Privacy Policy

Effective: 2 October 2026

This Privacy Policy explains how Oathis accesses, uses, stores, shares, and deletes information when you use its Discord-based YouTube verification features. Oathis uses YouTube API Services and Google OAuth.

1. What Oathis does

Oathis allows Discord servers to verify whether a member meets requirements configured by that server, such as being subscribed to a specified YouTube channel or having liked a specified YouTube video. Oathis does not attempt to verify whether a user has watched a video.

2. Google and YouTube data Oathis accesses

When you choose to verify through Google, Oathis requests the read-only YouTube OAuth scope https://www.googleapis.com/auth/youtube.readonly. Using that authorization, Oathis may access only the YouTube data needed for the active verification, including:

Oathis does not request your Google password and does not use OAuth access to upload videos, edit or delete content, post comments, change ratings, or otherwise modify your YouTube account.

3. How Google and YouTube data is used

Authorized YouTube data is used only to evaluate the requirements for the Discord server and verification attempt that initiated the OAuth flow. Oathis does not use this data for advertising, profiling, unrelated analytics, or other secondary purposes.

4. OAuth tokens

Google OAuth access and refresh tokens are used only as necessary to complete the verification request. Oathis is designed not to persistently retain access or refresh tokens after the verification check completes.

5. Information Oathis stores

Oathis may store limited Discord-side verification records needed to operate the service, such as:

Oathis is not designed to store your complete YouTube subscription list, your YouTube watch history, your Google password, or persistent Google OAuth tokens as part of the verification record.

6. Sharing and disclosure

Oathis does not sell Google user data or use it for advertising. Verification results may be shown to authorized moderators or administrators of the Discord server in which you initiated verification, including through a configured moderation log. Oathis does not expose your complete YouTube account data to those server administrators.

Information may also be disclosed when required by law, to protect the security or integrity of the service, or to infrastructure providers that process data solely as necessary to operate Oathis.

7. Retention and deletion

Google OAuth tokens are not intended to be retained after the verification operation. Discord-side verification records may remain until they are deleted, revoked by a server administrator, or removed as part of service maintenance.

You may request deletion of personal verification records associated with you by contacting REPLACE_WITH_YOUR_SUPPORT_EMAIL. Requests should identify the Discord account and server relevant to the request. Oathis may need to retain limited information where required by law or necessary to address abuse or security incidents.

8. Revoking Google access

You can revoke Oathis's access to your Google account at any time from your Google Account third-party connections. Revoking access prevents future authorized access unless you choose to authorize Oathis again.

9. Security

Oathis uses OAuth authorization, short-lived verification state, HTTPS for production OAuth callbacks, and technical controls intended to limit access to user data. No internet service can guarantee absolute security.

10. YouTube API Services and Google policies

Oathis uses YouTube API Services. Your use of YouTube-related functionality is also subject to YouTube's Terms of Service. You can review Google's privacy practices in the Google Privacy Policy.

11. Changes to this policy

This policy may be updated if Oathis changes how it accesses or uses information. Material changes to the handling of Google user data will be reflected in this policy before the changed use is introduced where required.

12. Contact

For privacy questions or deletion requests, contact: REPLACE_WITH_YOUR_SUPPORT_EMAIL.