隱私政策

最後更新日期：2026 年 10 月 4 日

YouTools（以下稱「本服務」，目前提供 Channel Verify 等工具）由 rnao studio 經營。本政策說明我們如何蒐集、使用與保存資料。我們只蒐集提供服務所需的最少資料，不會出售您的資料，也不會建立跨活動追蹤粉絲的個人檔案。

1. 我們蒐集哪些資料

主辦者（使用後台的創作者、品牌、小編）

  • Google 登入資訊：名稱與 Email，用於建立帳號與聯繫。我們不會存取您的 YouTube 頻道或 Google 帳號中的其他資料。
  • 活動資料：活動名稱、驗證影片網址、您上傳的資格名單（頻道 ID、handle、名稱、排序）與電子序號。
  • 訂單資料：購買的方案、金額、付款狀態與 SHOPLINE Payments 交易編號。

參加者（到活動頁驗證的粉絲）

  • 您輸入的頻道資訊：@handle、頻道網址或頻道 ID，用於比對資格名單。
  • YouTube 公開資訊：本服務讀取驗證影片的公開留言，取得留言者的頻道 ID、handle、顯示名稱與頭像網址；若名單缺少頻道名稱，會讀取該頻道的公開頁面補上。這些都是 YouTube 上公開可見的資訊。
  • 驗證與領獎紀錄：驗證時間、留言編號、發給您的電子序號、兌換憑證狀態與兌換時間。兌換 QR Code 只以雜湊值保存。
  • 瀏覽器本機資料：驗證進度與領獎憑證保存在您瀏覽器的 localStorage，方便重新整理後繼續，不會傳給第三方。

系統紀錄

  • 為防止濫用，我們以 IP 位址做短時間的查詢次數限制（僅存在伺服器記憶體，不寫入資料庫）。
  • 為改善服務，我們記錄使用事件（例如查詢、驗證結果、建立活動），用於統計成功率與錯誤原因。事件不包含參加者的頻道或任何個人資料。

2. 資料用途

  • 提供身分驗證、發放序號與兌換憑證、現場核銷
  • 讓主辦者查看驗證狀態與匯出報表（主辦者只看得到自己活動的資料）
  • 處理付款、退款與客服
  • 寄送與服務相關的必要通知（例如付款確認）
  • 統計服務使用狀況、偵測錯誤與防止濫用

3. 主辦者與我們的角色

參加者的驗證與領獎資料，是為主辦者的活動而處理。主辦者決定活動目的與名單內容，並可於後台查看、匯出；本服務依主辦者的活動設定處理這些資料。對活動或獎品有疑問，請洽主辦者；要求刪除資料，可聯繫主辦者或直接來信給我們。

4. 第三方服務

  • Google（Firebase）：帳號登入、網站主機、資料庫與後端運算。資料庫與後端位於 Google Cloud 臺灣區域（asia-east1）。
  • SHOPLINE Payments：信用卡付款與退款。完整卡號由金流服務商處理，本服務不會取得或儲存。
  • YouTube：讀取驗證影片的公開留言與頻道公開頁面。參加者在 YouTube 留言時，適用 YouTube 服務條款與 Google 隱私權政策。

除上述為提供服務所必需的服務商外，我們不會將資料提供給第三方，法令要求者除外。本服務目前未使用廣告追蹤像素。

5. 保存期限

  • 驗證碼：產生後約 1 天自動刪除
  • 使用事件紀錄：180 天後自動刪除
  • 活動、名單與驗證紀錄：保存至主辦者刪除活動。刪除後立即無法存取；如需永久刪除資料，請來信，我們會在 7 個工作天內處理
  • 訂單與交易紀錄：依稅務與會計法令所需期間保存

6. 您的權利

您可以來信要求查詢、更正或刪除您的資料，或刪除您的主辦者帳號。參加者也可以隨時刪除自己在 YouTube 上的驗證留言；刪除留言不會影響已完成的驗證紀錄，如需一併刪除，請來信並提供活動網址與頻道。

7. 資料安全

資料庫禁止瀏覽器直接存取，所有讀寫都經過後端權限檢查；傳輸全程使用 HTTPS；付款金鑰存放於 Google Secret Manager；工作人員掃碼連結只有主辦者看得到，並可隨時重設。

8. 政策變更與聯絡

本政策如有重大變更，將於網站公告。如有任何問題，請來信：youtools@googlegroups.com

Privacy Policy

Last updated: October 4, 2026

YouTools (the "Service", currently including Channel Verify) is operated by rnao studio. This policy explains what data we collect, why, and how long we keep it. We collect only what we need to run the Service, we never sell your data, and we don't build cross-campaign profiles of fans.

1. What we collect

Organizers (creators, brands and teams using the dashboard)

  • Google sign-in: your name and email, to create your account and contact you. We never access your YouTube channel or other Google account data.
  • Campaign data: campaign name, verification video URL, the eligible lists you upload (channel IDs, handles, names, order) and reward codes.
  • Orders: plan purchased, amount, payment status and SHOPLINE Payments transaction ID.

Participants (fans verifying on a campaign page)

  • Channel you enter: @handle, channel URL or channel ID, to check the eligible list.
  • Public YouTube data: we read the verification video's public comments to get the commenter's channel ID, handle, display name and avatar URL; if the list lacks a channel name we read the channel's public page. All of this is publicly visible on YouTube.
  • Verification and reward records: verification time, comment ID, the reward code issued to you, pass status and redemption time. QR passes are stored only as hashes.
  • Browser storage: your progress and pass are kept in your browser's localStorage so you can resume after a refresh. It is not shared with third parties.

System records

  • To prevent abuse we rate-limit requests by IP address (held briefly in server memory, not written to the database).
  • To improve the Service we record usage events (e.g. lookups, verification results, campaigns created) to measure success rates and errors. These events contain no participant channel or personal data.

2. How we use it

  • To verify channels, issue reward codes and passes, and redeem them on site
  • To let Organizers see verification status and export reports (Organizers only see their own campaigns)
  • To process payments, refunds and support requests
  • To send necessary service notices (e.g. payment confirmation)
  • To measure usage, detect errors and prevent abuse

3. Organizers and us

Participants' verification and reward data is processed for the Organizer's campaign. The Organizer decides the campaign's purpose and list and can view and export this data; we process it according to the campaign settings. For questions about a campaign or prize, contact the Organizer; to request deletion, contact the Organizer or email us directly.

4. Third-party services

  • Google (Firebase): sign-in, hosting, database and backend. Database and backend run in Google Cloud's Taiwan region (asia-east1).
  • SHOPLINE Payments: card payments and refunds. Full card numbers are handled by the payment provider; we never receive or store them.
  • YouTube: reading public comments on verification videos and public channel pages. Commenting on YouTube is subject to YouTube's Terms of Service and Google's Privacy Policy.

Apart from the providers above, we don't share data with third parties unless required by law. The Service currently uses no advertising tracking pixels.

5. Retention

  • Verification codes: deleted automatically about 1 day after creation
  • Usage events: deleted automatically after 180 days
  • Campaigns, lists and verification records: kept until the Organizer deletes the campaign. Deleted campaigns are inaccessible immediately; email us to have the data permanently erased within 7 business days
  • Orders and transactions: kept as long as required by tax and accounting law

6. Your rights

You can email us to access, correct or delete your data, or to delete your Organizer account. Participants can delete their verification comment on YouTube at any time; this doesn't remove the completed verification record — email us with the campaign link and your channel if you'd like that deleted too.

7. Security

Browsers cannot access the database directly; every read and write goes through server-side permission checks. All traffic uses HTTPS, payment keys are kept in Google Secret Manager, and staff scanner links are visible only to the Organizer, who can reset them at any time.

8. Changes and contact

We'll announce material changes on the site. Questions? Email youtools@googlegroups.com