Privacy Policy

Last updated: 2026-05-13

HookFindr ("we", "us") provides a video transcription service. This page explains what we collect and what we do with it. Plain English, no lawyer talk.

What we collect

The video URL you submit. We send it to our extraction service to fetch the audio.
Your IP address. Used solely for rate limiting on the free tier (5 transcripts per IP per 30-day rolling window). Not associated with any other identity.
Transcripts. We cache transcripts of public videos (keyed by URL hash) so subsequent users get instant results. Transcripts contain only what's audible in the public video — no private data we don't have access to.
Email address. If you sign in via magic-link or Google SSO (to unlock the 5/day free tier) or create a paid account, we store your email so we can authenticate you and let you know when paid plans launch. Email magic-links are sent via a transactional email provider (Resend). Not sold, not shared, not added to marketing lists.
Google OAuth tokens (if you Continue with Google). We store your encrypted Google OAuth refresh token so we can fetch your YouTube uploads when you visit the dashboard. We request only the `youtube.readonly` scope — we cannot post, modify, delete, or write anything to your YouTube account. The refresh token is encrypted at rest with AES-GCM using a key derived from a server-side secret. You can revoke our access at any time via your Google Account permissions page or by clicking "Delete my data" in the HookFindr dashboard.
Display name and avatar from the providers you link (Google profile picture, etc.) — shown only to you in the dashboard so you can confirm you're signed in to the correct account.
Transcript history. If you're signed in, we store the URLs of videos you've transcribed (and the resulting transcript metadata) so the dashboard can show your history across devices. Auto-purged 90 days after last access, or instantly when you click "Delete my data."
Authentication cookie (`hf_auth`). When you sign in, we set one HttpOnly cookie that identifies your account for 90 days. Sign out clears it.
Anonymous traffic stats via Cloudflare Web Analytics — page views, country, referrer. No tracking cookies. No personal identifiers.

What we don't collect

No tracking cookies. The only cookie we set is the auth cookie above, and only if you choose to sign in.
No third-party analytics (no Google Analytics, no Facebook Pixel).
No selling or sharing of any data with advertisers.
No content from videos behind authentication walls — we only transcribe publicly accessible URLs.

How transcription works

When you submit a URL, we fetch the public audio and route it through our edge infrastructure provider, which runs the AI speech-to-text inference. The audio is processed transiently and is not retained after the inference call. Our infrastructure provider's privacy policy governs their handling of the data in transit.

Your rights

Request deletion of your account and all associated data: email [email protected].
Request what data we hold about you: same email.
Cancel a paid subscription at any time via your account dashboard or by emailing us.

Changes

We'll update this page if we change anything material. Continued use means you've accepted the current version.

Contact

[email protected]

Home · About · Pricing · FAQ · Blog · Terms