Privacy Policy

The short version

YDM talks to YouTube only. There is no telemetry, no auto-updater, no account system, no crash-reporting service, and no third-party server anywhere in the architecture. Everything YDM knows about you lives on your own machine.

Data stored on your device

YDM keeps its working files in %APPDATA%\YDM:

• config.json — your settings (save path, quality, clipboard options, etc.)
• history.json — your last 500 downloads, kept entirely for the in-app History view
• session.json / session_<job>.json — resumable download sessions
• queue.json — the download queue
• instance.json — the local port and a per-run security token (never transmitted)
• ydm.log — diagnostic logs, with signed/credentialed URL parameters automatically redacted

All writes are atomic, and deleting the data folder removes everything. The uninstaller removes its own files and deliberately keeps your downloaded media and unfinished .part files.

Network behavior

• The app's local API binds to 127.0.0.1 only — nothing on your network can reach it.
• Host-header validation blocks DNS-rebinding attacks; state-changing requests must be same-origin.
• The only outbound connections are to YouTube's servers, made on your behalf when you queue a download.

This website

This site is static. It sets no cookies, runs no analytics, and embeds no third-party trackers, scripts, or fonts — every resource it loads is served from this site itself.

Contact

Questions about privacy can be directed to QANEN through the contact channel listed on qanen.site.