This Privacy Policy explains what information is accessed, stored and shared by the music tools that Martin Barker operates on martinbarker.me, and the choices you have. It covers:
- Trawl, a Discord bot (with its results pages on martinbarker.me and bot.martinbarker.me) that adds YouTube links shared in Discord channels to a YouTube playlist;
- Listogs (martinbarker.me/listogs), which turns a Discogs release, label or artist into a YouTube playlist; and
- RipTag (martinbarker.me/riptag), which renders audio and cover art into a video and uploads it to YouTube.
Together these are the "Services". It applies alongside our Terms of Service.
1. We use YouTube API Services
The Services use YouTube API Services to create playlists, add videos to playlists and upload videos on your behalf. When you connect YouTube, your information is also handled by Google under the Google Privacy Policy, and your use of YouTube is governed by the YouTube Terms of Service.
2. What we access from your YouTube account
Signing in with Google asks for one permission, youtube.force-ssl, shown by Google as "See, edit, and permanently delete your YouTube videos, ratings, comments and captions". We use it only for the actions listed below. We never delete videos, rate videos, or read or post comments or captions.
- Trawl: reads your channel's name and ID (to show which account is connected), lists your playlists (so you can pick one), reads the items in the playlist you choose (to skip videos already in it), creates a playlist if you ask it to, and adds the videos found in your Discord channels to it.
- Listogs: creates a playlist with the title, description and privacy setting you enter (or uses an existing playlist you paste), then adds the release's videos to it.
- RipTag: uploads the video you rendered, with the title, description, tags and privacy setting you choose, and sets the thumbnail you pick.
3. Other information we process
- Discord (Trawl): music links posted in the channels a server admin selects, with the message and channel IDs and the poster's Discord user ID needed to build the playlist. The bot does not read channels it was not pointed at, or direct messages.
- Discogs (Listogs, RipTag): release and tracklist data you look up. If you sign in to Discogs, its token is kept in your browser.
- Files (RipTag): audio and images are processed in your browser. To upload, the finished video is sent through our server straight to YouTube. It is held in memory only for the upload and is not saved.
4. Where your YouTube sign-in is stored
- martinbarker.me (Listogs, RipTag): your Google access and refresh tokens are kept in your browser's local storage and in a server-side session identified by a session cookie. They are not written to any database.
- Trawl: your refresh token is stored encrypted (AES-256-GCM) in Trawl's database, with your YouTube channel name and ID, keyed to your Discord user ID. Trawl also stores scan results (the links found and their Discord message IDs) and your playlist settings, so it can add new videos on the schedule you set.
5. Cookies and local storage
martinbarker.me uses one session cookie to keep you signed in while you use a tool, and your browser's local storage to remember your YouTube and Discogs sign-ins and preferences such as dark mode. We do not use advertising or analytics cookies, and we do not track you across other sites.
6. How we use and share information
We use this information only to provide the features you ask for. We do not sell it, use it for advertising, or share it with anyone except the services needed to perform your request (Google/YouTube, Discord and Discogs) and our hosting provider (Amazon Web Services), or where required by law. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
7. Revoking access
- Click Sign out in the YouTube box on Listogs or RipTag, or Sign out in Trawl. This revokes our access at Google and deletes the stored sign-in.
- At any time, remove access from your Google Account's security settings: https://security.google.com/settings/security/permissions.
- Remove the Trawl bot from your Discord server to stop it reading that server's messages.
8. Data retention and deletion
- martinbarker.me: signing out deletes your tokens from the server session and your browser immediately. Server sessions are kept in memory only and end when the session ends or the server restarts.
- Trawl: signing out deletes your stored token, channel name and ID, playlist settings and push history immediately. If you revoke access from your Google Account instead, the stored token stops working at once, and Trawl deletes the same data within 24 hours.
- Refreshing stored YouTube data: Trawl re-fetches your channel name and playlist titles from YouTube once a day. Anything it cannot refresh is deleted before it is 30 days old.
- On request: email [email protected] to delete any data linked to your YouTube account, Discord account or server, including Trawl scan results. We do it within 7 days and confirm by email.
- Videos and playlists created in your YouTube account stay there until you remove them on YouTube.
9. Security
Tokens are sent only over HTTPS. Trawl encrypts stored tokens, and martinbarker.me does not store them in a database. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
The Services are not directed to children under 13 (or the minimum age to use YouTube or Discord where you live), and we do not knowingly collect their information.
11. Changes to this policy
If we change this policy, we will update the "Last updated" date above. Continuing to use the Services after a change means you accept the updated policy.
12. Contact
For privacy questions or data requests, email Martin Barker at [email protected].