OAuth application details

Application

• Name: Golden Sun Distribution
• Type: private, internal-use publishing tool — no public sign-up
• Home page: https://distribution.goldensunjourney.com/
• Contact: hello@goldensunhouse.com

Scope requested

https://www.googleapis.com/auth/youtube.upload — the only Google scope the application requests. It permits uploading videos to the authorising user’s own YouTube channel and nothing else.

Why this scope is needed

The sole function of the application is to publish the account owner’s finished video files to the owner’s own YouTube channel on a schedule the owner sets. Upload access is the minimum permission that makes this possible.

Scopes deliberately not requested

• No channel management or deletion scope — the application cannot delete or alter existing videos.
• No analytics or audience scopes; viewer and subscriber data is never read.
• No profile, contacts, Drive, Gmail or calendar scopes.

How access is stored

• The OAuth client id, client secret and refresh token are held in an encrypted server-side secret store, separate from application data.
• They are read only by server-side code at upload time, and are never sent to a browser, written into a database record, logged, or exposed on any public page.
• Uploads use a short-lived, single-purpose upload URL issued by Google; the machine that streams the file never receives a Google credential.
• Tokens are never shared with third parties, sold, or used for advertising.

Limited use

Golden Sun Distribution’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

The account owner can revoke access at any time from their Google account permissions page. Revocation takes effect immediately and stops all further uploads.