Your account and data

Privacy policy

Last updated: 25 October 2026

Shorts Factory is a private video-production tool operated by the owner of mphra.nl. Its dashboard and production workflow run on the operator’s Mac. These pages describe the application’s data use; they do not offer a public account-registration service.

Google and YouTube access

Authorization uses Google’s OAuth flow. The application receives access and refresh tokens, not the Google account password. It requests:

• Video upload access: to send an approved video and its title, description, tags and publication settings to YouTube.
• Account read access: to identify the connected channel and retrieve available video information and statistics.
• YouTube Analytics read access: to retrieve available performance reports for the connected channel’s content.

Collected metrics can include views, likes, comments counts, shares, watch time, average view duration, subscriber changes and audience-retention reports where the API makes them available. The application uses these records to show performance and support decisions about future videos. It does not read viewers’ private messages or request access to Gmail or Google Drive.

Local records and credentials

Access and refresh tokens are stored in macOS Keychain. The OAuth desktop-client file is kept in a local credential directory. Scripts, source references, media, subtitles, workflow state, approvals, publication identifiers, performance records and operational logs are stored on the operator’s Mac.

Approval records bind a reviewed video version to its media checksum and publication metadata. They are used to prevent an upload from proceeding on the basis of an outdated approval.

External services and AI assistance

Shorts Factory uses YouTube API Services. Google receives OAuth requests and API requests. An approved YouTube upload sends the selected video and publication details to YouTube. Google processes information under the Google Privacy Policy and the policies applicable to its services.

Codex/OpenAI assists with topic research, scriptwriting and quality checks. If the operator manually requests performance analysis, the application sends stored performance records to Codex/OpenAI so it can suggest future topics, hooks and formats. Those records can contain local job and platform video identifiers, publication details, timestamps, collected metrics, hook text, categories and format metadata. The application does not include OAuth tokens in that analysis request.

Codex processing is external to the Mac and is subject to the operator’s OpenAI account settings and applicable OpenAI terms and privacy practices. Local storage does not mean that every operation occurs without an external service.

TikTok publication uses a local approved-video export that the operator uploads manually. If the optional TikTok analytics connection is configured, the application retrieves available account and video metrics through TikTok’s official read APIs.

Retention, deletion and revocation

Media, revisions, workflow history and performance records remain in local storage until the operator removes them. Automatic cleanup only removes eligible temporary files; it does not establish a fixed retention period for videos or account records. Local backups may retain their own copies until the operator removes them.

The account owner can revoke the application’s Google access through Google Account connections and remove the associated local Keychain entry. Revoking access stops future authorized requests; it does not itself delete local records or videos already uploaded to YouTube. Uploaded content is managed separately in YouTube Studio.

For a question or request about records held by this private installation, contact the operator using the address below.

Public information pages

These static pages contain no sign-in form, JavaScript, analytics tags, advertising or tracking-cookie code. The hosting and network providers may process ordinary request information, such as an IP address and request time, to deliver and operate the website. Contacting the operator by email sends the information you choose to include through the relevant email providers.

Google API data use

Google API data is used for the upload, review and performance-analysis functions described here. It is not offered for sale or used by this application for advertising targeting. Use of Google API data is subject to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Changes to these data practices will be reflected on this page. Any additional permissions still require the account owner’s authorization.