Privacy Policy

Picture the Room ("we", "us") helps creators see what their numbers look like as a crowd of real people. This policy explains what we collect, why, and the choices you have. It applies to the website at theroom-pink.vercel.app and any related pages.

Information we collect

• Numbers you enter. When you type a number into the tool, it is processed in your browser to draw the crowd. We do not store the numbers you try.
• Account information. If you sign in, we receive your name, email address, and profile picture from your Google account through our authentication provider (Supabase), so we can create and secure your account.
• Connected YouTube data. If you connect YouTube, we access your public channel statistics — subscriber count, total view count, and video count — on a read-only basis. We store your channel's public identifiers (ID, title, handle, thumbnail), periodic snapshots of those counts, and a Google refresh token used only to fetch updated statistics. We never post, edit, or delete anything on your account.
• Usage analytics. We use privacy-respecting analytics (such as PostHog) to understand which features are used and how the site performs. This may include pages viewed and actions taken, along with general device and browser information.
• Cookies. We use cookies that are necessary to keep you signed in, and analytics cookies to measure usage.

How we use your information

• To provide the core experience — rendering your numbers and audience as a crowd.
• To authenticate you and keep your account secure.
• To fetch and display your connected channel's statistics when you ask for them.
• To understand usage, fix problems, and improve the product.

YouTube API Services

Picture the Room uses YouTube API Services. By connecting your channel, you also agree to the YouTube Terms of Service, and your data is handled in accordance with the Google Privacy Policy.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We only request read-only access, use your YouTube data solely to show you your own audience, do not sell it, and do not use it for advertising.

You can disconnect at any time by signing out, and you can revoke our access to your Google account directly at myaccount.google.com/permissions.

How we share information

We do not sell your personal information. We share it only with service providers that help us operate — for example our hosting and database (Vercel, Supabase), authentication (Google), and analytics — and only to the extent needed to run the service, or where required by law.

Data retention and deletion

We keep your account and connected-channel data while your account is active. You can request deletion of your account and associated data at any time by contacting us, and we will remove it, subject to any legal retention obligations.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these, contact us using the details below.

Security

We take reasonable measures to protect your information. Access tokens are stored server-side and are never exposed to your browser. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you.

Contact

Questions about this policy or your data? Contact us at tareeqcodes@gmail.com.