Privacy Policy
Closed beta · final policy ships with public launch.
Last updated: 9 October 2026.
What we store. Your email address, display name and a hash of your password. The IP address and browser of each sign-in session, and your two-factor secret if you turn it on. Your library: which summaries are yours, whether you have read them, and the categories you create. And a record of each request you make — the YouTube URL, the compression level and format, and the timestamps.
Where it lives. One server rented from Hetzner in Nuremberg, Germany, inside the EU. The database and the files are on that machine; there is no managed database held by anyone else.
Who else receives it. Four companies, each only what it needs to do its job. MiniMax writes the summaries: it receives the transcript of the video and our prompts, and never your email, your name or your account identifier — the code that calls it has no field to put them in. Resend sends account email, such as verification and password resets, so it receives your address and the message. Sentry collects crash and error reports, in which you appear as a random account identifier and a plan name — never your email, name or IP address, and with session recording switched off. Cloudflare resolves our domain name and nothing more; it does not see your traffic. Stripe will handle payments when we start charging, and holds nothing today.
Cookies. One: the sign-in session cookie. No analytics, no advertising, no trackers, no session replay.
What we keep that is not about you. A summary belongs to the video, not to you: everyone who asks for the same video at the same level and language gets the same one. Those summaries, and the transcripts they were made from, are kept indefinitely and contain nothing that identifies a person. Deleting your account therefore does not delete them — it deletes the link between them and you.
Delete your account. You can request deletion yourself from Settings, on the web or in the app. Doing so signs you out everywhere and makes the account inaccessible right away. You have 30 days to change your mind by signing back in; after that it is permanent and cannot be undone. Your email, password, library, categories, reading history and subscription record are deleted. Your past requests are kept as anonymous numbers — level, status, duration and cost — with the URL, title and video removed, because they are what the service is monitored with. For up to a week after that, internal queue records may still hold the URL you submitted; they are deleted when the queue archives them. You can also request account deletion directly, without emailing us.
Questions and requests. Write to hello@skimist.com to ask what we hold about you, to correct it, or to have it deleted.
The final policy, drafted with TermsFeed and covering the legal bases and transfer terms in full, replaces this page before public launch.