Privacy Policy

When you apply to work with us. Your name, email address, YouTube channel link, the monthly views, uploads per month and role you select, the plan you chose in the pricing configurator, anything you add in the optional notes field, and the date and time you agreed to our Service Terms.

Public information about your channel. When you apply, we may look up publicly available information about the channel you submit, such as subscriber count, video count, and recent view counts, to review your application. This is the same information anyone can see on YouTube.

When you email us. Whatever you send us, and your email address.

When you become a client. Information needed to do the work: access you grant us to your YouTube channel, performance data for the videos we work on (views, impressions, click-through rate, watch time), the titles and thumbnails we test, and messages between us. See Client data below.

Technical data. Like almost every website, our hosting provider keeps short-lived technical logs, including IP addresses, to run and secure the site.

• To review your application and reply to you. We do this on the basis of our legitimate interest in responding to people who ask to work with us.
• To deliver the service once you are a client, on the basis of our agreement with you.
• To contact you later if we think we can help your channel, on the basis of our legitimate interest in following up with people who asked to work with us. This is a personal email, not a newsletter. You can tell us to stop at any time and we will.
• To keep records we are legally required to keep, such as invoices.

When we work together, you give us access to your YouTube channel, usually as an editor in YouTube Studio or through a testing tool you connect. We use that access only to do the work you hired us for: reviewing video performance, uploading titles and thumbnails, running tests, and measuring results.

We do not download, copy, or store your channel’s revenue data. We keep records of the tests we run and their view performance so we can report results to you.

We may use Feedzy, a production workspace operated by ThumbMastery LLC, to organize our work on your channel. Data stored there is covered by the Feedzy Privacy Policy.

Where we bring in designers to produce thumbnails, they see only what they need for the task (briefs, source images, and reference material) and are bound by confidentiality obligations. They do not get access to your channel.

You can remove our channel access at any time. When our work together ends, we remove ourselves from your channel and stop accessing your data.

• Vercel hosts the website and keeps the technical logs mentioned above.
• Supabase stores application data.
• PostHog provides website analytics.
• Telegram delivers a notification to us when an application arrives, containing the details you submitted.
• Google (YouTube) provides public channel information and, for clients, the YouTube Studio access you grant.
• Email and messaging services we use to communicate with you.
• Feedzy, operated by us, as described above.

These providers may process data in the United States or other countries. Where data leaves the EU or UK, they rely on recognised safeguards such as standard contractual clauses and the UK data bridge.

We never sell your information, and we never share it with anyone except the providers above and where the law requires it.

We use PostHog for website analytics, to understand where the site can improve. You can opt out of analytics by emailing us.

This site uses first-party cookies set by PostHog for analytics. It sets no advertising cookies or third-party tracking cookies.

• Applications: 24 months after you apply, then deleted. If you become a client, the information moves to our client records.
• Client records (test logs, performance data, messages): for the length of our work together and 24 months after it ends, so we can answer questions about past results.
• Invoices and payment records: 7 years, as required for tax purposes.
• Emails: until you ask us to delete them or they are no longer needed.
• Technical logs: short-lived, as set by our hosting provider.

You can ask us at any time to show you the information we hold about you, correct it, delete it, or send you a copy in a portable format. You can also object to how we use it. Email yaroslav@thumbmastery.com and we will respond within 30 days.

If you are in the EU or UK (GDPR): we process your data on the basis of legitimate interest (responding to applications and running our business) and contract (delivering the service to clients). You have the right to object, to request restriction of processing, and to complain to your local data protection authority. UK residents can complain to the Information Commissioner’s Office at ico.org.uk.

If you are in California (CCPA): we do not sell your personal information. You have the right to know what we collect, to request deletion, and not to be treated differently for exercising your rights.

ThumbMastery is operated from the United States. If you are outside the United States, your information will be transferred to and processed in the United States, where we and our providers are located, with the safeguards described above.

ThumbMastery is not intended for anyone under 18. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has given us their information, email us and we will delete it.

If we change how we handle your information, we will update this page and the date at the top before the change takes effect. For significant changes affecting current clients, we will email you.