Clover & Finn AutomationPrivacy Policy
This Privacy Policy explains how Clover & Finn Automation (“the tool”) accesses, uses, stores and deletes data, including data obtained from Google through Google OAuth and the YouTube Data API. The tool is a private, owner-operated automation that publishes the Clover & Finn animated children's series to the owner's own YouTube channel. It is operated by the owner of that channel (“the operator”, “we”).
In short: the only Google account connected to the tool is the operator's own channel account. The tool uses that access to upload the series' videos, check their processing and visibility, and make verified videos public. It does not access viewers, comments, subscribers, analytics or other channels, and it does not sell or share Google user data.
1. Who can use the tool
The tool has no public sign-up and no user accounts. It is not offered to other people or other channels. The operator connects their own Google account, which owns the Clover & Finn YouTube channel, through Google's standard OAuth consent screen. The data described in this policy is therefore data about the operator's own channel and its own videos.
2. Google OAuth scopes
The tool requests exactly these two scopes:
| Scope | Why it is needed |
|---|---|
https://www.googleapis.com/auth/youtube.upload |
To upload each finished episode to the operator's channel. |
https://www.googleapis.com/auth/youtube |
To read the status of the channel's own uploaded videos (processing, visibility, Made for Kids setting, duration), to find a recent upload again if an upload response was lost (so the same video is never uploaded twice), and to change a verified video's visibility from private to public. |
The tool does not request access to the Google account's email address, profile, contacts, Gmail, Drive or any other Google service.
3. YouTube API requests the tool makes
| Request | Purpose | Data involved |
|---|---|---|
videos.insert |
Upload a finished episode, always as private first, marked Made for Kids. | The video file and its title, description, tags, category and language, which the tool itself generated for the episode. |
videos.list |
Verify an uploaded video before it is treated as published. | For the channel's own videos only: video ID, channel ID and name, title, tags, publish time, privacy status, upload and processing status, Made for Kids setting and duration. |
videos.update (status part) |
Change a verified video from private to public, keeping Made for Kids enabled. | The video's ID and status settings. |
channels.list (own channel) |
Find the channel's list of uploads. | The ID of the channel's uploads playlist. |
playlistItems.list (own uploads) |
After an interrupted upload, look through the channel's most recent uploads (up to 50) for a hidden tag that identifies the episode, instead of uploading it again. | The IDs of recent uploads on the operator's channel. |
4. What is stored, where, and for how long
The tool runs on infrastructure managed by the operator: a self-hosted n8n workflow instance and a video rendering service on a virtual private server rented by the operator.
| Data | Where | Retention |
|---|---|---|
| OAuth access and refresh tokens for the operator's account | The credential store of the operator's self-hosted n8n instance, which encrypts stored credentials with the instance's encryption key. Tokens are not written into workflow definitions, logs we produce, or this website. | Until the operator revokes access or deletes the credential in n8n. |
| Episode publishing records: episode ID and topic, the generated title, description and tags, the render job ID, the YouTube video ID, visibility, the hidden episode tag, timestamps (upload started, uploaded, verified, published, files cleaned) and any error message | A data table in the operator's n8n instance. | Kept as the channel's publishing history until the operator deletes them. |
| Workflow execution logs, which include the YouTube API responses listed in section 3 | The operator's n8n instance. | Kept according to the n8n instance's execution-log settings, which the operator manages. |
| Rendered video files and temporary render files (audio mix, voice cache, preview image) | The operator's rendering server. | For each episode, deleted after YouTube has confirmed the video is public and its YouTube video ID is saved in the publishing records, when automatic cleanup is enabled. Files of episodes that were not published or whose upload failed are kept for the operator's review. Small JSON records (episode script, quality report, render job record including the YouTube video ID) are kept as history. |
| Review copies of episodes | The operator's own computer. | Kept or deleted at the operator's discretion. |
Videos published to YouTube are stored by YouTube under Google's terms and remain on YouTube until the operator deletes them in YouTube Studio. Deleting the tool's own records or files does not delete videos from YouTube.
5. What the tool does not access
- Viewer information of any kind, including children who watch the videos.
- Comments, messages, subscribers, likes or the channel's analytics.
- Other YouTube channels or other users' videos.
- The Google account's email address, profile, contacts or any non-YouTube Google service.
6. Sharing and third parties
Google user data obtained through the tool is not sold, rented, or shared with anyone, and is not used for advertising. The tool exchanges data only with:
- YouTube / Google, which receives the uploaded videos and their metadata and answers the requests in section 3.
- The operator's hosting provider, which stores the server's data as part of providing the rented server.
Episode scripts are written with the Google Gemini API. Requests to Gemini contain only the curriculum topic, the series' writing rules and the themes of earlier episodes. They contain no YouTube account data, no video data from YouTube and no OAuth tokens.
7. Google API Services User Data Policy
Clover & Finn Automation's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the publishing functions described in this policy, and it is not used to develop, improve or train artificial intelligence or machine-learning models.
The tool uses YouTube API Services. By connecting a YouTube account, the account holder is also subject to the YouTube Terms of Service, and Google processes data under the Google Privacy Policy.
8. Children's privacy
The Clover & Finn videos are made for children, and every upload is marked Made for Kids on YouTube, which lets YouTube apply its children's-content protections. The tool itself has no audience-facing features: it collects no personal information from children or any other viewers. Viewing happens on YouTube and is governed by YouTube's and Google's own policies.
9. Security
The measures actually in place are:
- Access to the YouTube account is granted through Google's standard OAuth consent flow; the account password is never seen or stored by the tool.
- OAuth tokens are held only in n8n's encrypted credential store.
- The n8n instance is reached over HTTPS. The rendering service has no public network port and accepts requests only from the n8n instance with a shared access token.
- Administrative access to the server is restricted to the operator.
No method of storing or transmitting data is completely secure, and we cannot guarantee absolute security.
10. Revoking access and deleting data
The account holder can revoke the tool's access at any time:
- In the Google Account, under Third-party apps & services (Security → Your connections to third-party apps & services), select the app and remove its access; or
- by deleting the YouTube credential in the operator's n8n instance.
After access is revoked, the stored tokens stop working and the tool can no longer upload, read or change any video. Because the connected account belongs to the operator, the operator deletes the remaining stored data directly: the n8n credential, the publishing records, the execution logs and any files on the rendering server. Questions about stored data can be sent through the contact details below.
11. This website
This website is a set of static pages. It has no login, sets no cookies, and uses no analytics, advertising or tracking scripts. It is hosted on Cloudflare Pages; like any web host, Cloudflare processes technical request data (such as IP addresses) to deliver the pages, under Cloudflare's privacy policy.
12. Changes and contact
If the tool starts using Google user data in a different way, this policy will be updated before that change takes effect, and the effective date above will change.
The tool is operated by the owner of the Clover & Finn YouTube channel. Questions about this policy can be sent through the contact details on the Clover & Finn YouTube channel.