Your playlists.
Your session.

What Tivarune accesses

When you choose to connect YouTube, Tivarune requests the youtube.readonly permission. Through the official YouTube Data API, the app may temporarily access:

• your YouTube channel name and channel thumbnail;
• the identifiers, names, thumbnails, item counts, and visibility status of playlists available to your account; and
• video identifiers and basic video metadata from a playlist you select for import.

Tivarune does not request your Google password and cannot create, edit, or delete your YouTube content.

Session and mixer information

During Google authorization, Tivarune uses a short-lived security cookie to protect the sign-in flow. After authorization, the Google access token and its expiry time are encrypted and stored in an HttpOnly, same-site cookie. Browser scripts cannot read that cookie.

Your queue, selected playlists, Auto DJ discoveries, playback state, and unfinished Party Room form entries may be stored in this browser's session storage so they survive navigation between Tivarune pages. The browser clears session storage when its browsing session ends; you can also clear it through your browser settings. This mixer state is not written to a Tivarune account database.

Auto DJ and YouTube playback

Auto DJ sends your direction, selected vibe filters, optional custom vibe, requested result count, seed video, and recently used video identifiers to Tivarune’s server. The server uses those details to query the official YouTube Data API and returns suitable public, embeddable video metadata. Tivarune does not use your connected Google account token for Auto DJ.

Videos play through official YouTube embedded players. Google and YouTube may receive information from your browser when those players load or when you interact with them, as described in the Google Privacy Policy.

How information is used

Tivarune uses this information only to connect the correct YouTube account, show eligible playlists, import the playlist you choose into the controlled queue, find public Auto DJ suggestions, operate the two official embedded players, protect the service, and diagnose failures.

Tivarune does not sell personal information, build advertising profiles, or use Google user data for advertising.

Sharing and service providers

Information is shared only as needed to provide the service:

• Google and YouTube provide authorization, playlist data, search results, metadata, and embedded playback.
• Vercel hosts Tivarune and may process ordinary technical request information such as IP address, browser details, timestamps, and error logs for security and service operation.
• Cloudflare operates temporary Party Room connections and state, including room settings, participant display names, suggestions, votes, and playback updates.

Information may also be disclosed when required by law or when reasonably necessary to protect users, the service, or others. Tivarune does not allow unrelated third parties to access your authorized YouTube data.

Retention and deletion

Tivarune does not maintain a permanent account database of connected Google accounts, playlists, or mixer queues. The encrypted Google session cookie lasts only until the access token expires. Selecting Disconnect clears it immediately from this browser.

Party Room state is temporary. A room expires automatically at the end of its configured lifetime or after the host remains disconnected beyond the recovery window. Host recovery information may remain in that host's browser until the host ends the room or clears site data.

You can also revoke Tivarune’s access at any time from your Google Account connections. Hosting security and request logs may remain for the provider’s normal operational retention period.

Your choices and control

• You may use pasted public YouTube URLs without connecting a Google account.
• You choose whether to connect YouTube and which playlist to import.
• You can edit or remove queued videos before playback.
• You can disconnect or revoke Google access whenever you wish.

Security

Tivarune uses HTTPS in production, PKCE and state validation during OAuth, encrypted HttpOnly cookies, same-site request checks, server-only secrets, and no-store responses for connected account data. No internet service can guarantee absolute security, but Tivarune limits the data it handles and its retention by design.

YouTube terms and children

Tivarune uses YouTube API Services. By using its YouTube features, you also agree to the YouTube Terms of Service and Tivarune's Terms of Service. Tivarune is not directed to children under 13, and it does not knowingly collect personal information from children.

Changes and contact

If Tivarune materially changes how Google or YouTube data is accessed or used, this policy will be updated before the new practice begins and users will be asked to consent again when required.

For privacy questions or deletion requests, contact the developer through the support email shown on Tivarune’s Google consent screen or through the GammaKing2000 GitHub profile.