Privacy policy
Last updated: 15/10/2026
1. Data controller
Javier Guillen Alcaraz
NIF: 46232177S
Cra Coin 10, 29120 Málaga, España
hi@ytroulette.com
2. Information we process
You can explore videos without an account. Registration involves your name, email address, hashed password, registration date and verification status. We also store your saved videos, lists and the videos associated with them. Lists are used within your account; there is currently no feature for publishing them as public profiles.
Email verification and password recovery use expiring security tokens. Authentication uses a session cookie. Technical request information is processed to protect the service, including temporary rate limits by IP address. Please do not put sensitive information in your name or list names.
3. Purposes and legal grounds
Account creation, authentication, saved videos and lists are processed to provide the functions you request, on the basis of performing that service. Verification and recovery emails are operational messages.
Protection against abuse and unauthorised access serves our legitimate interest in keeping the service secure. Messages you send are processed to respond to your request. Legal obligations are handled on the basis of compliance with those obligations. Non-essential analytics technologies require your consent; viewing a page or continuing to browse does not provide it.
4. YouTube, Analytics and external links
Videos use the YouTube embedded player. Loading it connects your browser to Google/YouTube and transmits technical information such as your IP address and device details. That provider may use cookies and process information under its policies and your settings.
The main page integrates Google Analytics 4 to understand site usage. Your account name and email address are not explicitly sent as Analytics event parameters. Analytics reports are not necessary to use your account.
Buy Me a Coffee is an external link: YTRoulette does not collect payment details for contributions. Other external links, including LinkedIn, are subject to their operators’ policies.
5. Recipients and international transfers
Hosting and email resources are used to deliver the service. Providers processing data on behalf of the controller must do so under the applicable conditions and safeguards. Google/YouTube and external platforms perform their own processing when you use their services.
Some providers may process data outside the European Economic Area. Their terms should identify the applicable safeguards, such as an adequacy decision or standard contractual clauses, as appropriate. See the linked policies for Google’s conditions.
6. Retention
Account information, saved videos and lists are retained while your account remains in place and they are needed to provide its functions. You can remove saved videos and lists within your account. To request account deletion, email the contact address. Following deletion, information required for legal obligations or potential liabilities may be retained, with restricted processing where required, for the applicable periods.
Verification links expire after 24 hours and password recovery links after one hour. Expiry prevents use of the token but does not itself automatically delete its database record. Analytics retention depends on the service settings; a cookie’s lifetime is different from the retention period for the data collected.
7. Your rights
You may request access, rectification, erasure, restriction, portability and object to processing where applicable by contacting hi@ytroulette.com. Identify your request and the relevant account; additional identification will only be requested where necessary. You can withdraw consent for processing based on it without affecting earlier lawful processing.
You may lodge a complaint with Spain’s data protection authority, the AEPD (www.aepd.es). Account details are not used for automated decisions producing legal or similarly significant effects.
8. Security and updates
Passwords are hashed and account forms include protective measures. No system can guarantee absolute security. Use a separate password and keep your credentials private. This policy will be updated when site features or data processing change.