Overview
Remotion Studio is a desktop application for Windows that runs entirely on your own computer. MRCYCLO does not operate any server that receives your data, and does not collect, store, sell or share any of your data. The app contains no analytics, advertising or behaviour tracking.
Google user data the app accesses
The app only accesses Google user data when you connect a YouTube channel in Settings. It requests two scopes:
- youtube.upload: to upload the videos you choose, together with their title, description, tags, privacy status, publish schedule and thumbnail.
- youtube.readonly: to read your channel name once, so the app can show which channel is connected.
The app does not access any other Google data, such as your email address, contacts, files or watch history.
How Google user data is used
Google user data is used only to provide the features you trigger yourself: uploading a video when you click Upload, and displaying the name of the connected channel. It is never used for advertising, never sold, never transferred to data brokers, never used for credit or lending decisions, and never used to develop, improve or train artificial intelligence or machine learning models.
Sharing of Google user data
Google user data is not shared with MRCYCLO or with any third party. The OAuth token and channel name stay on your computer and are only ever sent to Google's own endpoints. The AI and voice services used by the app (OpenRouter, ElevenLabs) never receive your Google tokens or channel data.
How sensitive data is protected
- Encryption at rest: the Google refresh token, the channel name and all API keys are encrypted with Windows DPAPI (through Electron safeStorage) before they are written to disk. Only your Windows user account on the same computer can decrypt them. If Windows encryption is unavailable, the app refuses to save them.
- Short-lived access tokens: Google access tokens are requested only when needed, are kept in memory only, and are never written to disk.
- Encryption in transit: all communication with Google and the other services uses HTTPS (TLS).
- Secure sign-in: you sign in on Google's own page in your browser, so the app never sees your Google password. The app uses OAuth 2.0 with PKCE and a random state value, and the sign-in result is only returned to a loopback address (127.0.0.1) on your own computer.
- Least privilege: the app requests only the two scopes listed above.
- Limited exposure: stored keys and tokens are decrypted only inside the app's main process. The user interface only ever shows the last 4 characters of a key.
Data retention and deletion
- The Google token and channel name are kept on your computer until you click Disconnect in the app's Settings, which deletes them immediately.
- You can also revoke the app's access at any time on the Google security settings page. After that, the stored token no longer works.
- Deleting the app's data folder removes everything the app has stored. Because MRCYCLO holds no copy of your data, there is nothing to delete on our side. If you have any questions about deletion, contact us at the email below.
- Videos you have already uploaded stay on your YouTube channel until you delete them in YouTube Studio.
Data stored on your computer
Scripts, voices, music, videos, settings and models are kept in the data folder you choose when you first open the app (by default, the Remotion Studio folder in your Windows user profile).
Third-party services
The app only sends data to the services you configure yourself, using your own keys or accounts:
- OpenRouter: your video requests and the conversation with the AI agent.
- ElevenLabs (if selected): the narration text and the background music description.
- Google / YouTube (if connected): as described above.
- Hugging Face: downloading the voice and music models to your computer.
Data processed by these services is governed by each service's own privacy policy.
Compliance with Google policies
Remotion Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By using the YouTube features, you also agree to the YouTube Terms of Service. See also the Google Privacy Policy.
Contact
For any questions about this policy or your data, email [email protected].
Changes to this policy
When this policy changes, the new version will be published on this page.