Privacy Policy

We do not require an account, we do not ask for your name or email, and we do not keep the videos you download. Downloaded files are prepared on our server, sent to you, and deleted from our server the moment the transfer finishes.

When you use the downloader, the service records:

• the YouTube URL you submitted;
• the format you chose;
• your IP address;
• the date and time of the request.

This log exists for two reasons only: to enforce rate limits so one visitor cannot exhaust the service for everyone else, and to diagnose failures. It is not used to build a profile of you and it is not sold or shared.

Our web server also writes standard access logs, which include your IP address, the page requested, your browser's user-agent string and a timestamp.

• No account data. There is nothing to sign up for.
• No copies of your downloads. Files that must be processed on our side are written to a temporary location, sent to you, and deleted immediately.
• No YouTube credentials. We never sign in to YouTube as you or as anyone else, which is why private and age-restricted videos cannot be downloaded.
• No cross-site tracking. We do not embed third-party advertising or analytics trackers that follow you around the web.

The site sets a single functional cookie used to keep your browsing session secure. It is not an advertising cookie and it does not track you across other sites. No third-party cookies are set.

Request logs are retained for up to 30 days and then deleted. Temporary media files exist only for the duration of a single download, typically seconds.

Video files are fetched by our server, so your browser does not connect to YouTube or Instagram to download them. The preview thumbnail shown after you fetch a link is loaded by your browser directly from the platform's image servers. For YouTube that connection is with Google and is governed by Google's privacy policy. We do not proxy it and we cannot see its contents.

Instagram Reels and video posts are fetched by our server from public posts only. We never sign in to Instagram and never ask for your login, so nothing from a private account or a Story can be reached. The video is written to a temporary file, sent to you, and deleted immediately afterwards; failed attempts are cleaned up the same way.

For these links we log only the platform, the post's id, the format you chose, your IP address and the time. We never store the link as you pasted it: share links carry tracking parameters that can identify the person who shared them, so those parameters are dropped before anything is fetched, cached or logged.

Depending on where you live, you may have the right to ask what data we hold about you, to have it corrected, or to have it deleted. Because the only identifier we store is an IP address, please include the approximate date and time of your visit so we can locate the relevant records.

This service is not directed at children under 13 and we do not knowingly collect personal information from them.

If this policy changes materially, the "last updated" date above will change with it. Continuing to use the service after an update means you accept the revised policy.

Questions about this policy, or a data request, can be sent to rights@ytpullbox.com.