MIT Studio · Legal
Privacy Policy
Effective 6 October 2026 · Last updated 6 October 2026
This policy explains how MIT Studio handles information on this website and in MIT Studio Atelier ("Atelier"), the studio's internal publishing tool. It covers what data Atelier accesses through YouTube API Services, how that data is used, where it is stored, with whom it is shared, how long it is kept and how it is deleted.
01Who we are
MIT Studio is an independent film studio run by Mert Topçu, an individual based in Türkiye, who is responsible for this website and for Atelier.
- Name
- Mert Topçu (MIT Studio)
- support@mitstudio.tv
- Country
- Türkiye
Atelier is an internal tool. It is operated only by the studio owner, for the studio's own YouTube channels (Etched Films, Chalked Films, Retold Films, Staged Films, Patented Films and Measured Films). It has no public sign-in and no other users. The only Google account that authorizes Atelier is the studio owner's own account.
02Use of YouTube API Services
Atelier uses YouTube API Services (the YouTube Data API v3 and the YouTube Analytics API). By using Atelier, its user agrees to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy (http://www.google.com/policies/privacy).
03This website
mitstudio.tv is a static website. It does not use cookies, analytics, advertising, tracking pixels, embedded third-party players, sign-in or contact forms. Its fonts, images and preview clips are served from the site itself; it loads no content from third parties.
The only thing the site stores on your device is the language you choose, kept in your browser's local storage so the site opens in that language next time. It never leaves your browser and you can clear it at any time with your browser's site-data settings.
The site is hosted on Cloudflare. When you visit, Cloudflare necessarily processes technical request data (such as your IP address, browser user agent and the page requested) to deliver the page and protect the service, under the Cloudflare Privacy Policy. We have not enabled Cloudflare Web Analytics and we do not receive or keep visitor logs. Links to our YouTube channels take you to YouTube, where Google's terms and privacy policy apply.
If you email us, we use your message and address only to reply, and delete the correspondence when it is no longer needed.
04Data Atelier accesses
4.1 Authorized data: our own YouTube channels
The studio owner authorizes Atelier once per channel with Google OAuth 2.0. Atelier requests only these scopes:
https://www.googleapis.com/auth/youtube.force-sslandhttps://www.googleapis.com/auth/youtube.upload: to upload and manage the studio's own videos, thumbnails, playlists, captions and channel settings.https://www.googleapis.com/auth/yt-analytics.readonly: to read YouTube Analytics reports for the studio's own channels.
With that authorization Atelier accesses only the studio's own channels:
| Data | Why |
|---|---|
| Channel identity: channel ID, title, handle | To confirm that each authorization belongs to the intended channel before it is saved. |
| Channel settings: description and its translations, keywords, country, default language, banner, watermark, channel sections, playlists | To keep the channel pages set up as the owner decides. |
| Our own videos: IDs, titles, descriptions and translations, tags, category, privacy and publishing status, processing status, thumbnails, playlist membership | To upload the studio's films, set their details and schedule their publication. |
| Caption track list of our own videos (track ID, language, kind) | To find automatically generated caption tracks on our own videos and remove them where our own accurate captions apply. |
| Statistics of our own channels and videos: views, watch time, subscribers, likes, comment counts; YouTube Analytics reports | To show the owner, on a private dashboard, how the studio's films perform. |
| OAuth tokens (access and refresh tokens) | To act for the owner's channels without asking for consent again on every run. |
Atelier does not access, collect or store data about viewers, subscribers or any other YouTube user through the authorization: no comments, no subscriber lists, no viewer identities, no messages and no payment information.
4.2 Public data: topic research
A research component of Atelier uses an API key (no sign-in) to read public YouTube data: public search results and public metadata of videos and channels (video ID, title, description, channel name, publish date, duration and public counts such as views and likes, and public channel subscriber counts). It is used only to see which subjects audiences are currently interested in, so that the studio can choose topics for its own new films. Atelier never downloads, copies or reuses other creators' videos.
05How the data is used
- To publish the studio's own original films to the studio's own channels, only after the owner has approved each film, its details and its thumbnail.
- To set and update our videos' titles and descriptions in several languages, add them to playlists and maintain our channel pages.
- To show the owner, privately, how the studio's channels and films perform.
- To help the owner choose topics for new films from public trends.
YouTube data is not used for advertising, is not sold, is not used to build profiles of people and is not combined with data from other sources to identify anyone. Atelier does not create or store metrics derived from YouTube data; public numbers are only compared in memory to order research results and are not kept.
06Where data is stored and how it is protected
- The owner's own computer, where the owner runs Atelier's command-line tools.
- A private server rented by the studio in Germany (Contabo GmbH), which runs Atelier's scheduled jobs and the owner's private dashboard.
- Cloudflare R2 (private object storage), for the studio's own media files and backups of Atelier's database.
OAuth tokens and the OAuth client credentials are kept in files readable only by the operating-system account that runs Atelier, are never written to source code repositories and are never printed or logged. Access to the server is limited to the owner by SSH keys. All API traffic uses HTTPS.
07Sharing
YouTube data obtained by Atelier is not shared with, sold to or shown to anyone other than the studio owner, who is the authorizing user. It is not published, not displayed on this website and not transferred to any internal or external party for their own use.
To run Atelier, the owner uses the following service providers, which process data only on the owner's instructions and only to provide their service:
- Contabo GmbH (server hosting) and Cloudflare, Inc. (R2 storage and website hosting): store the data described in section 6.
- Telegram: delivers short private notices to the owner's own Telegram account, such as the title and link of a film that has just been published on our channel.
- Anthropic, PBC (Claude API): processes the public research data in section 4.2, and summaries of our own channels' statistics, to prepare private research and performance notes for the owner. Under Anthropic's commercial terms this data is not used to train its models.
Data may be disclosed if required by law, and only to the extent required.
08Retention, refresh and deletion
- Public research data (section 4.2) is deleted automatically no later than 30 days after it was retrieved.
- Authorized data about our own channels and videos (section 4.1) is kept only as long as needed for the purpose for which the owner authorized it, and is refreshed from YouTube or deleted within 30 days. Statistics and YouTube Analytics data may be kept longer, as YouTube's Developer Policies allow, and only while Atelier's authorization is confirmed at least every 30 days.
- OAuth tokens are kept only while the owner wants Atelier to manage the channel, and are deleted when access is revoked.
- Backups of Atelier's database are rotated and deleted within 30 days, and they do not extend the limits above.
- If access is revoked or the owner stops using Atelier, all data obtained through YouTube API Services for that channel is deleted within 7 days.
09Revoking access
The owner of a Google account that has authorized Atelier can revoke its access at any time on the Google security settings page: security.google.com/settings/security/permissions. After revocation Atelier can no longer access the channel, and the data it stored under that authorization is deleted as described in section 8.
10Deletion and other requests
Anyone may ask us to delete stored data related to them, or ask what we hold, by writing to support@mitstudio.tv. This includes, for example, a creator whose public video appeared in our topic research. We will delete the data as soon as possible and in any case within 7 days, and confirm by email.
Depending on where you live you may also have rights under data protection law (for example the Turkish Personal Data Protection Law No. 6698 or the EU GDPR), including access, correction, deletion and objection, and the right to complain to a data protection authority.
11Children
This website and Atelier are not directed at children, and we do not knowingly collect personal information from children.
12Changes to this policy
If this policy changes, the new version will be published on this page with a new "Last updated" date.
13Contact
Questions or complaints about these privacy practices: Mert Topçu, MIT Studio, support@mitstudio.tv. We reply within 7 days.
