Last updated: May 9, 2026
HitOrNot ("we", "our", or "us") is operated by District Digital and is available at hitornot.io. This policy explains what personal data we collect, why we collect it, how we use it, and your rights over it.
Google account information (when you sign in):
YouTube channel data (only when you choose to connect YouTube Studio):
Prediction inputs (when you use the tool):
Payment information (if you upgrade to Pro):
Session data:
We do not use your data for advertising. We do not sell your data to third parties. We do not share your data with Anthropic or any third party to train external AI models. We do use aggregated prediction feedback (actual view counts you voluntarily submit) to improve our internal ML scoring model — this data is not linked to your identity in the model.
HitOrNot uses YouTube API Services. By connecting your YouTube account, you also agree to:
Limited Use: HitOrNot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:
You can revoke HitOrNot's access to your YouTube data at any time by visiting your Google Account permissions page and removing HitOrNot. To delete data already stored, use the in-app "Delete account" option in your account settings — this immediately removes all of your personal data and revokes any stored Google tokens. You can also email info@districtdigital.co to request deletion.
Your data is stored in a managed PostgreSQL database hosted on Railway. The Service itself is also hosted on Railway. We call Anthropic's API to produce the qualitative analysis text and vision-based thumbnail review that accompany the prediction (see Section 1 for the role of each system). These providers are based in or process data in the United States.
If you are located in the European Economic Area (EEA) or United Kingdom, your data is transferred to and processed in the United States. We rely on Standard Contractual Clauses or the Data Privacy Framework where applicable for such transfers.
We retain your data for as long as your account is active, or as necessary to comply with legal obligations. Upon account deletion, your personal data is deleted within 30 days, except where retention is required by law. We retain a hashed, non-reversible record of past channel connections used solely to prevent free-quota abuse; it contains no name, email, or content.
We protect your data with the following measures:
Secure, SameSite=Lax cookies. Each browser/device receives its own session, so signing in on one device does not invalidate other active sessions. JavaScript on the page cannot read the session cookie, which mitigates session-theft via XSS.No system is perfectly secure. Section 10 below explains how we will notify you in the event of a data breach.
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Google / YouTube | Authentication and channel analytics | policies.google.com/privacy |
| Google Analytics (GA4) | Aggregate usage analytics (pages visited, session counts) | policies.google.com/privacy |
| PostHog | Product analytics (feature usage, event tracking) | posthog.com/privacy |
| Anthropic | Qualitative analysis text and thumbnail vision review (not the score itself) | anthropic.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
| Sentry | Error monitoring and crash reporting | sentry.io/privacy |
| Railway | Application and database hosting | railway.app/legal/privacy |
Depending on your location, you may have the following rights:
To exercise any of these rights, email info@districtdigital.co. We will respond within 30 days. EEA/UK users also have the right to lodge a complaint with their local data protection authority.
California residents have the right to know what personal information we collect, the right to request deletion, and the right to non-discrimination for exercising these rights. We do not sell personal information. To exercise your California rights, email info@districtdigital.co.
Strictly necessary: We use one session cookie (HTTP-only, secure) to keep you signed in for up to 30 days. Clearing it or signing out ends your session.
Analytics: We use Google Analytics (GA4) and PostHog to understand aggregate usage — pages visited, feature usage, and session counts. These services may set their own cookies (e.g. _ga, ph_*). The data collected is anonymised where possible and is not used to identify you individually or for advertising. You can opt out of Google Analytics via the Google Analytics Opt-out Browser Add-on.
First-party usage analytics: We also record minimal first-party usage events on our own servers (for example: a page was viewed, a prediction was run, a comparison was submitted) together with the page involved and coarse, non-identifying context (whether you were signed in and whether a channel was connected). These events are stored in our own database, are not shared with third parties, and raw event records are retained for at most 90 days before being reduced to anonymous daily totals. We do not store your full session token or IP address with these events.
We do not use advertising cookies or sell cookie data to any third party.
In the event of a data breach that affects your personal data, we will notify affected users and, where required, the relevant supervisory authorities, within the timeframes required by applicable law (72 hours under GDPR where applicable).
HitOrNot is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from anyone under these ages. If you believe a minor has provided us their data, contact us and we will delete it promptly.
The HitOrNot Chrome extension runs only on studio.youtube.com and reads only the video title and selected thumbnail of the draft you choose to score. That title and thumbnail are sent over HTTPS to hitornot.io and processed exactly like a score request made on the website — same model, same account, and no additional retention (live scoring stores no prediction rows).
The extension checks your hitornot.io sign-in state via your existing session cookie; it cannot read your Google or YouTube credentials. It collects no analytics, no browsing history, and injects no third-party code. Your niche selection is stored locally in your browser, and uninstalling the extension removes all locally stored data.
We may update this policy. We will notify you of significant changes by email or via a notice in the app. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Service after changes are posted constitutes acceptance.
Questions about this policy? Email us at info@districtdigital.co.