Privacy Policy

1. Information We Collect

Norlytics is designed to collect the minimum amount of data needed to operate. We collect the following: (a) the YouTube channel URLs and handles you submit for analysis; (b) the analysis results produced from those URLs, which are cached locally in your browser; (c) cookie consent preferences, stored locally by CookieYes; (d) anonymous aggregate usage data such as page views, tool interactions, and approximate geography via Google Analytics, but only when you have accepted analytics cookies; and (e) any information you voluntarily provide through the contact form. We do not require an account and we do not sell your personal data.

2. How We Use Your Information

The information we collect is used to: (a) perform the requested channel analysis and revenue estimation; (b) render the Creator Dashboard and Niche Insights reports; (c) maintain and improve the accuracy of our estimation algorithms and methodology; (d) monitor service performance, security, and availability; and (e) display advertising where you have consented, so that the service can remain free.

3. Cookies and Consent Preferences

We use CookieYes to manage consent. Only strictly necessary cookies (theme, language, and consent preferences) are set without your permission. All non-essential categories — analytics and advertising — are blocked until you accept them. Google Analytics is implemented as a consent-controlled text/plain script and only loads after you accept the Analytics category. Advertising tags likewise only load after you accept the Advertising category. You can change your preferences at any time using the cookie banner or by clearing your cookies. For the full breakdown, see the Cookie Policy.

4. Advertising and Google's Use of Cookies

To keep Norlytics free, we display advertising through third-party ad networks, including Google AdSense and its partners. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies (including the DoubleClick cookie) enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google's Ads Settings. You can also opt out of third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info. In addition, whenever you have not consented to advertising cookies, no advertising tags or cookies are loaded at all.

5. Google Consent Mode

We use Google Consent Mode so that Google's tags (including analytics and advertising tags) respect the consent choices you make in the CookieYes banner. When you reject a category, Consent Mode instructs Google's tags to behave as non-personalized or simply not to run, depending on the choice you made. Your consent decision is communicated to Google via Consent Mode signals rather than by serving cookies against your preferences. This gives you the same level of control whether you are covered by the GDPR, the UK GDPR, or the Swiss Federal Act on Data Protection (FADP).

6. Third-Party Services

We use the YouTube Data API v3 to retrieve public channel statistics such as subscriber count, total views, video count, and recent upload data. By using Norlytics, you agree to be bound by the YouTube Terms of Service. We also use Google Analytics (consent-gated), CookieYes for consent management, and Formspree to deliver contact form messages. Each service processes data under its own privacy policy. When you choose to analyze a channel, a copy of the public channel data you requested is sent to the YouTube Data API and returned to your browser; the raw analysis is not stored on our servers.

7. Legal Bases for Processing

Under the GDPR, the UK GDPR, and the Swiss FADP, we process data on the following bases: (a) performance of a contract, to provide the analysis you requested; (b) legitimate interest, to operate, secure, and improve the service, including aggregate analytics where no consent is required; and (c) consent, for analytics cookies, advertising cookies, and contact form processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8. Data Retention

Analysis results are cached in your browser's local storage for up to 24 hours and are deleted automatically. Contact form messages are kept only as long as needed to respond to your inquiry. Analytics data is retained in aggregated form under Google's data retention settings. We do not keep personal information on our servers beyond what is necessary to deliver and protect the service.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the right to access, rectify, delete, restrict, or port your personal data, and to object to processing based on legitimate interest. Residents of the EEA, the UK, and Switzerland may also lodge a complaint with their supervisory authority. To exercise any of these rights, contact us at privacy@norcanto.com and we will respond within 30 days. Since most data we hold is stored locally in your browser, you can also clear it yourself by clearing your browser's local storage and cookies.

10. International Data Transfers

The third-party services we use (Google, CookieYes, Formspree) may process data in the United States and other countries. Where required by law, these transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, and your consent to the relevant cookies includes consent to these transfers.

11. Children's Privacy

Norlytics is a professional tool and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us at privacy@norcanto.com and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date at the top of this page. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

13. Contact and Legal Entity

Norlytics is operated by Norcanto (the data controller for personal data collected through this service). For privacy-related inquiries, contact us by email at privacy@norcanto.com. For other questions, use the contact page.