Privacy Policy

Overview

YTMP4 ("we", "us", "our") operates an online YouTube-to-MP4 conversion service at ytmp4.live. This Privacy Policy explains what information we collect, why we collect it, and the choices you have — including how cookie consent works on our site.

Your choice matters. If you click Decline cookies, we do not set non-essential cookies on your device and conversion features that depend on cookies will not run. If you click Accept cookies, we use cookies only as described below.

By using YTMP4 after accepting cookies, or by creating an account, you acknowledge this policy. If you do not agree, please do not use the service.

Data we collect

We collect only what is needed to operate the service, enforce limits, process payments, and keep the site secure:

Account data — username, email address, and a hashed password if you register.
Usage data — pages visited, conversion/download events, and timestamps (aggregated for analytics).
Technical data — IP address, browser type, device type, and referrer (standard server and security logs).
Payment data — processed by Stripe; we store subscription status and Stripe customer IDs, not full card numbers.
YouTube URLs — submitted by you to fetch video metadata and prepare downloads; we do not permanently store full video files on our servers.

We do not knowingly collect sensitive categories of personal data (health, biometrics, etc.).

How we use data

We use collected information to:

Provide conversion and download functionality you request
Authenticate accounts and manage premium subscriptions
Enforce free-tier daily download limits and prevent abuse
Maintain security (CSRF protection, rate limiting, fraud prevention)
Improve reliability and understand aggregate usage trends
Comply with legal obligations

We do not sell your personal information. We do not use your data for unrelated automated decision-making or profiling.

Cookies & similar technologies

Cookies are small text files stored on your device. We also store your cookie preference in local storage (ytmp4_cookie_consent) so we remember your choice — this is required to honour Accept/Decline and is not used for tracking.

Cookie / storage	Purpose	When set
`ytmp4_csrf`	Security — prevents cross-site request forgery on API calls	Only after you Accept cookies
`ytmp4_vid`	Counts free daily downloads per visitor (with IP fallback)	Only after you Accept cookies
`PHPSESSID`	Keeps you signed in to your account	When you log in (requires accepted cookies)
`ytmp4_remember`	Optional “stay signed in” token	When you log in with cookies accepted
`ytmp4_cookie_consent` (local storage)	Stores Accept or Decline choice	When you click Accept or Decline

If you decline cookies: we clear our cookies, do not set new ones, and disable converter, download, and account features that depend on them. You may still read public pages.

If you accept cookies: we set the cookies above as needed for the features you use. You can change your mind anytime via Cookie settings in the footer.

Third-party payment pages (Stripe) may set their own cookies when you checkout — governed by Stripe's Privacy Policy.

Third-party services

We rely on trusted processors to run YTMP4. They receive only the data needed for their function:

Hosting provider — serves the website and stores server logs
Conversion API partner — processes YouTube URLs to prepare MP4 files (we do not expose our API keys to your browser)
Stripe — payment processing and subscription billing
Advertising partners — may serve ads on free-tier pages (subject to your ad blocker and browser settings)

Each third party is bound by their own privacy terms. We require processors to handle data securely and only for the services they provide to us.

How long we keep data

We retain personal data only as long as necessary:

Account data — until you delete your account or request erasure
Download quota counters — rolling daily windows, automatically pruned
Security logs — typically up to 90 days unless longer retention is required by law
Analytics aggregates — anonymised or pseudonymised where possible

When data is no longer needed, we delete or anonymise it within a reasonable period.

Your rights

Depending on your location (including the EU/EEA under GDPR, UK GDPR, and similar laws), you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion ("right to be forgotten")
Restrict or object to certain processing
Data portability where applicable
Withdraw consent (e.g. decline cookies or delete your account)
Lodge a complaint with your local data protection authority

To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

Children's privacy

YTMP4 is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.

Contact & changes

For privacy questions, data requests, or copyright concerns, email us at support@ytmp4.live.

We may update this policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.