Privacy policy
This policy covers NST Publisher, the private tool used to publish the YouTube channel No Security Team, and this website.
Effective 2026-09-16
Who operates this tool
NST Publisher is operated by Rolando, an individual based in Kuwait. It is a single-user internal tool: the only person who uses it is the operator, and it is not offered to anyone else.
Use of YouTube API Services
NST Publisher uses YouTube API Services, specifically the YouTube Data API and the YouTube Analytics API, to publish videos to the operator's channel and to read the channel's analytics. By using the tool, the operator agrees to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.
What data the tool accesses
Only the operator's own channel. The tool writes the metadata of videos it uploads (title, description, tags, thumbnail, playlist, schedule and disclosure settings), posts comments on the operator's own videos, and reads the operator's channel analytics (views, watch time, average view duration, audience retention and click-through rate).
The tool does not access data belonging to any other channel, video, commenter or viewer.
How the data is used
To publish the operator's videos, and to help the operator choose future topics using the channel's own analytics. The data is not used for profiling, advertising, or anything else, and is not shared.
How long data is kept
Analytics summaries for the operator's channel are kept for no more than 30 days, after which they are refreshed from the API or deleted. The operator's sign-in credentials are stored encrypted on infrastructure the operator controls. Nothing else is stored.
Sharing
No data is shared with, sold to, or transferred to any third party.
Cookies and tracking
This website sets no cookies and runs no analytics or tracking scripts. NST Publisher has no web interface for other people, so it collects nothing from visitors.
Revoking access and deleting data
The operator can revoke the tool's access to Google data at any time from the Google security settings page, also reachable at myaccount.google.com/permissions. Revoking access deletes the stored credentials. Stored analytics summaries are deleted within 30 days. Deletion requests can also be sent to the contact address below.
Changes to this policy
Changes are posted on this page with a new effective date.