Privacy Policy

Last updated: February 6, 2026

1. Introduction

Shush ("we", "our", or "the app") is a personal, non-commercial YouTube player focused on distraction-free video watching. We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

Account Information: When you register, we collect your email address. If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google password.

User-Generated Data: We store videos you save to your library, playlists you create, channels you subscribe to, and your watch history. This data is associated with your account and is necessary for the app to function.

Technical Data: We may collect basic technical information such as your IP address for rate limiting and security purposes (e.g., preventing abuse). We do not use tracking cookies or analytics services.

3. How We Use Your Information

We use the information we collect solely to provide and maintain the Shush app, authenticate your identity, display your saved videos and playlists, enable features like subscriptions and watch history, and protect against abuse through rate limiting. We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not display advertisements. We do not use your data to build user profiles for recommendation algorithms.

4. Third-Party Services

Supabase: We use Supabase for authentication and database hosting. Your data is stored on Supabase's infrastructure. Supabase's privacy policy applies to their handling of data.

Google OAuth: If you choose to sign in with Google, the authentication is handled by Google's OAuth service. We only receive the profile information you authorize. Google's privacy policy applies to their handling of your data during the sign-in process.

YouTube: Videos are embedded and played via YouTube's IFrame Player API. When you watch a video, YouTube may collect data according to their own privacy policy. We do not control YouTube's data collection.

Cloudflare Turnstile: We use Cloudflare Turnstile for CAPTCHA verification during registration and login to prevent automated abuse.

Vercel: The app is hosted on Vercel. Vercel may process requests and log basic access information as part of their hosting service.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted by Supabase. We implement security measures including encrypted connections (HTTPS), row-level security policies on the database, input validation and sanitization, rate limiting to prevent abuse, and secure authentication via Supabase with cookie-based sessions.

6. Your Rights

You can view all data associated with your account within the app (library, playlists, subscriptions, watch history). You can delete individual videos, playlists, subscriptions, and watch history entries at any time. You can request complete deletion of your account and all associated data by contacting us.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (videos, playlists, subscriptions, watch history) will be permanently deleted from our database.

8. Children's Privacy

Shush is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or wish to request deletion of your data, please reach out via the app's support channels.