Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Kiraaz ("we," "us," or "Company") collects, uses, and protects your information when you use the Splitframe application at https://splitframe.firstwordread.com ("Service").

Contact Information:

Kiraaz Email: [email protected] Website: https://splitframe.firstwordread.com

1. Information We Collect

1.1 Information from Google OAuth

When you sign in with Google, we receive:

  • Profile information: Your name, email address, and profile picture.
  • Google ID: A unique identifier for your Google account.

We do NOT receive or store your Google account password.

1.2 YouTube Channel Data

When you connect your YouTube channel, we access:

  • Channel information: Channel name, channel ID, subscriber count, and channel thumbnail.
  • Video list: Titles, video IDs, thumbnail URLs, view counts, and publish dates.
  • Analytics data: Click-through rate (CTR), impressions, views, average view duration, and watch time for videos you are testing.

We access this data through the YouTube Data API v3 and YouTube Analytics API using OAuth 2.0 tokens that you explicitly authorize.

1.3 Uploaded Content

Thumbnail images that you upload for A/B testing are stored on our self-hosted MinIO object storage infrastructure.

1.4 Usage Data

  • Test configurations: which videos you test, variant count, rotation settings, and duration.
  • Test results: per-variant CTR, views, and impressions collected during tests.

1.5 Technical Data

  • Browser type and version.
  • Pages visited within the Service.
  • Time and date of access.

We do NOT use cookies for tracking or advertising. We use only essential session cookies for authentication.

2. How We Use Your Information

We use your information to:

  • Authenticate your identity and provide access to the Service.
  • Connect to your YouTube channel and read your video data.
  • Rotate thumbnails on your videos during A/B tests.
  • Collect and display analytics data to determine test winners.
  • Store your uploaded thumbnails for testing purposes.
  • Improve and maintain the Service.

3. How We Store Your Information

3.1 Infrastructure

All data is stored on our self-hosted infrastructure:

  • Database: PostgreSQL on our own servers (not third-party cloud databases).
  • Object storage: MinIO (self-hosted, S3-compatible) for thumbnail images.
  • No third-party analytics: We do not use Google Analytics, Mixpanel, or any third-party tracking or advertising service.

3.2 Security Measures

  • YouTube OAuth tokens (access and refresh tokens) are encrypted at rest using AES-256 encryption.
  • All data transmission uses HTTPS/TLS encryption.
  • Database access is restricted to our application servers only.

3.3 Data Retention

  • Account data: Retained while your account is active. Deleted within 30 days of account termination.
  • YouTube tokens: Deleted immediately when you disconnect a channel.
  • Thumbnail images: Retained for 90 days after test completion, then deleted. You may request earlier deletion.
  • Test results: Retained while your account is active.

4. YouTube API Services — Limited Use Disclosure

Splitframe's use of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

  • We do NOT sell your YouTube data to any third party.
  • We do NOT use your YouTube data for advertising purposes.
  • We do NOT transfer your YouTube data to any third-party tools or services.
  • We do NOT use your YouTube data for any purpose other than providing the Splitframe A/B testing service.
  • We only access YouTube scopes necessary for the Service.

Revoking Access

You can revoke Splitframe's access to your YouTube data at any time:

  1. In Splitframe Settings, click "Disconnect" next to your channel.
  2. Visit Google Account Permissions (https://myaccount.google.com/permissions) and remove Splitframe.

Upon revocation, we immediately stop accessing your YouTube data and delete your stored OAuth tokens.

5. Data Sharing

We do NOT share your personal information with third parties, except:

  • Legal requirements: If required by law, court order, or governmental regulation.
  • Protection of rights: To protect the rights, property, or safety of Kiraaz, our users, or the public.

We do NOT sell, rent, or trade your personal information.

6. Your Rights

6.1 For All Users

You have the right to:

  • Access your personal data held by us.
  • Correct inaccurate personal data.
  • Delete your account and all associated data.
  • Export your test results and data.
  • Revoke YouTube channel access at any time.

Contact us at [email protected] to exercise these rights.

6.2 For Users in the European Economic Area (GDPR)

If you are in the EEA, you additionally have the right to data portability, the right to object to processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing is your explicit consent and legitimate interest in providing the Service.

6.3 For Users in India (DPDPA 2023)

If you are in India, your data is processed in accordance with the Digital Personal Data Protection Act, 2023. You have the right to access, correct, or erase your data, withdraw consent, and nominate another person to exercise your rights.

7. Children's Privacy

Splitframe is not intended for users under the age of 13 (or 16 in the EEA). We do not knowingly collect data from children. If discovered, such data will be deleted immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and notify you of significant changes via email or a prominent notice on the Service.

9. Contact

If you have questions or wish to exercise your rights, contact us at:

Email: [email protected] Website: https://splitframe.firstwordread.com