Privacy Policy — Poster

This policy describes how the Poster web application (video publishing to VKontakte and optionally YouTube) handles data. The operator of your deployment decides the effective date or updates.

Service operator contact: set POSTER_CONTACT_EMAIL in .env, or contact the administrator of this Poster instance.

1. General

Poster is deployed and operated locally by the server/domain owner. This document reflects typical data handling when running the standard application code.

2. Data we process

• Video files you upload — received by the operator’s server and sent to platform APIs (VK; YouTube if you choose that option).
• Text you provide — titles and descriptions submitted in the form; passed to VK / YouTube APIs as you instruct.
• VK technical access data — if you sign in with VK OAuth, the app stores identifiers and tokens on the server (e.g. data/vk_accounts.json).
• Google / YouTube technical access data — connecting a channel stores a refresh token and channel binding on the same server (e.g. data/youtube_accounts.json).
• Optional server configuration tokens — the operator may set VK_ACCESS_TOKEN or similar only on the server; the app does not share them with unrelated third parties beyond the destination platform APIs.
• Standard web server logs — IP addresses, user agents, and request URLs may be logged by nginx or other infrastructure independently of the application.

3. Purposes

To perform the actions you request: uploading and publishing (or saving) video via the official VK API and Google YouTube Data API.

4. Third parties

Personal and content data may be sent to VK and, when you use YouTube, Google / YouTube. Their policies apply additionally:

• VK Privacy Policy
• Google Privacy Policy
• YouTube Terms of Service

5. Storage

Tokens and linked accounts saved via Poster are stored on the operator’s server disk. The operator is responsible for securing access, backups, and compliance with applicable laws.

6. Retention

Data remains until removed by the user or operator (using “Disconnect” in the UI removes entries from local files; operators may also delete files manually).

7. Your rights

Depending on applicable law (e.g. GDPR), you may request access, correction, or deletion. Contact the operator using the details above. Requests to VK or Google follow those services’ rules.

8. Changes

The operator may update this policy; the current version is published at the privacy policy URL on this site.