Privacy Policy
Last updated 16 October 2026
Who we are
Golden Sun Distribution (“the Application”) is an authorized content distribution system operated by Golden Sun. It publishes video content produced and owned by the Golden Sun studio to the studio’s own connected platform accounts, such as its YouTube channel. It is used only by the studio owner and operators the owner authorizes.
Information we collect
- Operator account information — email address and display name used to sign in.
- Media and metadata — video files the owner selects, and the titles, descriptions, tags and schedules the owner writes for them.
- Authorization credentials — the OAuth refresh token the owner grants so the Application can upload to the owner’s own account.
- Operational logs — technical records of uploads and errors, with credentials redacted.
We do not collect information about viewers, subscribers or members of the public.
Google user data and the scope we request
The Application requests exactly one Google scope: https://www.googleapis.com/auth/youtube.upload. It is used only to upload videos, with the title, description and tags chosen by the owner, to the owner’s own YouTube channel. The Application does not access private viewer data, subscriber identities, comments, channel analytics, or any other Google account data such as Drive, Gmail, Contacts or Calendar.
- Google user data is not sold and is not shared with third parties.
- Google user data is not used for advertising or personalised ads.
- Google user data is not used to develop, improve or train generalized AI or machine learning models.
- No human reads Google user data except as needed for security, legal compliance, or with the owner’s consent.
How tokens are protected
OAuth tokens are stored in an encrypted server-side secret store. They are read only by server-side code at upload time and are never sent to a browser, written into a database record, shown on a page, or included in logs.
Limited Use disclosure
Golden Sun Distribution’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing
We share data only with the infrastructure providers needed to run the Application (hosting, database, authentication) and with the platforms the owner connects, solely to carry out actions the owner requested. We do not sell or rent data.
Retention, revocation and deletion
Publishing records are kept while the account is active. Credentials are deleted when the connection is removed. The owner can revoke access at any time at myaccount.google.com/permissions, which immediately ends the Application’s access. To request deletion of all data, email hello@goldensunhouse.com; we complete deletion within 30 days.
Security
Data is transmitted over TLS and stored in an access-controlled database with row-level security. Credentials are held in an encrypted secret store separate from application data.
Contact
Questions: hello@goldensunhouse.com.