Privacy Policy

The data controller is CRS STORE LTD (company number 12670925), registered office: Lion And Lamb, Fore Street, Ashton, Helston, England, TR13 9RW — registered with the UK Information Commissioner's Office under number ZA912808. When Chewbr Ltd is incorporated it becomes the controller, on the same promises (interim trading explains why and when). Data questions: hello@chewbr.net.

Your account. Name, email address, and — if you use one — a password, stored scrambled (hashed), never in plain text. If you sign in with Google: your Google account ID, name, email and avatar. Why: running your account. Legal basis: contract.

Your YouTube channel — only if you connect it. Channel name, handle, ID, avatar, description, country, subscriber/view/video counts, and your channel analytics (views, watch time, click-through rate, retention and similar). All read-only. Section 3 covers the Google-specific rules. Why: the analytics features you connected it for. Basis: contract.

What you create in Chewbr. Ideas, scripts, video plans, checklist progress, calendar entries, notes. It's yours — we hold it for you, and use it only to run the service. Basis: contract.

Video files you publish through Chewbr. Staged on secure storage (AWS S3) while the upload to your YouTube channel runs, and kept no longer than the upload needs. Basis: contract.

Payments. Handled entirely by Stripe — we never see or store card numbers. We keep your plan, billing status, billing email and renewal dates. Basis: contract, plus legal obligation for tax records.

Product analytics — only with your consent. If you accept analytics in the cookie banner, we use PostHog, hosted on EU servers, to see which features get used and where people get stuck. It's linked to your account while you're signed in and reset when you sign out. It exists to improve the product — never for advertising, never sold, never shared. Basis: consent — withdraw anytime in cookie settings.

Error reports. When something crashes, Sentry captures the technical details (what broke, roughly where, and the state around it) so we can fix it. Basis: legitimate interest — keeping the thing working.

Emails. Account emails — verification, password resets — go through Resend. The newsletter goes through Beehiiv, only if you signed up, with an unsubscribe link in every send. Basis: contract for account email; consent for the newsletter.

Push notifications. Only if you turn them on. We store the subscription token your browser gives us; switch them off anytime in Settings or your browser. Basis: consent.

Support. Email hello@chewbr.net and we keep the thread, so you never have to explain twice. Basis: legitimate interest.

Security. IP addresses, briefly, for rate-limiting and abuse protection. Basis: legitimate interest.

Chewbr uses YouTube API Services to power its YouTube features. By connecting your Google account you also agree to the YouTube Terms of Service, and Google's own handling of your data is described in the Google Privacy Policy.

Chewbr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In plain English: data we receive from Google is used only to provide the features you can see, never for advertising, never sold, never used to train AI or machine-learning models, and shared only with the processors needed to run the service — or where the law requires it.

The cached channel data described in section 2 refreshes roughly hourly while you use the service. You can disconnect at any time: in Chewbr's Settings, or by revoking Chewbr's access at Google security settings. When you disconnect, or delete your account, the cached Google data goes with it.

A small set of service providers, each seeing only what their job needs:

No data brokers. No ad networks. No selling, ever.

Some of the providers above are US-based. Those transfers are protected by the UK Extension to the EU–US Data Privacy Framework, or by the UK's standard contractual safeguards (the IDTA), depending on the provider. Product analytics deliberately stays on EU servers.

Under UK GDPR you can ask us, at any time, to: access everything we hold about you · correct anything wrong · delete your account and data · export your data in a portable format · restrict or object to processing based on legitimate interest · withdraw consent for anything consent-based (analytics, newsletter, push).

One email does it: hello@chewbr.net. We respond within a month — usually much faster. If you're unhappy with how we've handled something, you can complain to the UK Information Commissioner's Office at ico.org.uk — though we'd rather hear it from you first, so we can actually fix it.

Chewbr is for people 13 and over. We don't knowingly hold data on anyone younger; if that's somehow happened, email us and it's gone.

Updates appear on this page with a new date at the top. Material changes get an email before they take effect — never a silent edit.

hello@chewbr.net. Chris reads everything.