HookSpot Privacy Policy
Last updated 16 August 2026
HookSpot is a Chrome extension that reads your own YouTube audience retention data and ranks the moments worth clipping into a Short. There is no HookSpot server. Nothing you do in the extension is sent to us, because there is nowhere for it to be sent. Every request goes directly from your browser to Google or to Gumroad.
What the extension reads
After you sign in with Google and grant permission, HookSpot reads:
- The audience retention report for videos on channels you own, from the YouTube Analytics API.
- The title, duration and publish date of those videos, and a list of your recent uploads, from the YouTube Data API.
It requests two read-only permissions —
yt-analytics.readonly and youtube.readonly — and cannot
change anything on your channel. It has no access to channels you do not own.
What is stored, and where
Three things, all in your browser's local extension storage on your own computer:
- Your Google access token, so you do not sign in repeatedly. It expires hourly.
- A cache of each video's retention data, kept for six hours so the same report is not fetched again.
- If you buy Pro: your licence key, and the email address Gumroad returns with it so the extension can show which licence is active.
Removing the extension deletes all of it. You can also disconnect your Google account or remove your licence key from inside the panel at any time.
Your video files never leave your computer
The clip feature asks you to pick your own video file. That file is read locally, the clip is cut locally, and the result is saved to your downloads folder. It is never uploaded anywhere — not to us, not to Google, not to anyone. The part of the extension that cuts clips makes no network requests at all.
Who your data goes to
The extension can only connect to four addresses, enforced by its content security policy:
youtubeanalytics.googleapis.com— your retention reportswww.googleapis.com— your video detailsstudio.youtube.com— to notice which video's Analytics page is openapi.gumroad.com— to check a licence key, if you bought Pro
Your use of Google's APIs is covered by Google's Privacy Policy, and purchases are handled by Gumroad, who acts as the seller. We never see your payment details.
What we do not do
- No analytics, telemetry, crash reporting or usage tracking of any kind.
- No advertising, and no advertising identifiers.
- No selling or sharing of data, because none is collected.
- No reading of page content. The extension reads the URL of Studio pages, nothing more.
- No accounts. There is nothing to register for.
Limited Use disclosure
HookSpot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That data is used only to provide the features described here, is never transferred to anyone, and is never used for advertising.
Children
HookSpot is a tool for people who publish on YouTube and is not directed at children under 13.
Changes
If this policy changes in a way that affects what the extension does with your data, the date at the top will change and the new version will be published here before the change ships.
Contact
Questions about this policy or about your data: devnimje2410@gmail.com