Privacy Policy

Version 2026-10-08. This policy is linked from every page of the website, from the signup form and from the extension.

Who is responsible

SponsorScope is operated by Volted Media. Contact us about privacy at hello@sponsorscope.ca.

YouTube API Services

SponsorScope uses YouTube API Services to look up public information about YouTube channels and videos. Google's handling of that information is described in the Google Privacy Policy. By using SponsorScope you also agree to the YouTube Terms of Service. SponsorScope never asks you to sign in with Google and never accesses your own YouTube account.

What we collect and store, and how

• Account details. Your email address, whether you've confirmed it, and the version and time you accepted these terms. Your password is never stored by us: Supabase, our account-security provider, stores and checks it on our behalf.
• Sign-ins. A session cookie on the website (the server keeps only a hash of it; it expires 30 days after your last visit) and, for each browser where the extension is signed in, a device token (again, only a hash on our side) labeled with the browser name, such as "Chrome on macOS", and when it was last used.
• Security counters. To stop password guessing, we count sign-in, signup and reset attempts per hour. The counters are keyed by a one-way keyed hash of your email address or IP address, never the address itself, and are deleted after about an hour.
• Billing. If you subscribe, Stripe handles your payment. We store your Stripe customer ID, your subscription's status, its renewal date and whether it's set to cancel. Your card details go directly to Stripe; we never see them.
• Pricing settings. If you change your pricing benchmarks on the Settings page (CPM figures, the dedicated-video multiplier, which niche a borrowed niche uses, and any short source notes you type), we store those values with your account so the dashboard and the extension can use them. Nothing is stored if you leave the defaults.
• Usage. For each day, how many lookups and audience estimates you made and how much of YouTube's quota they used (kept 90 days), and the IDs of the channels counted toward your free lookups.
• YouTube data. Public channel and video information from YouTube API Services, kept in a shared cache for at most 24 hours and then deleted; links from a handle or video to its channel, kept for 7 days. Audience estimates are stored only as totals and percentages. We never store the IDs, names or comments of the individual people whose public comments are used for an estimate.
• Creators' public contact emails. When you look up a channel, SponsorScope finds the email addresses the creator posted publicly in their channel description and recent video descriptions, and shows them to you. They are held in the same shared cache as the rest of the YouTube data for at most 24 hours and then deleted. We don't tie them to your account, keep a list of the addresses you looked at, or send anything to them, and we never visit a creator's website to look for them.
• Emails we send. Verification and password reset emails are sent through Resend, which receives your email address and the message.
• The extension. It keeps its sign-in token and whether you collapsed the panel in your browser's extension storage; your pricing settings come from your account. On youtube.com only, it reads the address of the page you're on and sends it to SponsorScope to look up that channel. It doesn't read anything else on the page, your browsing history or other sites.

How we use it

To run your account and the lookups you ask for, to enforce the free-lookup and daily limits, to bill you, to prevent abuse and to answer you when you contact us. We don't use it for advertising and we don't sell it.

Who we share it with

• Cloudflare, which hosts SponsorScope and its database, and checks the signup, login and password-reset forms aren't bots (Turnstile).
• Supabase, which stores and checks your password and issues the one-time signup and password-reset links.
• Stripe, for payments (your email and customer ID).
• Resend, to deliver account emails.
• Google, through YouTube API Services: our requests contain the channel, handle or video being looked up, never who you are.
• Authorities, if the law requires it.

Cookies

One strictly necessary cookie keeps you signed in. There are no analytics or advertising cookies.

Deleting your data

Go to your account page and use Delete account. It cancels any subscription immediately, deletes your account and everything linked to it, and signs you out. You can also email hello@sponsorscope.ca and we'll delete it within 30 days. Stripe keeps records of past payments as tax law requires. To remove the extension's data from your browser, sign out in the extension or remove the extension.

Your rights

You can ask to see, correct or delete your personal information, or ask a question about how we handle it, at hello@sponsorscope.ca.

Changes

We'll post any change here with a new version date and email account holders about material changes.