Privacy Policy
No accounts, no analytics, no advertising, no stored files. This page explains exactly what that leaves, and how long it lasts.
Last updated
The short version
AudioDrop has no accounts, no sign-up, no advertising and no analytics. We do not sell or share personal information. We never store the audio or video you convert — the bytes are streamed straight through to your device and are never written to a disk or a bucket on our side.
The only personal data involved at all is your IP address, which is held in a counter that expires within about a minute, and the link you paste, which we need in order to do the thing you asked for.
The rest of this page is the same statement, written precisely. It describes the service at youtubetomp3.live and nothing else.
What we process
The link you submit
When you paste a YouTube URL, our server extracts the video ID and rebuilds a canonical https://www.youtube.com/watch?v=… address from it. That canonical address is what gets sent to our upstream media provider so it can resolve a downloadable file. The link is not associated with you, and our application logs deliberately record only the video ID and the requested format — not the URL you typed, and not your IP address.
Your IP address
Converting costs us money on every request, so requests are metered. Your IP address is used as the key for two short-lived counters — a sliding-window rate limit and a cap on simultaneous conversions — and for nothing else. It is not stored next to a conversion, not written to a database, not used to build a profile, and not shared with anyone except as described under who else is involved.
Your download link
A successful conversion returns a link signed with HMAC-SHA256 that encodes the video ID, the chosen format and an expiry time. The signature is verified in memory on each request; the link itself is never stored on our side, and it simply stops working once it expires.
Anything you send us by email
If you write to [email protected] we receive your email address and whatever you choose to put in the message. We keep that correspondence only for as long as it takes to deal with it.
Conversion happens on your device
When you ask for an MP3 and the source is not already an MP3, the encoding runs in your browser, using a WebAssembly build of the LAME encoder. The audio is decoded and re-encoded locally; the finished MP3 exists only on your device and is never uploaded anywhere.
The source file still passes through our server on its way to you, because we proxy it rather than redirecting your browser to the delivery network. That is a deliberate privacy trade: it costs us bandwidth, but it means the upstream delivery hosts never see your IP address.
How long anything is kept
These are the current settings for this deployment. Nothing below is backed up, exported or archived — when it expires, it is gone.
- Rate-limit counter, keyed by IP
- 60 seconds
- Concurrent-conversion counter, keyed by IP
- 120 seconds
- Resolved source URL and file metadata, keyed by video
- 30 minutes
- Signed download link
- 15 minutes
- Converted audio or video files
- Never stored
- Application logs (video ID and format only)
- Host retention
The resolved-URL cache is keyed on the video and the output format, not on the visitor. Ten thousand people converting the same track share one cache entry, and that entry says nothing about who any of them are.
Who else is involved
We use as few third parties as the service can function with. There are no advertising networks, no analytics vendors and no tag managers.
- Our media provider (FastSaverAPI). Our server sends it the canonical video URL and receives a downloadable source in return. Your browser never contacts it directly, so it does not see your IP address.
- Cloudflare Turnstile. Where the anti-abuse check is enabled, your browser loads a challenge from
challenges.cloudflare.com, and Cloudflare receives your IP address and browser signals in order to decide whether you are a bot. Our server passes your IP alongside the resulting token when it verifies the challenge. Cloudflare’s own privacy terms govern that processing. - Our hosting provider. Like any web host, it processes connection data such as IP addresses and timestamps in order to route traffic to us.
These providers may process data on servers outside your country. Where that happens, it happens under the provider’s own safeguards and terms.
We are not affiliated with YouTube or Google, and we do not send them anything identifying you. See the Terms of Service for what that means for your use of this site.
Your rights
Depending on where you live, data protection law may give you the right to access, correct, delete, port or object to the processing of your personal data, and to complain to a supervisory authority.
In practice there is usually nothing for us to hand over. We hold no account, no history and no identifier for you; the only data keyed to you at all is a rate-limit counter that has already expired by the time you could ask about it. If you believe we hold data relating to you, write to [email protected] and we will look and tell you what we find.
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law.
Security
- The site is served over HTTPS only, with HSTS.
- A strict Content Security Policy is applied to every response, along with frame, referrer and MIME-sniffing protections.
- Download links are signed and short-lived, so a leaked link stops working within minutes rather than remaining valid indefinitely.
- The download proxy will only stream from an allowlist of hosts, and rechecks that allowlist on every redirect hop.
- API credentials are held server-side and are never exposed to the browser.
No system is perfectly secure, and we cannot guarantee that one is. If you find a vulnerability, please report it to [email protected] before disclosing it publicly.
Children
The service is not directed at children under 13, and we do not knowingly collect personal information from them. Since there are no accounts and no profiles, there is nothing for a child to sign up for. If you believe a child has sent us personal information by email, contact us and we will delete it.
Changes to this policy
If this policy changes, the “last updated” date at the top of the page changes with it, and we will describe anything material rather than quietly editing the text. Continuing to use the service after an update means the updated policy applies to you.
Contact
Privacy questions and requests go to [email protected]. The contact page lists what to include so we can answer in one round trip instead of three.