Privacy Policy & YouTube API Services Disclosure
Last Updated: November 1, 2026 · Standard: STD-2026-PRIVACY-01
Use of YouTube API Services & Google Privacy Policy
HPDE.tv uses official YouTube API Services to index, aggregate, and display publicly available amateur road racing, track day on-board videos, and channel metadata. By using HPDE.tv, users agree to be bound by the YouTube Terms of Service and acknowledge the Google Privacy Policy.
01. Overview & Ecosystem Scope
HPDE.tv is operated by GreenTree Motorsport Media Group in coordination with TrackDayOS and the High Performance Driving Spoke. This Privacy Policy details how we collect, store, and process data when you access HPDE.tv, interact with video streams, submit driver telemetry on-boards, or sign in through the HPDE.app Universal Driver Passport.
02. YouTube Data Ingest & Attribution Guarantee
Our video aggregator queries the public YouTube Data API v3 strictly to index videos marked as public by creators. We do not store raw video files on our private servers; all video playback is rendered through official YouTube embedded players (youtube-nocookie.com / youtube.com/embed).
- 100% Attribution: We prominently credit the channel title, channel handle, avatar, and original video title for every indexed stint.
- Zero Monetization Interception: In-stream video advertisements, pre-rolls, and mid-rolls remain 100% credited to the original creator through YouTube’s native monetization system.
- Direct Channel Links: Every video card provides a direct link to the creator's YouTube channel to encourage subscriber growth.
03. Creator Removal & Channel Claim Airlock
If you are a YouTube creator or track day driver and wish to claim your verified channel badge, update your platform setup, or request that your public videos be delisted from the HPDE.tv aggregator:
04. Telemetry & Lap Timing Data
When drivers connect AiM Solo 2 DL, Garmin Catalyst, or TrackDayOS CAN-Bus hardware, lap times, throttle position, brake pressure, and GPS sector speeds are transmitted for broadcast overlay. Driver telemetry is published exclusively with driver consent during event registration.
05. Cookies, Analytics & Privacy First Tracking
HPDE.tv uses privacy-respecting, self-hosted Matomo analytics with disableCookies active by default. We do not sell driver data to third-party data brokers or behavioral advertising networks.
06. Google User Data, Scopes, Revocation & Retention Policy
HPDE.tv adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Incremental Authorization & Scopes: Standard visitor sign-in requests only basic identity scopes (
openid,email,profile) to authenticate users and enable channel favorites. Read-only YouTube access (https://www.googleapis.com/auth/youtube.readonly) is requested strictly and incrementally when a channel creator initiates verification to claim their channel dial. HPDE.tv never requests write or delete permissions for YouTube accounts. - Strict Immutable Channel Verification: Channel ownership is verified by matching the authenticated account immutable channel ID (starting with
UC...), never mutable display handles or profile titles alone. - User Control & Revoking Access: Users can revoke HPDE.tv access at any time through Google Security Settings at security.google.com/settings/security/permissions. In addition, users can immediately disconnect their Google account and revoke tokens directly on HPDE.tv by clicking "Disconnect Account & Revoke Google Access" in their user profile or via the session API endpoint (
POST /api/v1/user/sessionwith action disconnect). Upon disconnection, HPDE.tv immediately sends a revocation call to Google (https://oauth2.googleapis.com/revoke) and clears authentication cookies. - Data Retention & Deletion Schedule: In accordance with YouTube API Developer Policies, cached YouTube API data is refreshed at least once every 30 days. Any cached data that is not refreshed within 30 days is automatically purged and deleted. When a user requests account disconnection or deletion, all stored user tokens, session records, and associated profile data are permanently deleted within 7 days.
- Data Protection & Non-Sharing: We do not sell, rent, or transfer Google user data or YouTube API data to third parties, data brokers, or advertising platforms. All stored credentials and session tokens are protected using server-side security measures with HTTP-only cookies and write-ahead atomic storage.