Privacy policy
Last updated 25 September 2026.
Delulu YouTube MCP is an operator tool for the Delulu in Bondi YouTube channel. For privacy questions contact miguel@canoproductions.com.
Google data we access and why
With the channel operator’s Google consent, the tool requests OpenID identity confirmation, YouTube read-only data, YouTube Analytics read-only data, and YouTube permission to read and manage comments (youtube.force-ssl). It verifies the authorised Google identity and channel; reads channel, video, analytics, and comment information to support management and analysis; and may create replies on the channel when publishing is separately enabled. The comment-management permission can allow writes even while this tool’s own publishing switches are disabled.
Processing and storage
Cloudflare Workers and Durable Objects run the tool. Google OAuth credentials are kept in an encrypted server-side vault so the operator can stay authorised; access tokens are refreshed when needed. Recent YouTube comment text and video context may be sent to Cloudflare Workers AI to assess or draft replies when the operator requests a draft or when scheduled mode is enabled. These prompts contain comment and video content; the AI provider’s handling is subject to Cloudflare’s privacy policy.
The scheduled-reply store keeps run times, counts, comment and video IDs, decision statuses, and—for confirmed public replies—the exact published reply text and a link. These run records expire after 30 days. That store does not keep viewers’ raw comment text, viewers’ names, OAuth tokens, or raw YouTube responses. Separate short-lived records support Google authorisation and the operator’s manual approval workflow. YouTube holds public comments and published replies under its own policies; deleting our run records does not delete a reply from YouTube.
Who has access
The channel-management and reporting functions are restricted to the configured operator. Google data is processed for the channel-management functions described here, including optional AI drafting, and is not sold or used for advertising. Operational service providers involved are Google/YouTube and Cloudflare.
Revocation and questions
The Google account owner can revoke this app’s access in Google Account connections. To ask about stored records or request deletion of data controlled by this tool, email miguel@canoproductions.com. Revocation does not remove YouTube replies already published; those must be managed on YouTube.