Tubik

Tubik privacy policy

Tubik stores what it needs to play videos and to remember a parent's setup. It has no account of its own, and it does not send usage analytics or build an advertising profile.

This policy describes Tubik (dev.twenty3p.tubik) and its website (tubik.23p.dev). Questions belong in this repository's issues.

On the device

The app stores this on the phone:

  • Subscriptions, playlists, bookmarks, and downloads
  • Watch history and search history, which both start on. Either can be turned off. Turning search history off clears it.
  • Settings, including the Allowlist, Music Removal, and Screen Pin
  • A Parent PIN, if you set one, stored as a salted hash. The PIN itself is not stored, and it is not sent off the device.

Music Removal runs on the device. The audio is not uploaded.

If the app crashes, it can keep a crash log on the device. That log is not uploaded.

App updates

Automatic update checks start on and can be turned off in Settings (Check for updates automatically). While they are on, Tubik checks https://tubik.23p.dev/updates/latest.json about once every 24 hours (and whenever you manually check in Settings) to see if a newer release is available.

If you choose Download & Install in Settings, Tubik downloads the signed release APK from the URL listed in latest.json (hosted on https://releases.tubik.23p.dev) and verifies its SHA-256 checksum and signing certificate before handing it to Android's package installer.

tubik.23p.dev (Cloudflare Pages) and releases.tubik.23p.dev (Cloudflare R2) are hosted on Cloudflare with Cloudflare Web Analytics disabled and zero cookies or tracking scripts. Update checks, APK downloads, and website visits do not send personal identifiers, device identifiers, or usage analytics. Standard web server connection logs (such as IP address and requested URL) are handled transiently by the hosting CDN without tracking profiles.

While you watch

Playing, searching, and loading subscriptions contacts YouTube from this device. YouTube can see the device's IP address and which videos and channels are requested. Tubik does not ask you to sign in with a Google or YouTube account.

New-video notifications start on. While they are on, the app also checks subscriptions in the background by contacting YouTube.

Two lookups run during playback unless you turn them off:

  • SponsorBlock starts on. The video ID is sent to sponsor.ajay.app to fetch skip segments.
  • Dislike counts start on. The video ID is sent to https://ryd-proxy.kavin.rocks to fetch them.

DeArrow starts off. If you turn it on, the video ID is sent to SponsorBlock's branding service and to https://dearrow-thumb.ajay.app.

Submitting SponsorBlock segments or DeArrow titles starts off. Turning that on also sends a SponsorBlock user ID. Read SponsorBlock's privacy policy and terms of use before contributing.

Sync

Sync starts off. Subscriptions, playlists, and history then stay on the device.

If you sign in, subscriptions and playlists are stored on the server you choose:

  • A LibreTube sync server. The address filled in by default is https://sync.libretube.dev. Data there is pseudonymized and is not end-to-end encrypted. You can point the app at a server you host.
  • A Piped instance you host. The app does not download a public list of Piped instances.

Read that server's privacy policy before signing in. Logout and delete-account in Tubik send that request to the server. What the server keeps is up to its operator.

YouTube

Tubik is not affiliated with, authorized by, or endorsed by YouTube, Google LLC, or their affiliates. Names and content shown in the app belong to their owners.

Changes

Using Tubik means you accept this policy. When it changes, the update is in the repository's PRIVACY_POLICY.md and reflected here.