Legal
Privacy Policy
Last updated: November 7, 2026. Versión en español. If the two versions differ, the Spanish version prevails.
This policy explains what data Archivo Umbral processes, why, and how it is protected. It covers this website and the "Archivo Umbral" publishing tool, which is the application that identifies itself to Google under that name.
1. Controller
The controller is the owner of the Archivo Umbral YouTube channel. For any privacy question, contact us through the Archivo Umbral YouTube channel.
2. What the publishing tool is
Archivo Umbral is a program that runs on the channel owner's personal computer. Its only purpose is to upload the channel's own videos to YouTube, with their title, description, tags and thumbnail, and then check that each upload finished correctly. Videos are uploaded as private; making them public is a manual decision taken by the owner in YouTube Studio.
The tool is not a service for third parties. Only the owner uses it, with their own Google account and their own channel. It has no server, no sign-in page and no external users.
3. YouTube API Services and requested scopes
The tool uses the YouTube API Services (YouTube Data API v3). By using it, the owner agrees to the YouTube Terms of Service, and data handled by Google is governed by the Google Privacy Policy.
It requests only these two OAuth 2.0 scopes:
| Scope | Purpose |
|---|---|
https://www.googleapis.com/auth/youtube.upload | Upload the channel's videos and their custom thumbnail. |
https://www.googleapis.com/auth/youtube.readonly | Read the connected channel's ID and name, to check that it is Archivo Umbral before uploading anything. Read the status of uploaded videos (processing and privacy) and the channel's uploads list, to verify each upload and avoid duplicates. |
The tool does not request access to comments, messages, subscribers, analytics or revenue, nor to email, contacts or any other Google service.
4. Data processed
- From the owner's YouTube account: the channel ID and name, and for each uploaded video its ID, processing status and privacy status.
- Access credentials: the application's OAuth client ID, the refresh token Google issues when the owner authorizes the connection, and the short-lived access tokens obtained from it.
- Activity logs: the date, title, ID and status of each upload, kept as a history so that uploads are never repeated.
The tool does not process data about viewers or any other people: it does not read comments, profiles, subscribers or audience statistics.
5. Where and how data is stored
- Everything is stored only on the owner's computer. There is no Archivo Umbral server that receives this data.
- The refresh token and the OAuth client data are stored encrypted with Windows Data Protection (DPAPI) in the user's local profile folder. Only that Windows account can decrypt them.
- Short-lived access tokens (valid for about one hour) exist only in memory while the program runs.
- Credentials are never written to source code, activity logs or repositories, and are never displayed on screen.
- All communication with Google uses HTTPS.
6. Sharing
None. Data obtained from Google APIs is not sold, shared or transferred to third parties, is not used for advertising and is not used to train artificial intelligence models. The only communication is with Google itself, which is required to upload and verify the videos.
Archivo Umbral's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. Retention and deletion
- The refresh token is kept for as long as the owner wants to keep the connection. Google may invalidate it under its own rules, for example after a long period without use.
- The upload history is kept for as long as the tool is used, to prevent duplicates.
- Deleting the tool's local folder removes everything. Videos already uploaded remain on YouTube until the owner deletes them in YouTube Studio.
8. Revoking access
The tool's access to the Google account can be revoked at any time from the Google security permissions page (myaccount.google.com/permissions). From then on, the tool can no longer upload or read anything.
9. This website
This is a static website hosted on Cloudflare Pages. We do not use any cookies, forms, analytics or tracking code of our own. Like any hosting provider, Cloudflare may process technical data about visits (for example, IP addresses) to deliver and protect the pages, under its privacy policy.
Links to YouTube lead to a Google service, which has its own privacy policy.
10. Children
The tool is not directed at children and does not process children's data. The channel's videos are not marked as made for kids.
11. Changes
If this policy changes, the new version will be published here with a new update date. If the tool ever needed a scope other than the two described here, this page would be updated before requesting it.