Privacy Policy

1. Who we are

howit.live is a web application with a curated selection of videos about making and creating all kinds of goods and products, mostly via embedded YouTube players. The Service is provided online and hosted on Vercel, with content metadata stored in Supabase.

HowIt.live is a curator platform: we do not host video files on our servers. Content streams from official platforms via embed. Rights holders can request removal at privacy@howit.live.

Questions about this policy: privacy@howit.live.

2. Information we collect

We aim to collect as little personal data as possible. Depending on how you use the Service, we may process:

• Technical data: IP address, browser type, device type, approximate region, pages viewed, and timestamps — typically via our hosting provider (Vercel) and security logs.
• Usage analytics: aggregated page views and interaction metrics through Vercel Web Analytics.
• Performance metrics: Core Web Vitals and related measurements through Vercel Speed Insights.
• Local preferences: items you save as favorites, and your language choice, stored in your browser (for example localStorage / cookies) on your device when you use the Service without signing in.
• Account data (only if you choose to register when that feature is available): email address, authentication identifiers, and profile details provided by you or by a sign-in provider such as Google (for example name and profile image, if the provider shares them and you allow it).
• Synced favorites and related account settings stored on our servers and linked to your account, so you can access saved videos from more than one device.
• Content you submit if you use admin or other features we explicitly provide (for example adding video metadata).

3. Optional accounts and synced favorites

Today, favorites are stored mainly on your device. Watching the public feed does not require registration.

We may introduce optional, quick registration — for example with a Google account or email (such as magic link or one-time code) — so you can save favorites to your account and play them from any device where you sign in.

Creating an account will be voluntary. If you never sign in, we will not create an account profile for you solely from browsing the public feed.

If you sign in with Google, Google authenticates you and may share limited account information with us under Google’s terms and your Google settings. If you sign in with email, we (or our auth provider) process your email to verify it is you and to maintain your session.

You can stop using an account by signing out. You may request deletion of your account and associated server-side favorites as described in “Your rights” below.

4. Information we do not intentionally collect

We do not require registration to watch the public feed, and we do not ask for your postal address or payment details for ordinary viewing.

We do not sell personal information. We do not use the Service to build advertising profiles for third-party ad networks.

5. How we use information

We use the information above to:

• Operate, secure, and improve the Service (including debugging and preventing abuse).
• Remember your language and saved videos on your device, and — if you have an account — sync favorites and related preferences across devices.
• Authenticate you when you sign in and keep your session secure.
• Understand aggregate traffic and performance so we can improve load times and reliability.
• Communicate with you about your account when needed (for example security or service notices).
• Comply with legal obligations when required.

6. Cookies and local storage

We may use cookies or similar technologies (including localStorage) to remember your locale (for example NEXT_LOCALE), local favorites, and — when accounts are available — session or authentication tokens needed to keep you signed in.

These technologies are primarily functional or analytical. You can clear site data in your browser settings; doing so may reset language, local favorites, and signed-in state on that device.

7. YouTube and other third parties

Video playback is provided through YouTube embeds (Google). When a video loads, YouTube / Google may collect data according to their own policies — including cookies, device identifiers, and watch activity — even if you do not have a Google account with us.

We use Supabase to store public video metadata (titles, descriptions, YouTube IDs, categories) and, when account features are enabled, user authentication records and synced favorites. We use Vercel to host the site and provide analytics / speed insights.

If Google sign-in is offered, Google acts as an identity provider for that login method.

We encourage you to review third-party policies:

• Google / YouTube: https://policies.google.com/privacy
• Vercel: https://vercel.com/legal/privacy-policy
• Supabase: https://supabase.com/privacy

8. Legal bases (EEA / UK users)

Where GDPR or UK GDPR applies, we typically rely on: (a) legitimate interests — to run a secure, useful website and understand aggregate usage; (b) contract / steps prior to contract — to provide an account and synced favorites you request; (c) consent — where required for non-essential cookies or similar technologies, or for certain optional account features; and (d) legal obligation — when we must retain or disclose information.

9. Retention

Server and analytics logs are kept only as long as needed for security, operations, and product improvement, then deleted or aggregated.

Device-only favorites and language preferences remain on your device until you clear them.

If you create an account, we keep account data and synced favorites while the account is active. After you delete your account (or we delete it at your request), we remove or anonymize associated personal data within a reasonable period, unless we must retain some information for legal or security reasons.

Video metadata in our database is retained while the content is part of the Service.

10. Sharing and international transfers

We share data with processors that help us run the Service (hosting, database, authentication, analytics, video embedding). Those providers may process data in the United States or other countries.

Where required, transfers rely on appropriate safeguards offered by those providers (such as standard contractual clauses).

11. Security

We use industry-standard protections offered by our hosting, database, and authentication providers (HTTPS, access controls, and environment secrets for administrative tools). No method of transmission or storage is 100% secure.

12. Children’s privacy

The Service is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child provided personal data to us, contact us and we will take appropriate steps.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict certain personal data, or to object to processing and withdraw consent.

For device-only data, clearing site data in your browser is often the fastest control. If you have an account, you may request access to or deletion of your account and synced favorites.

To exercise rights related to data we hold on our servers, email privacy@howit.live. You may also lodge a complaint with your local data protection authority.

14. Changes to this policy

We may update this Privacy Policy from time to time, including when we launch or change account and sync features. We will change the “Last updated” date above and, when changes are material, provide additional notice on the Service when appropriate.

15. Contact

Privacy requests: privacy@howit.live.

Website: https://howit.live