The Fine Print

We collect what you give us: email address when you register or subscribe to updates; username and display name; profile details you add (such as avatar, hype meter, or creator info); and anything you type into forms (including forum posts, comments, or creator/support applications). If you sign in with Google, Discord, or another provider, we receive identifiers from that provider to link or create your account—we do not receive your password from them. We also collect technical and usage data automatically: approximate location (region), device and browser type, pages and features used, and similar diagnostics. This includes data sent to our analytics partners (see below). Paid channel membership on the Site is processed by Stripe (card data is handled by Stripe, not stored on our servers). Other purchases may still run through YouTube, Patreon, or other platforms you choose—their policies apply.

We use your information to run accounts and sessions; send essential email (confirmations, password resets, security notices); run the forum, creator tools, Frame Analyzer, and other features; review applications you submit; keep the Site safe (fraud, abuse, spam); understand aggregate traffic with analytics so we can fix bugs and prioritize improvements; honor requests to access, correct, or delete personal data (including self-service account deletion in Account Settings); and enforce our Terms. If you are a channel or supporter member, we may occasionally email operational updates about gated areas. We do not sell your personal information. We don't use automated ways to make legal or similarly significant decisions about you.

Account data is stored securely using Supabase, which provides encryption at rest and in transit. We use industry-standard security measures to protect your data. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security. Passwords are hashed and never stored in plain text.

We rely on vendors who process data on our behalf, including: Supabase (database, accounts, and auth); Stripe (paid membership subscriptions and billing portal); Resend (transactional email); Vercel (hosting; Vercel may also provide aggregate analytics about Site performance and usage); Google (optional “Sign in with Google,” Google Analytics 4 / GA4 for traffic measurement, and YouTube API Services); Discord (optional “Sign in with Discord” and paid-member guild role sync via our bot); YouTube (YouTube API Services, official video embeds, and optional channel membership verification). Those companies have their own privacy policies. When you use a third-party login, their terms apply to that sign-in step.

VIHUB uses YouTube API Services. This section explains how we access, collect, store, use, and share information obtained through those services. Please also review the Google Privacy Policy and the YouTube Terms of Service.

Information we access, collect, and store. Through YouTube API Services (server-side only—never in your browser), we may retrieve and cache public YouTube channel metadata (titles, handles, subscriber counts, channel thumbnails), public video metadata (video IDs, titles, publish dates, thumbnails, duration, live broadcast status), and related listing data for featured creators. Optional Google OAuth, when you choose to verify membership, may provide Google account identifiers needed for that check. We do not collect YouTube passwords, private videos, or full video files.

How we use and share it. We use this data to display creator directory pages, creator profiles, media and war-room embeds, live indicators, and staff curation tools. Data is stored in our Supabase database (for example featured creator cache columns and live-status cache). It is processed on our servers hosted by Vercel and sent to Google only when calling YouTube API Services. We do not sell YouTube API data. Thumbnails and links direct users to YouTube; embedded players use the official YouTube iframe player.

Devices, cookies, and similar technology. YouTube API calls are made from our servers, not your device. When you play an embedded YouTube video, YouTube may place or read cookies or similar technology on your device through the official player, subject to YouTube's policies. Our own session cookies, preference storage, and analytics cookies (see section 6) may also be placed or read on your device or browser.

We use cookies and similar storage for essentials: keeping you signed in and remembering light preferences where needed. We also use measurement tools—currently Google Analytics 4 (GA4) and Vercel Analytics—to see aggregate trends (popular pages, general regions, devices). Those tools may set their own cookies or read device identifiers on your browser or device. When you interact with embedded YouTube videos, YouTube may set third-party cookies or use similar technology through the official player. GA4 may be configured for cross-domain measurement if you move between domains we operate; that helps us count sessions accurately, not to sell ads. You can block analytics cookies in your browser or use opt-out tools Google provides; blocking essentials may break login. Our YouTube Data API key is never exposed to your browser.

You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; opt out of non-essential communications. The primary way to delete your account and Site-linked data is self-service: while signed in, open Account Settings (/profile/settings), confirm the on-screen phrase, and complete deletion. When you do, we remove your profile and associated data from our Supabase-backed application (including examples such as forum posts and threads you authored, reactions, notifications tied to you, specs and related activity, support tickets and tips you submitted, creator applications, directory listings tied to your profile where applicable, chat messages attributed to you, poll content you created, and your avatar files in Site storage). Some third-party analytics tools may retain aggregate or de-identified statistics that can no longer be tied to you; your in-browser analytics consent flag on this device may also be cleared when deletion completes. If you cannot use self-service (for example you lost access but want erasure), email 6hub.owner@gmail.com and we will respond within 30 days where feasible.

The Site is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

We retain your account data for as long as your account is active. When you delete your account through Account Settings, we process erasure promptly in our production systems (typically immediately upon a successful deletion request). Email-based deletion or manual requests are handled within 30 days where applicable. We may retain certain information longer where required by law, to resolve disputes, or for legitimate security and anti-abuse purposes (for example server backups may persist for a limited time before rolling off; logs held by our hosting or analytics vendors may follow their own retention). Where we must keep a minimal record, we restrict further processing beyond that purpose. Cached YouTube API metadata for featured creators is refreshed periodically and removed when a listing is deleted.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Site after changes constitutes acceptance of the revised policy.

For privacy-related questions, data requests, or YouTube API Services inquiries, contact us at: 6hub.owner@gmail.com