Privacy Policy
Last updated: October 21, 2026
Afterstream (afterstream.cc, "the app", "we") turns long YouTube videos, finished livestreams and Twitch VODs into vertical Shorts. This policy explains what information the app handles, why, who else sees it, and how you can have it deleted. What you may and may not use the app for is in the Terms of Service.
The app is invite-only: you log in with an access code the app's operator gives you. It is not meant for children under 13 (or the minimum age in your country) and doesn't knowingly collect their information.
What we collect and why
- Your account: the name the operator gave your account, a one-way hash of your access code (not the code itself), the language you picked, and your last settings (webcam layout, caption colour).
- The links you add and the channels you follow in the app, with the public details of their videos (title, channel name, avatar, duration, publish date).
- What the app makes from them: the video's audio, transcript and stills of its scenes, the moments picked for Shorts, their titles, and the rendered Short files.
- Usage counts: which Shorts you downloaded and how much AI processing your videos used, so the operator can see the app's costs.
- Telegram, only if you connect it: your Telegram chat id, so the bot can tell you when a video is ready.
- Technical logs: the server logs requests and errors, including the IP address of a wrong access code, to keep the app working and to stop someone guessing codes.
We use this information only to run the app for you. We don't sell it, don't use it for advertising and don't build profiles of you.
YouTube and Google user data
If you connect a YouTube channel, the app uses Google OAuth for one of two purposes:
- Source channel verification: to verify that you own the channel you make Shorts from. The app asks for read-only access to identify your channel, verifies ownership, and immediately revokes and discards the access token. No token is stored in our database for source-only verification.
- Publishing Shorts: if you choose to connect a channel for publishing, the app asks for permission to upload
videos to your YouTube channel and manage their publishing schedule (
youtube.uploadandyoutube.force-ssl) and read basic channel details. The app stores an encrypted refresh token on our server solely to upload the Shorts you choose to publish (with your chosen title, description, and schedule) and to update or check their upload status. The app never reads, alters, or deletes your other videos, comments, subscriptions, or account details.
Afterstream's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never shared with anyone except as needed to make the uploads you ask for, never used for advertising, and never used to train AI models.
Afterstream uses the YouTube API Services. By connecting your YouTube account you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
You can disconnect YouTube in the app at any time by removing the channel, which automatically revokes the token with Google and deletes it from our database immediately. You can also revoke the app's access at any time in your Google Account at security.google.com/settings/security/permissions.
Twitch user data
If you connect a Twitch account, the app asks Twitch for permission (OAuth) to read your channel identity (login name, display name, and channel id) to verify that you own the Twitch channel you make Shorts from. We do not store your Twitch access token — it is discarded immediately after verifying your channel. We do not access your stream keys, whispers, email, subscriptions, or any private account details.
Who else processes your data
To do its work the app relies on these services, which process data only on our behalf:
- Hetzner (Germany): hosts the app's server and its database.
- Cloudflare R2: stores the Shorts, the scene stills and the database's backups.
- RunPod: cloud GPU machines that may download and render a video when the operator's own computers are busy.
- Anthropic (Claude), Google (Gemini) or OpenAI: receive a video's transcript and details to pick its moments and write titles. They get the text only, not the video or your account.
- Telegram: delivers the bot's messages, if you connected it.
- YouTube and Twitch: the videos you add are downloaded from them; the Shorts you publish are uploaded to YouTube.
We may also disclose information if the law requires it.
Cookies and storage in your browser
The app sets one cookie, for your login session; it's needed for the app to work and lasts until you log out or it expires. The page also keeps your language and list view in your browser's local storage. There are no analytics, advertising or third-party cookies.
How long we keep it
A link, with its transcript, stills and Shorts, is kept until you delete it in the app, or until it is removed automatically after the number of days the operator sets for the app. Usage counts are kept for the operator's records. Database backups are kept for up to 30 days. When your account is removed, its links, channels and settings are deleted with it, and its YouTube token is deleted at once.
Security
All traffic to the app uses HTTPS. Access codes are stored only as hashes, sessions are signed, OAuth refresh tokens for YouTube publishing are encrypted at rest using authenticated cryptography (Fernet), and each person sees only their own links. No system is perfectly secure, but we take reasonable steps to protect your data.
Your rights
You can ask to see, correct, export or delete the information the app holds about you, or object to its use, by contacting us below. If you're in the EU or UK you also have the right to complain to your data protection authority.
Changes to this policy
If we change this policy we'll update the date above, and tell you in the app if the change is significant.
Contact
Questions or requests about your data: support@afterstream.cc.