Privacy Policy — The Roses Playlist Reader

Effective date: September 25, 2026

The Roses Playlist Reader ("the app"), operated by The Roses (theroses.io), is a private, single-user tool used by its owner to read the owner's own account data. This policy explains what Google user data the app accesses, how it is used, stored, and shared.

1. What Google user data the app accesses

With the owner's explicit consent, the app requests one read-only OAuth scope:

• https://www.googleapis.com/auth/youtube.readonly — read access to the owner's YouTube account: channel information and statistics, playlists, videos within those playlists, and subscriptions.

The app does not request access to Gmail, Drive, Calendar, Contacts, or any other Google service through this application.

2. How the data is used

Data read from the YouTube API is used solely to answer the owner's own questions about their own saved videos — for example, listing playlists, showing the contents of a playlist, or locating which playlist contains a given video. Output is shown to the owner on their own computer.

The data is not used for advertising, is not used to train machine-learning models, is not used to determine creditworthiness or for lending purposes, and is not sold.

3. How the data is stored

• An OAuth refresh token and cached API responses are stored locally on the owner's own computer, with file permissions restricting access to the owner's user account.
• No Google user data is stored on any server operated by the app's author or by any third party.
• Access can be revoked at any time at myaccount.google.com/permissions, after which the app can no longer read any data. The locally stored token can also be deleted at any time.

4. Sharing

No Google user data is shared, transferred, or disclosed to any third party. The app has a single user: its owner.

5. Google API Services User Data Policy — Limited Use

The Roses Playlist Reader's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Security

All communication with Google APIs uses HTTPS. OAuth credentials are stored locally with owner-only file permissions on the owner's device.

7. Changes

Any change to this policy will be published on this page with an updated effective date.

8. Contact

Questions about this policy or about data handling: michaelrosejr@gmail.com.