Your Watch Shelf
Privacy Policy
Last updated: October 14, 2026
Published by Amastran NET, operated by Ahmed Mahmood (Pakistan). We have no public office; contact us by email at info@amastran.net.
The short version
Your video library stays on your computer unless you choose to connect your own Google Drive. Your Watch Shelf has no analytics, no advertising, no tracking and no crash reporting. The only information we handle is what is needed to sell and license the app, described below.
What stays on your computer
Your list of videos (titles, links, thumbnails, your position in each video, favorites, history, collections, Trash), the locations of your own video files, your settings, and any backup files you export. We cannot see any of it. Your own video files stay where they are: the app remembers their location and does not copy them anywhere unless you turn on the optional Local File Sync (see below). Uninstalling the app does not delete this data.
When the app contacts other services
- Adding an online link: the app asks the video site for the video's title, channel and picture (for example YouTube, Vimeo or TikTok, and Rumble's public oEmbed address). For the other link sites (Facebook, Instagram, Netflix and so on) it only asks for the picture the page publishes for link previews. That site sees the request from your internet address.
- Playing an online video: the video plays in that site's own embedded player. Whatever that player collects (for example cookies and viewing data) is governed by that site's own policy; we do not control it. Links from Facebook, Instagram, Netflix, Twitch, X, Prime Video, Disney+, Hulu, Max and Apple TV open in your web browser instead.
- Google Drive sync (optional): if you press "Connect Google Drive", the app signs you in with Google in your web browser and keeps your online-video links, collections, favorites, watch progress, history and Trash in a private folder in your own Google Drive. The app asks Google only for access to the files it creates itself (the
drive.filepermission), so it cannot see the rest of your Drive. We do not receive your Drive contents and cannot access your Drive. The sign-in token is stored on your computer in an encrypted file in the app's data folder; disconnecting asks Google to cancel the app's access and deletes the token. - Local File Sync (optional, off by default): if you also turn this on, your own video files are uploaded to a separate "Local Videos" folder in your Google Drive. This can use a lot of Drive storage and bandwidth. Nothing is uploaded unless you turn it on.
- Google account check (when you connect Drive): the app also asks Google for a signed proof of which Google account it is (the standard "openid" sign-in). We never receive your email address, name or password. Our licensing service keeps only a scrambled, one-way code made from Google's internal account number, next to your licence or free trial, for one purpose: to make sure one Google account is used with one person's free trial. It is kept as long as the licence record (see Retention below) and you can ask us to delete it at info@amastran.net. If the licensing service cannot be reached, Google Drive is not connected until the check works.
- Feedback: "Report a bug" and "Send feedback" only open your own email app with our address filled in; nothing is sent until you press send.
Google user data. Your Watch Shelf's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train AI or machine-learning models.
What we collect to license the app
When the app starts a free trial, checks or activates your licence, it contacts our licensing service (license.amastran.net, hosted on Cloudflare) and sends:
- a computer code: a one-way scrambled value (SHA-256) made from your computer's hardware identifier and the product name. Your real hardware identifier never leaves your computer. It is the same after a reinstall, which is how we keep one free trial per computer;
- your licence key for this computer (when you have a subscription);
- the app version and whether you run macOS or Windows;
- a random one-time value and the current time (to stop copied requests being replayed);
- when you activate by email: the email address you type and the code we sent you;
- when you connect Google Drive: Google's signed proof of the account, as described above.
While the app is open and online it repeats the licence check about every 5 minutes, and when you return to the window. Nothing from your library is sent.
Like any internet request, these reveal your IP address to our licensing service and its hosting provider (Cloudflare). We use IP addresses only for short-lived rate limiting that blocks abuse, and do not store them in our licence records.
Paying. You pay through Whop (whop.com), which sells the app for us. They collect your payment details, name, email and billing country as the payment processor; we never see your card number. Their own privacy notice applies: Whop's privacy policy. They tell us your email address, the plan you bought (2 or 5 computers, monthly or yearly) and the status of your subscription (active, cancelled, refunded, disputed).
Email. If you use "Activate your purchase by email", we send a one-time code to that address through our email provider, Resend, and when a computer is signed out to make room for another, a notice to the purchase address.
How it is stored (Retention). We keep a scrambled (keyed-hash) form of your email rather than the plain address, plus your computer codes, the licence state, and a log of licence events (activation, computer added or signed out, refund) so we can support you and prevent misuse. Licence records are kept while the licence exists and 12 months afterwards. Payment-provider event logs, stripped of names and emails, are deleted after 90 days. Email codes expire after 15 minutes.
Updates
The app checks for updates by downloading one small public file from updates.amastran.net. That request does not include your library, your email or your licence. Like any web request it reveals your IP address to the host (Cloudflare).
Sharing
We share data only with the services above (Cloudflare hosting, Whop payments, Resend email, and Google when you connect Drive), only as needed to run the app, and never sell it.
Your choices
Do not connect Google Drive and nothing goes to Google. Disconnect any time in Settings. "Clear history" and "Clear stored thumbnails" are in Settings. To remove the local library, delete the data folder shown in Settings under Storage.
Your rights
You can ask us what we hold about you, to correct it, or to delete it (this also ends the licence), by emailing info@amastran.net. Wherever you live, you may also ask us to stop using your data, and you may complain to your local data-protection authority. We reply within 30 days.
Children
Your Watch Shelf is a video library, and there is no minimum age to use it. Subscriptions are bought by an adult, and the optional Google Drive sync follows Google's own account rules. We do not knowingly collect personal information about children beyond what the licence check needs (see above). If a parent or guardian wants any such information deleted, email info@amastran.net.
Changes
We will update this page and the date above if this policy changes.
