Privacy

This site uses no cookies, no ads and no outside analytics, and it asks you for nothing. The videos are on YouTube, but the site connects to YouTube only when you press play. Below is what data comes about technically, and what happens to it.

Who is responsible

The controller of the data is Adam Tomaś. For anything about your data, write to aex.tomas@gmail.com.

Videos from YouTube

Our server fetches the list of videos, their descriptions and pictures from YouTube, and your browser gets them from us. Until you press play, the site does not connect to YouTube or any other Google service. The fonts come from this server too.

When you press play, your browser loads the player from YouTube’s servers (www.youtube.com and www.youtube-nocookie.com, in privacy-enhanced mode), and the player connects to other Google servers. YouTube (Google Ireland Limited) then sees your IP address, among other things, and may store data in your browser, as described in the Google Privacy Policy. What YouTube does while a video plays is outside my control. When a video ends, the site covers YouTube’s suggestions with its own buttons.

Cookies and browser storage

The site sets no cookies.

So that it works as an app, also without the internet, your browser keeps copies of the site’s files, of the pages you opened and of the pictures of videos (the newest 60) in its own storage (Cache Storage, through a so-called service worker). These are the same contents every visitor sees; there is nothing about you in them, and nothing from them reaches us. Clearing this site’s data in the browser’s settings, or removing the app, deletes them. Installing the app is just an icon on your screen: it sends nothing to us or to any app store.

Statistics without cookies

To know which videos people watch, our server counts sums for each day: how many times a page was opened, and where a visit came from, only as a kind (a search engine, an AI assistant, a social site, another of our sites, another site, direct). Your browser tells our server of each page it opens, giving only the page’s address, and on the first page of a visit also the name of the site you came from (for example youtube.com, without the rest of its address) and the utm_source tag if the link has one; the server turns that into a kind at once and does not store the name itself. No IP address, cookie, identifier or anything in your browser is stored, and the same person is not recognised on a later visit; the IP address is used only for a moment in the server’s memory, to limit counts so that one person cannot inflate them. Robots and link previews in messengers are not counted. The sums are kept for 13 months. This is done to improve the site (legitimate interest, Art. 6(1)(f) GDPR).

Server logs

The web server in front (Apache) keeps no log of visits. Only on technical errors may its error log contain an IP address and the address of a page; it is deleted after 30 days. If your browser finds something on the site that breaks its security rules (Content Security Policy), it sends us a report with the address of the page and of the blocked resource; it is kept in technical logs, without an IP address. This serves only to keep the site working and secure (legitimate interest, Art. 6(1)(f) GDPR).

Cloudflare

Traffic to the site passes through Cloudflare’s network, which protects it from attacks and makes it faster (legitimate interest, Art. 6(1)(f) GDPR). Cloudflare processes the IP address and technical data of a request as described in its privacy policy. The company is based in the USA and transfers data under the EU-US Data Privacy Framework.

The “Buy me a coffee” button and other links

The “Buy me a coffee” button in the footer is a plain link to buycoffee.to, and its picture comes from this server: the site does not connect to buycoffee.to until you click it, and after the click buycoffee.to processes your data under its own terms. The same goes for the other sites linked in the footer.

Where the data is and who gets it

The server runs in an OVHcloud data centre in France (European Union), on my behalf. I do not sell data, profile anyone, or make automated decisions about anyone.

Your rights

You have the right to access your data, to have it corrected, deleted or its processing restricted, and to object. You can also complain to a supervisory authority; in Poland, where the controller is, that is the President of the Personal Data Protection Office (uodo.gov.pl).

Last changed: 5 November 2026