Privacy Policy
This policy explains what data BodyRangers collects and how we use it on our website bodyrangers.com, on our social media channels, and in our internal publishing app BodyRangers Studio. The English version is the reference version; the Vietnamese version below has the same content.
1. Who we are
BodyRangers (“we”, “us”) is a Vietnamese health-education video channel operated by an individual creator, Le Ngoc Hoan, in Vietnam. Contact for any privacy question or complaint: hoanln12.it@gmail.com.
2. This website
- bodyrangers.com is a static information site. It has no accounts, no forms, no comments, no advertising and no analytics or tracking scripts.
- It does not set cookies and does not read or write anything on your device. Fonts and images are served from our own domain.
- The site is hosted by Cloudflare, which processes technical request data (such as IP address and browser type) to deliver and protect the site, under the Cloudflare Privacy Policy. We do not receive or store these logs.
3. BodyRangers Studio
BodyRangers Studio (“the Studio”) is a private publishing tool built for and used only by the owner of the BodyRangers channels. It is not offered to the public, and no other person can sign in to it. The Studio:
- uploads videos that the owner has reviewed and approved to the BodyRangers accounts on YouTube, Facebook, Instagram, Threads, TikTok and X, and schedules their publication;
- reads statistics of our own videos (views, watch time, likes, comments count, shares, new subscribers) once a day so we can see which topics help viewers most.
The Studio only ever connects to accounts owned by BodyRangers. It does not access, collect or store data about any other channel, page or user.
4. YouTube API Services
BodyRangers Studio uses YouTube API Services. By using the Studio's YouTube features you agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.
Google account and permissions
The only Google account ever authorized in the Studio is the BodyRangers channel owner's own account, through Google OAuth 2.0. The Studio requests these permissions (scopes):
| Scope | Used for |
|---|---|
youtube.upload | Uploading approved videos to the BodyRangers channel (videos.insert) and setting their custom thumbnail (thumbnails.set). |
youtube.force-ssl | Updating the privacy status and scheduled publish time of videos the Studio uploaded (videos.update), and adding Vietnamese caption tracks to them (captions.insert). |
youtube.readonly | Reading the authorized channel's ID and title (channels.list, mine=true) to confirm the Studio is connected to the right channel. |
yt-analytics.readonly | Reading daily per-video statistics of our own channel from the YouTube Analytics API (reports.query, ids=channel==MINE). |
Data accessed, stored and used
- Channel identity: channel ID and title, to check the connection. Not otherwise stored.
- Our uploaded videos: the video ID, URL, privacy status and scheduled time of each video the Studio uploaded, used to manage those videos.
- Statistics: per-video daily views, estimated minutes watched, average view percentage, likes, comments count, shares and subscribers gained. These are totals; they contain no information about individual viewers.
- Credentials: an OAuth refresh token and client secret, used only to call the APIs above.
We do not access viewers' personal data, comment text, subscriber lists, or any other channel's data. We do not use YouTube data for advertising, and we do not sell it.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used to develop, improve or train generalized AI or machine-learning models.
5. Facebook, Instagram and Threads
The Studio uses the Meta Graph API and the Threads API through our own Meta app (“BodyRangers Studio”) with access tokens for the BodyRangers Facebook Page, the Instagram account @bodyrangers and the Threads account @bodyrangers. It publishes our videos and reads insights of our own posts (permissions pages_manage_posts, pages_read_engagement, pages_show_list, read_insights, instagram_basic, instagram_content_publish, instagram_manage_insights, threads_basic, threads_content_publish, threads_manage_insights). It stores the Page, Instagram and Threads account IDs, post IDs, links and post statistics. It does not read messages, comment text or data about the people who follow or interact with our pages. Meta's handling of data is described in the Meta Privacy Policy. See Data deletion for how to ask us to delete data.
6. TikTok and X (through Buffer)
The Studio does not call the TikTok or X APIs. It sends our approved videos and captions to Buffer, which publishes them to our own TikTok and X accounts. The Studio stores only Buffer post IDs, our Buffer channel IDs and the resulting post links.
7. Sharing and service providers
We do not sell, rent or trade any data. Data handled by the Studio is shared only with providers that run our own infrastructure, each for that purpose only:
- Oracle Cloud (server in Singapore) hosts the Studio's private database.
- Cloudflare hosts this website and protects access to the Studio dashboard; it also provides short-lived links that let Instagram, Threads and Buffer fetch a video file we are publishing.
- Anthropic (Claude) helps draft scripts and weekly content notes. For the weekly notes it receives our own videos' aggregate statistics (no personal data). This data is processed under terms that do not allow it to be used to train AI models.
- The publishing platforms themselves (YouTube, Meta, Buffer) receive the videos and text we publish.
We may disclose data if required by law.
8. Storage, security and retention
- OAuth tokens and app secrets are kept only in the encrypted macOS Keychain of the owner's computer. They are never written to source code, logs or our server.
- Video IDs, statuses and statistics are kept in a private database reachable only over a private network and through the owner's sign-in-protected dashboard.
- The Studio uses its YouTube authorization at least once a day, so it re-confirms every day that it is still authorized. YouTube statistics are kept only while the Studio remains authorized. Other data obtained from YouTube API Services is refreshed or deleted at least every 30 days.
- If the authorization is revoked or can no longer be refreshed, we delete the data obtained from YouTube API Services within 30 days. If you ask us to delete data, we delete it within 7 days.
9. Your choices, revocation and deletion
- A Google account can remove the Studio's access at any time from the Google security settings page (Third-party apps & services). The Studio has no separate disconnect button: once access is removed there, the Studio can no longer call YouTube, and we delete the data obtained from YouTube API Services within 30 days.
- Facebook, Instagram and Threads access can be removed in each platform's settings for apps and websites; see Data deletion.
- You can ask to see, correct or delete data about you by emailing hoanln12.it@gmail.com. We reply within 7 days.
10. Viewers, messages and children
If you email us, we use your email address and message only to reply and keep them only as long as needed for that conversation. Comments and messages you leave on YouTube, Facebook, Instagram, Threads, TikTok or X are handled by those platforms under their own policies; the Studio does not collect them. Our channels are not directed to children under 13, and we do not knowingly collect data from children.
11. Changes and contact
We update this page when the Studio's use of data changes and show the date at the top. Questions or complaints: hoanln12.it@gmail.com.