TubePad Privacy Policy
Effective 10 October 2026.
1. Who we are
This Privacy Policy applies to TubePad, the web application at https://tubepad.click (“TubePad”, “we”, “us”). TubePad lets people launch a coin on pump.fun (Solana) for a YouTube channel. The coin’s creator fees are held for that channel, and the channel’s owner can claim them after proving ownership by signing in with Google.
2. Google user data we access
When you choose “Sign in with Google” on the claim page, TubePad requests one OAuth scope:
https://www.googleapis.com/auth/youtube.readonly(“View your YouTube account”).
With this scope TubePad makes a single request to the YouTube Data API (channels.list with mine=true) and reads only the list of YouTube channels your Google account owns: for each channel, its channel id, title and thumbnail (avatar) image link. We do not access your email address, name, videos, playlists, subscriptions, comments, watch history, or any other Google data, and we cannot post, upload, edit or delete anything on your account.
3. How we use Google user data
We use this data for one purpose only: to verify that you own the YouTube channel a coin’s fees belong to, so that only the real channel owner can claim those fees. The channel id is compared with the channel each coin is tagged to. The title and thumbnail are shown back to you on the claim page so you can see which channel you are signed in as. We do not use Google user data for advertising, profiling, analytics, or training any AI or machine-learning model.
4. How we store and protect it
- Access token: the OAuth access token Google returns is used once on our server to make the request above and is then discarded. It is never written to storage. We do not request offline access and never receive or store a refresh token.
- Session cookie: the channel ids, titles and thumbnail links of the channels you own are kept only in one cookie in your browser. The cookie is cryptographically signed (HMAC-SHA256) so it cannot be forged, and is set as
HttpOnly,SecureandSameSite=Lax. This Google user data is not stored in our database. - Claim records: if you claim fees, we store a payout record containing the channel id, the Solana wallet address you chose, the coin, the amount and the time.
- All traffic is encrypted with HTTPS. Server secrets are kept in encrypted environment variables on our hosting provider (Vercel).
5. Retention and deletion
- The session cookie expires automatically after 6 hours, and is deleted immediately when you tap “sign out”.
- The access token is not retained at all.
- Claim records (channel id, wallet, amount) are kept as a record of payouts for as long as the service operates, unless you ask us to delete them.
- To request deletion of any data we hold about you or your channel, email garethleecrypto@gmail.com. We will verify the request (for example by asking you to sign in with Google as the channel owner) and delete the data within 30 days. Transactions written to the Solana blockchain are public and permanent and cannot be deleted by anyone.
6. Sharing
We do not sell, rent, trade or share Google user data with anyone. We do not transfer it to third parties, except where required by law (for example a valid court order). Our hosting provider (Vercel) processes data only to run the service on our behalf.
7. Limited Use
TubePad's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. YouTube API Services
TubePad uses YouTube API Services. By signing in with Google on TubePad you agree to be bound by the YouTube Terms of Service. Google’s use of your data is described in the Google Privacy Policy.
Separately from sign-in, when anyone pastes a YouTube channel link to launch a coin, TubePad uses the YouTube Data API with an API key to look up that channel’s public id, title, handle, thumbnail and subscriber count, and stores them with the coin’s public record.
9. How to revoke access
You can revoke TubePad’s access to your Google account at any time at https://myaccount.google.com/permissions. Because we do not keep your token, revoking access and signing out removes all of TubePad’s access immediately.
10. Other data
For coins launched on TubePad we store the coin address, the launcher’s wallet address and the launch transaction, which are public on the Solana blockchain. Your IP address is held briefly in server memory for rate limiting and is not stored. We use no analytics or advertising cookies.
11. Children
TubePad is not directed to children and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has used TubePad, contact us and we will delete any related data.
12. Changes to this policy
If we change this policy, we will update it on this page and change the effective date above. Material changes to how we use Google user data will be made only with your consent where required.
13. Contact
Questions or requests about this policy: garethleecrypto@gmail.com
Website: https://tubepad.click