Arsenale
Privacy Policy
This policy explains what data Arsenale accesses, why, where it is stored and how it can be deleted. Arsenale is operated by Raffaello Pio Pettinicchio (Motivo Vincente, VAT 04389510712, Via Ruggiero Grieco, 28, 71017 Torremaggiore (FG), Italia), who is also its only user.
1. YouTube API Services
Arsenale uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of data is governed by the Google Privacy Policy (www.google.com/policies/privacy).
2. What data is accessed
- Account authorization: an OAuth refresh token and short-lived access token for the connected channel.
- Channel data: channel ID, title, subscriber, view and video counts.
- Video data: the channel's uploads with title, publish date, duration, privacy status, scheduled time, views, likes and comment counts.
- YouTube Analytics reports for the connected channel: daily views, minutes watched, average view duration, subscribers gained and lost, and per-video averages.
- Uploads: the video files, titles, descriptions, tags, thumbnails and visibility that the owner chooses to publish.
Arsenale does not access other users' data, comments, viewers' personal data, or any data of channels it is not connected to.
3. Why it is used
Only to show the owner his own statistics and to upload and schedule his own videos when he explicitly confirms it. Data is not sold, not shared with third parties, not used for advertising and not used to train any model.
4. Where it is stored and for how long
- Tokens and data are stored in Cloudflare Workers KV (Cloudflare, Inc. acts as hosting provider), encrypted at rest, and are never sent to the browser.
- Channel, video and analytics data are refreshed from the API every 30 minutes, overwriting the previous copy; nothing is kept for more than 30 days without being refreshed.
- Video files to be published are stored temporarily in Cloudflare R2 and deleted 3 days after publication (or immediately when the scheduled post is deleted).
- The only cookie is the session cookie of the access gate (Cloudflare Access), needed to sign in.
5. How to revoke access and delete data
- In Arsenale, Connections → Disconnect YouTube revokes the token at Google and immediately deletes the token and all stored YouTube data.
- Access can also be revoked at any time from the Google security settings page: security.google.com/settings/security/permissions. In that case stored YouTube data is deleted within 7 days.
- Any deletion request can be sent to info@motivovincente.com and is completed within 7 days.
6. Instagram and TikTok
The same rules apply to the owner's Instagram and TikTok accounts, connected through their official APIs: tokens and statistics are stored only in Cloudflare KV, used only to show the owner his own data and to publish his own content, and deleted on disconnection.
7. Contact
Raffaello Pio Pettinicchio · Via Ruggiero Grieco, 28, 71017 Torremaggiore (FG), Italia · info@motivovincente.com. You can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it).