Privacy & User Data Policy

This Privacy Policy explains how FetchDL (socialmediadownloader.cc) collects, uses, protects, and handles your information, including Google user authentication data, public media queries, and technical diagnostics.

Summary of Key Commitments

No Account Required for Core Downloads: You can download publicly available media anonymously without creating an account.
Google User Data Protection: If you use Google Sign-In, we only request basic profile details (email, name, profile picture) strictly to authenticate you and manage your preferences.
Never Sold or Rented: We never sell, rent, or trade your personal data or Google account information to data brokers, marketers, or third parties.
Zero Exploitation for Advertising: We do not use Google user data to serve targeted advertisements or train external AI models.
Google API Limited Use Adherence: Our use of Google API data strictly adheres to the official Google API Services User Data Policy.

Information We Collect

Depending on how you interact with our website, we may collect the following categories of information:

A. Media Queries & Downloads: The public media links (URLs) you submit to inspect formats and generate download streams. We process these links to retrieve publicly accessible media streams.

B. Google Sign-In & Account Data (Optional): When you choose to authenticate using Google Sign-In, we collect your verified Google email address, full name, profile photo URL, and unique Google account identifier (subject ID). We do not request, access, or store your Google account password.

C. Technical Telemetry & Anonymized Diagnostics: Anonymized IP hash (SHA-256 with rotating privacy salt), browser user-agent, device category (desktop/mobile), referral source, and coarse country code. This information is processed exclusively for rate limiting, DDoS mitigation, and service availability.

D. User Inquiries & Bug Reports: If you voluntarily submit a bug report via our reporting portal, we collect the problem description, optional contact details (if you request follow-up), and technical browser metadata you provide.

Google API Services User Data Policy Compliance

FetchDL's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, regarding data received through Google OAuth and Google Sign-In:

Limited Access: We request only the minimum scopes necessary (openid, email, profile) to authenticate users and manage their individual account preferences.
No Transfer Except as Authorized: We do not transfer Google user data to third parties unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger/acquisition with express prior consent.
No Advertising Use: We strictly prohibit the use of Google user data for serving personalized, retargeted, or interest-based advertisements.
No Human Inspection: Human employees or contractors do not read or inspect your private user data unless required by security investigations, abuse mitigation, legal process, or with your explicit authorization.

How We Use Your Information

We process collected information solely for the following legitimate purposes:

Core Service Functionality: Parsing submitted URLs, resolving public media streams, converting audio formats (such as MP3 and M4A), and packaging multi-file ZIP bundles.
User Account Management: Maintaining your logged-in session, remembering your favorite format preferences, and providing access to personal download history.
Infrastructure Security: Preventing denial-of-service (DDoS) attacks, automated crawler abuse, scraping, and brute-force exploitation.
Service Improvements & Diagnostics: Identifying broken platform extractors, fixing codec playback compatibility issues, and diagnosing system delivery errors.

Data Storage, Infrastructure & Security

We implement industry-grade technical and organizational safeguards to ensure data integrity and confidentiality:

Cloud Database Security: All persistent database records are housed in secure Supabase PostgreSQL clusters with enterprise-grade encryption at rest (AES-256) and in transit (TLS 1.3).
Row-Level Security (RLS) Enforcement: 100% of database tables enforce Row-Level Security. Anonymous and client-side public REST API requests are completely denied access (401 Unauthorized). Only authenticated backend services access the data.
Zero Local Disk Retention of Streams: Download streams and in-transit media are piped dynamically through memory buffers directly to your client browser, minimizing storage footprint and eliminating data lingering on disk.
Zero Password Storage: Authentication occurs via secure OAuth 2.0 / OpenID Connect tokens. We never receive or store your third-party account passwords.

Your Rights, Data Deletion & Revoking Access

Under global privacy frameworks (including GDPR, CCPA, and Google User Data requirements), you have complete control over your personal information:

Right to Access & Portability: You may request a copy of the personal information associated with your account at any time.

Right to Erasure (Data Deletion): You may request permanent deletion of your account and all associated records by contacting us at privacy@socialmediadownloader.cc or submitting an issue through our Report Issue Portal. Deletion requests are fulfilled within 30 days.

Revoking Google Account Permissions: You can revoke FetchDL's access to your Google account at any moment via your Google Account Security Settings at https://myaccount.google.com/permissions.

Third-Party Services & Source Platforms

FetchDL interacts with content hosted on external social media networks and hosting platforms (e.g., YouTube, TikTok, Instagram, X/Twitter, Reddit, Pinterest, Spotify, SoundCloud).

When you request media files, your client or our proxy establishes network connections to public media endpoints to stream the content. FetchDL is an independent software tool and is not endorsed by, sponsored by, or affiliated with Google LLC, YouTube, Meta Platforms, ByteDance, X Corp, or Spotify AB.

Contact & Policy Updates

We may update this Privacy Policy from time to time to reflect enhancements to our service, new features (such as OAuth login integrations), or legal requirements. Material updates will be posted on this page with a revised effective date.

If you have questions, feedback, or requests regarding this Privacy Policy or your data, please contact our team:

Website: https://socialmediadownloader.cc

Privacy Inquiries: privacy@socialmediadownloader.cc

Technical Inquiries: Report an Issue / Bug Portal