Privacy Policy

We take privacy seriously. This policy explains what data we collect, why we collect it, and how you can control it. Short version: we collect the minimum needed to run the Service, we never sell your data, and you can delete your account any time.

1. Who we are

TestMyThumb ("we", "us", "our") is operated as a sole proprietorship based in Pakistan. For privacy questions, contact hello@testmythumb.com.

2. What we collect

When you join the waitlist

• Email address — to send you waitlist updates and eventually your access invitation
• Timestamp and referral source — for analytics

When you create a TestMyThumb account

• Email address and name from your Google account
• YouTube channel data — specifically, the list of your videos, thumbnails, and per-video analytics (impressions, click-through rate, views). This is only fetched when you authorize us via Google OAuth.
• Thumbnails you upload to test
• Payment information — handled by our payment processor (LemonSqueezy/Stripe). We never see or store your credit card details.

Usage data

• Device and browser info (IP address, browser type, operating system) for security and analytics
• Actions inside the app (tests created, thumbnails uploaded, clicks) so we can improve the product

3. How we use your data

We use the data above to:

• Run the thumbnail testing service
• Rotate thumbnails on your videos via the YouTube API
• Calculate per-variant CTR and determine winners
• Send you product updates, receipts, and important service emails
• Detect and prevent abuse
• Improve the product based on usage patterns

We do not use your data to train AI models, sell it to data brokers, or share it with advertisers.

4. YouTube API data

TestMyThumb uses YouTube API Services to access your channel. We comply with YouTube's API Services Terms and Google's Privacy Policy.

Specifically:

• We only request scopes strictly needed for thumbnail testing
• We never store your YouTube login credentials — authorization happens through Google OAuth
• You can revoke our access at any time at myaccount.google.com/permissions
• We retain YouTube-derived data only as long as needed to provide the Service

5. Who we share data with

We share data only with the following service providers, strictly to operate the Service:

• Kit (ConvertKit) — for email delivery
• Formspree — for waitlist form backup
• LemonSqueezy / Stripe — for payment processing
• Google / YouTube — for core product functionality
• Netlify — for website hosting

Each of these has their own privacy policy and is contractually required to protect your data.

6. Cookies

We use minimal cookies — only the essential ones required for the Service to function (authentication session, security tokens). We do not use third-party advertising cookies or tracking pixels.

7. Your rights

Depending on your location (GDPR for EU, CCPA for California, and similar laws elsewhere), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to certain processing

To exercise any of these, email hello@testmythumb.com. We'll respond within 30 days.

8. Data retention

We keep your data only as long as your account is active. When you delete your account:

• Your personal data is deleted within 30 days
• Backup copies are purged within 90 days
• Anonymized aggregate data may be retained for analytics

9. Security

We take reasonable measures to protect your data — encryption in transit (HTTPS), secure cloud infrastructure, access controls. However, no system is 100% secure. If a breach occurs, we'll notify you within 72 hours.

10. Children's privacy

TestMyThumb is not directed at children under 18. We do not knowingly collect data from minors. If we learn we have, we'll delete it immediately.

11. International transfers

Your data may be processed in Pakistan, the United States, and the European Union (depending on which service provider is handling it). All providers comply with applicable cross-border data transfer requirements.

12. Changes to this policy

We'll update this policy from time to time. Material changes will be announced by email at least 14 days before they take effect.

13. Contact

Privacy concerns or data requests? Email hello@testmythumb.com. We read every message.