At OmniGrab, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our service.
1. Information We Collect
URLs and Media Content
When you submit a URL to our service, we temporarily process:
- The URL you provide
- Video metadata (title, duration, thumbnail)
- The extracted media file (stored temporarily in Google Cloud Storage)
Usage Information
We automatically collect:
- IP address (for rate limiting and abuse prevention)
- Usage statistics (number of downloads, daily quota consumption)
- Request timestamps and platform detection
- Error logs and performance metrics
Authentication Data
- Anonymous Firebase Authentication IDs (no personal information required)
- Session tokens for quota tracking
- No email addresses or passwords are collected for free tier usage
2. How We Use Your Information
We use the collected information to:
- Provide the service: Process video extraction requests and deliver downloads
- Enforce limits: Track daily quotas and prevent abuse
- Prevent fraud: Utilize reCAPTCHA v3 to detect and block bot traffic
- Improve performance: Analyze usage patterns and optimize our infrastructure
- Comply with law: Respond to legal requests and prevent illegal activity
3. Data Storage and Retention
Temporary Storage
- Extracted media files: Stored in Google Cloud Storage with automatic deletion after 7 days
- Download URLs: Signed URLs expire after 10 minutes
- Session data: Cleared when you close your browser
Long-term Storage
- Rate limit records: Stored in Firestore, reset daily
- Usage logs: Retained for up to 90 days for security and debugging purposes
- Anonymous user IDs: Retained while your browser session is active
4. Third-Party Services
We use the following third-party services:
Google Cloud Platform
- Firebase Authentication: Anonymous user authentication
- Cloud Firestore: Rate limiting and usage tracking
- Cloud Storage: Temporary file storage
- Cloud Run: Application hosting
Data processing governed by Google Cloud Privacy Policy
Google reCAPTCHA
- Used to prevent automated abuse
- Collects hardware and software information, IP addresses, and page metrics
Governed by Google Privacy Policy and Terms of Service
5. Data Sharing
We do not sell, rent, or share your personal information with third parties, except:
- When required by law or legal process
- To prevent fraud or illegal activity
- With service providers bound by confidentiality (Google Cloud Platform)
6. Your Rights
You have the right to:
- Access: Request information about data we hold about you
- Deletion: Clear your browser data to remove session information
- Opt-out: Stop using the service at any time
To exercise these rights, clear your browser data to remove session information or stop using the service.
7. Security
We implement industry-standard security measures:
- HTTPS encryption for all data in transit
- Signed URLs with time-limited access
- Server-side rate limiting and bot detection
- Regular security audits and updates
- Automatic deletion of temporary files
8. Contact Us
For privacy-related questions or concerns, you may submit feedback through our platform or clear your browser data to remove all session information.
Summary
We collect minimal data (URLs, IP addresses, anonymous IDs), use it only to provide the service and prevent abuse, store files temporarily (auto-deleted after 7 days), and never sell your information to third parties.