tubestat

Privacy Policy

Last updated: 2026-05-24

1. Who we are

Luersoft Digital Services LTD ("we", "us") is the data controller of personal data you provide when you use tubestat. We are registered in England & Wales (16888297), with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ United Kingdom.

2. What we collect

  • Account data. Your email address and a salted hash of your password.
  • Billing data. The billing email and country returned to us by our payment processor. We do not see or store full card details.
  • Usage data. The API key used, endpoint called, target URL, response status, response time and the timestamp of each request.
  • Technical data. Your IP address and user agent, retained for security and abuse prevention.
  • Communications. The content of any support emails you send us.

3. How we use it and our legal basis

  • Provide the Service (contract): authenticating you, processing requests, deducting credits.
  • Billing (contract): allocating purchased credits to your account and producing receipts.
  • Security & abuse prevention (legitimate interest): rate limiting, fraud detection, log review.
  • Service communications (legitimate interest): operational emails such as receipts, security alerts and material changes to terms.
  • Legal compliance (legal obligation): tax records, responding to lawful requests.

4. Who we share data with

We share only what is strictly necessary, with the following categories of processors:

  • Our hosting and infrastructure providers.
  • Our payment processor, which handles card data on our behalf under its own privacy terms.
  • Our transactional email provider, which delivers operational messages.
  • Our auditors and professional advisors, where required.
  • Law enforcement or regulators, where legally required.

We do not sell your personal data to third parties.

5. International transfers

Some of our processors are located outside the UK and EEA. Where this is the case, transfers are protected by appropriate safeguards (such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses or adequacy decisions).

6. How long we keep it

  • Account data: while your account is active, and for up to 12 months after closure for dispute resolution and fraud prevention.
  • Billing records: 7 years from the relevant tax year (UK statutory requirement).
  • Usage logs: 90 days in identifiable form; aggregated metrics retained indefinitely.
  • Support emails: up to 24 months.

7. Your rights

Under UK GDPR you have the right to access, correct, delete or restrict our use of your personal data, the right to data portability and the right to object to processing based on legitimate interest. To exercise any of these, contact [email protected]. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use a single first-party session cookie (tubestat_session) that is strictly necessary to keep you logged in. We do not use third-party advertising or analytics cookies on the marketing site. The cookie is set with HttpOnly and SameSite=Lax flags.

9. Children

The Service is not intended for children under 16. We do not knowingly collect personal data from anyone under 16.

10. Changes

We may update this Policy from time to time. Material changes will be announced via the Service or by email at least 14 days before they take effect.

11. Contact

Privacy questions or requests: [email protected].