive a free activation key, your email address is collected and managed by Kit (ConvertKit), our email service provider. This is entirely optional. You can use Video Research Vault without providing your email address. Kit's privacy policy: kit.com/privacy
4. Google API Services - Limited Use Disclosure
Video Research Vault's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
The use of information received from Google APIs will also adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Specifically:
- We request access only to YouTube (read-only for video metadata) and Google Sheets (write access to your designated sheet), and only to perform actions you explicitly trigger
- We do not share Google user data with third parties, except as strictly necessary to operate the extension (activation key validation via LemonSqueezy does not involve Google user data)
- We do not use Google user data for advertising, profiling, or analytics
- We do not allow humans to read your Google user data unless required for security purposes or legal compliance with your explicit consent
- We do not store Google user data on our servers
- We do not use Google user data to train machine learning or AI models
- Tokens are stored locally and managed by Chrome; we have no access to them
5. How We Use Your Information
We use the information described above solely to:
- Deliver the core functionality of Video Research Vault (saving YouTube video data to your Google Sheet)
- Validate your activation key if you have entered one
- Send you activation key delivery and newsletter communications, if you have subscribed (optional)
We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. We do not use your data for advertising.
6. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google APIs (YouTube Data API v3, Google Sheets API) | Core extension functionality | Google Privacy Policy |
| LemonSqueezy | Activation key validation | LemonSqueezy Privacy Policy |
| Kit (ConvertKit) | Optional newsletter and activation key delivery | Kit Privacy Policy |
Your use of YouTube data through Video Research Vault is also subject to the YouTube Terms of Service.
7. International Data Transfers
Six Cents Productions, LLC is based in the United States. If you are located outside the United States, please be aware that information we process may be transferred to, stored, and processed in the United States.
Specifically:
- Newsletter subscriber email addresses are stored by Kit (ConvertKit), which is based in the United States.
- Activation key validation requests are processed by LemonSqueezy, which is based in the United States.
For transfers of personal data from the EU/EEA to the United States, we rely on the transfer mechanisms used by our third-party service providers, which may include the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs). You can review the data transfer practices of Kit and LemonSqueezy via their respective privacy policies linked in Section 6.
8. Data Retention and Deletion
| Data | Location | How to Delete |
|---|---|---|
| YouTube video metadata saved | Your Google Sheet (only) | Delete rows directly from your Google Sheet |
| Local extension data (settings, save history, key) | Your device (chrome.storage.local) | Click Sign Out in the extension (clears all local data), or uninstall the extension |
| Google OAuth tokens | Your browser (managed by Chrome/Google) | Click Sign Out in the extension (calls Google's revocation endpoint and clears local token cache), or revoke at myaccount.google.com/permissions |
| Email address (newsletter subscribers) | Kit (ConvertKit) | Click "unsubscribe" in any newsletter email to stop receiving communications. To request full deletion of your email address from Kit's systems, contact us at contact@sixcentsprod.com. |
We do not retain your personal data on our servers because we do not operate servers that store user data. If you submit a data deletion request to us, we will respond within 30 days.
9. Data Security
- No backend server means no server-side data breach can expose your usage data
- Google OAuth tokens are managed entirely by Google and Chrome - we never see them
- Local extension data is protected by Chrome's extension security model and sandboxing
- LemonSqueezy key validation transmits only a license key string - no personal data
We take reasonable care in selecting third-party services, each of which implements industry-standard security practices. No method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Video Research Vault is not directed at children under the age of 13 (or under the age of 16 for users in the European Union, or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us at contact@sixcentsprod.com and we will promptly address it.
11. Your Rights
All Users
- Access: You may request a description of any personal data we hold about you
- Deletion: You may request deletion of any personal data we hold. Because we store almost no server-side data, most of your data can be fully deleted by uninstalling the extension (local data) and requesting deletion of your email from Kit (email data)
- Opt-out: You may unsubscribe from newsletter communications at any time by clicking "unsubscribe" in any email
To exercise these rights, contact us at contact@sixcentsprod.com.
EU/EEA Users (GDPR)
If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including: the right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, and right to object to processing.
The legal basis for processing email addresses of newsletter subscribers is your consent (Article 6(1)(a) GDPR), which you may withdraw at any time by unsubscribing. The legal basis for processing data during activation key validation is our legitimate interest in verifying license validity (Article 6(1)(f) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
California Users (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to deletion, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information (we do not sell or share personal information), and the right to non-discrimination for exercising your privacy rights.
Categories of personal information we collect:
| Category | Examples | Source | Purpose | Third Parties |
|---|---|---|---|---|
| Identifiers | Email address (newsletter subscribers only) | You (directly, via newsletter sign-up) | Deliver activation key and newsletter | Kit (ConvertKit) |
| Internet or electronic network activity | License key validation data | You (directly, via entering an activation key) | Verify license validity | LemonSqueezy |
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will make reasonable efforts to notify newsletter subscribers. Continued use of Video Research Vault after any changes constitutes your acceptance of the updated policy.