fluxtube.forklabs.cc

Privacy Policy

Last updated:

The short answer

FluxTube is a single-tenant, self-hosted piece of software. There is no FluxTube service that collects data about you. The author runs his own instance against his own YouTube account and his own Miniflux instance. You can run your own; the source is on GitHub.

The longer answer below is for the Google API verification process and for anyone curious about the data flow.

What FluxTube does

FluxTube is a serverless sync job that runs on Cloudflare Workers. It:

  • Reads unread RSS entries from configured Miniflux categories on the operator's Miniflux instance.
  • Inserts the YouTube video URLs into YouTube playlists the operator has chosen, via the YouTube Data API v3.
  • Watches each tracked playlist for videos the operator has removed (i.e. watched). When a video disappears from the playlist, FluxTube marks the corresponding Miniflux entry as read.

That is the entire feature set. FluxTube does not download videos, does not comment, does not subscribe, does not modify videos, does not upload, and does not interact with anyone else's YouTube account.

Data accessed via the YouTube Data API

FluxTube uses the scope https://www.googleapis.com/auth/youtube. The minimum subset of that scope it exercises:

  • playlistItems.list — to see what's currently in the operator's playlists.
  • playlistItems.insert — to add new videos from the configured RSS feeds.

FluxTube never reads or modifies any other YouTube content: not the operator's subscriptions, channels, watch history, comments, or uploads. It never touches another user's data because the OAuth token grants access only to the operator's own account.

Where the data lives

FluxTube has no central server. Every instance is the operator's own infrastructure:

  • Compute: the operator's Cloudflare Workers account. The code is the public source — auditable.
  • Tracking state: the operator's Cloudflare D1 (SQLite) database. Schema is documented in the repo. The only data stored is which RSS entries map to which YouTube playlist items, plus timestamps.
  • OAuth refresh token: stored as a Cloudflare Worker secret on the operator's account. Never transmitted anywhere outside Google's OAuth endpoints and the operator's Worker.
  • Logs and metrics: if the operator opts in by configuring Grafana Cloud, structured logs and gauge metrics are shipped to the operator's Grafana Cloud tenant. Otherwise logs stay in Cloudflare's stdout and are ephemeral. No logs or metrics are shipped to any other party.

The author of FluxTube does not have access to your instance's data, your OAuth tokens, your D1 contents, your logs, or your metrics. There is no shared backend.

Third parties

FluxTube communicates with exactly three external services:

  • YouTube Data API (Google) — to manage the operator's own playlists. Subject to Google's Privacy Policy.
  • Miniflux — whichever instance the operator points it at, using the operator's own API token. Subject to whatever privacy policy that Miniflux instance follows.
  • Healthchecks.io — for the dead-man's-switch heartbeat. Only the run's success or failure code is transmitted; never any RSS or YouTube content. Subject to Healthchecks.io's Privacy Policy.

No data about you is sold, shared, or transmitted to any other party. FluxTube does not include analytics, advertising, or user-tracking SDKs.

This page (fluxtube.forklabs.cc)

The marketing page you're reading is a static site hosted on Cloudflare Pages. It does not run analytics, does not set cookies, does not embed third-party trackers, and does not log visitor IP addresses anywhere accessible to the site author. Cloudflare's edge handles request routing and may retain access logs per Cloudflare's policy.

The OAuth callback page reads code and state from the URL query string and displays them for the operator to copy into their local terminal. No values from the URL are transmitted, stored, or logged by this site.

Data retention and deletion

FluxTube does not retain any data about you, because it doesn't collect any. To stop FluxTube from accessing your YouTube account, revoke its access at Google Account Permissions. The operator can then delete the OAuth refresh token from their Worker secrets and drop the D1 database.

Contact

The author of FluxTube is Rami AlGhanmi. For privacy questions, OAuth verification queries, or anything else, email [email protected]. Source and issue tracker: github.com/alghanmi/fluxtube.