Skip to content
Privacy

Privacy and your data

EarnRoom is built to work on the smallest amount of personal information that still lets storage happen safely between two people. This page describes the data the product actually handles today, including public-site measurement, accounts, bookings, uploaded photos and AI-assisted estimates.

We measure our own site, and nothing else

Our analytics are first-party: the measurement is ours, the data stays in our own systems, and there is no advertising network, no third-party tracking script and no data sold or shared for marketing. We can't see what you do on other websites, and we don't try to.

No fingerprinting, no cross-device tracking

We don't build a device fingerprint and we don't try to recognise you across devices or browsers. The only reference we hold for an anonymous visit is an opaque random value stored in your own browser, which rotates every 30 days. It carries no meaning on its own and isn't linked to anything about you.

What a page view records

A page view records the page path with identifiers and query parameters stripped out, the website you arrived from (the site name only, never the full link), any campaign tag in the link you clicked, and a coarse device type — mobile, tablet or desktop. It does not record free text, photos, addresses or postcodes.

What account activity involves

If you create an account, the product stores the information needed to provide the marketplace: your account and profile details, inventory, space listings, messages, bookings, payment records and support activity where you use those features. Hosts see the information needed to consider a request; a host does not receive a renter's private photos or item-level inventory unless the product explicitly shows a relevant summary.

Uploaded photos and AI processing

EarnRoom stores listing photos, inventory photos, host space-scan photos and booking-evidence photos in private storage areas. The product uses short-lived signed links when a permitted user needs to view them. When you ask for an AI scan or visualisation, the selected images are sent to a third-party AI service to return an estimate or proposal. AI output is not a confirmed measurement or decision, and photos are not used as analytics data or sold for advertising.

How long information is kept

Granular anonymous analytics events are removed after 400 days. Reporting is bucketed in Europe/London time. Uploaded photos, account records, messages, bookings and payment records follow their product lifecycle and any applicable operational or legal requirements; a single universal retention period for those records has not been confirmed here and must be reviewed before launch.

Counting visitors honestly

A unique visitor is a browser that carried the same rotating first-party reference during the period. The reference rotates every 30 days and is not shared across devices or browsers, so this is an approximation of reach — not a count of individual people.

Respecting your choice

If your browser sends a Do Not Track or Global Privacy Control signal, we don't measure your visit at all and nothing is stored in your browser for analytics. Browser storage can also be cleared at any time; doing so may sign you out or remove local conveniences such as recent searches.

Requests and legal review

The product has not yet published a complete request workflow, named legal entity, universal retention schedule, lawful-basis statement or international-transfer statement. Those details, including how access, correction and deletion requests will be handled, need qualified UK privacy advice and confirmation from the service owner before public launch. This page must not be read as a claim that a legal review or compliance assessment has happened.

Google User Data and YouTube Integration

EarnRoom can publish its own marketing videos to a YouTube channel that an authorised EarnRoom operator connects. That connection uses Google OAuth. This section states exactly what Google user data EarnRoom accesses, how it is used, who it is shared with, and how it is protected.

What Google user data EarnRoom accesses

EarnRoom requests two YouTube permissions and nothing else:

  • View your YouTube account (https://www.googleapis.com/auth/youtube.readonly) — used only to read the basic details of the connected channel, such as the channel name, channel ID and thumbnail, so the operator can confirm which channel they connected and see the resulting video.
  • Upload YouTube videos (https://www.googleapis.com/auth/youtube.upload) — used only to upload a marketing video that has already been created and approved inside EarnRoom to that connected channel.
  • EarnRoom does not access Gmail, Google Drive, Google Contacts, Google Calendar, Google payment information, Google Search history, Google Photos or any other Google product or data.
  • EarnRoom does not read viewer data, comments, private messages or subscriber lists.

How EarnRoom uses Google user data

Google user data obtained through OAuth is used solely to provide the YouTube connection and publishing feature the authorised user asked for. The workflow is:

  • The user chooses “Connect YouTube” inside EarnRoom.
  • The user signs in with Google on Google's own screen.
  • The user grants the two YouTube permissions listed above.
  • Google returns an authorisation to EarnRoom's server, which EarnRoom stores securely.
  • EarnRoom reads the connected channel so it can be identified in the console.
  • EarnRoom can upload an EarnRoom-approved marketing video to that channel on the authorised user's behalf.
  • EarnRoom records the publishing result — the platform video ID, the video URL where available, the status and a timestamp — so the operator has an accurate record of what was published.

What EarnRoom never does with Google user data

EarnRoom does not sell Google user data. EarnRoom does not use Google user data for advertising, advertising profiling, audience building, credit assessment, or any purpose unrelated to the YouTube connection you authorised. EarnRoom does not use Google user data to train, retrain or improve AI or machine-learning models, and does not transfer Google user data to any AI service.

Who EarnRoom shares, transfers or discloses Google user data with

The sharing position is deliberately narrow:

  • Google and YouTube — data is sent back to Google's own APIs to perform the upload and channel lookup you authorised. This is the integration itself.
  • EarnRoom's hosting and database infrastructure — the encrypted authorisation and the publishing records are held in EarnRoom's own hosted application and database, operated for EarnRoom by its infrastructure providers under their service terms. These providers process the data only to run EarnRoom and are not permitted to use it for their own purposes.
  • No advertising networks, no data brokers, no analytics vendors and no other unrelated third parties receive Google user data.
  • EarnRoom would disclose data if required by law or to protect against fraud or a security incident. No such routine disclosure programme exists.
  • EarnRoom does not sell, rent or licence Google user data to anyone.

How EarnRoom protects Google user data

These protections are implemented in the production system today:

  • Google OAuth tokens are encrypted with AES-GCM using a server-only key before being written to the database.
  • Tokens are held and used only on EarnRoom's server; they are never sent to, or stored in, the browser.
  • Access tokens, refresh tokens and client secrets are never displayed to users, never returned by the interface and never written to logs.
  • The Google client secret exists only in server-side configuration and is never included in front-end code.
  • The OAuth callback validates a server-issued state value before accepting any authorisation, so an unsolicited callback cannot connect an account.
  • That state value is single-use and expires, which protects the connection against replay.
  • All production OAuth callbacks use HTTPS on earnroom.co.uk.
  • The authorisation code is consumed server-side and the browser is immediately redirected to a clean URL, so the code is not left in the address bar or browser history.
  • Reading or using a connected platform authorisation is restricted to the server-side integration and to authenticated administrator accounts, enforced by database row-level security.
  • EarnRoom keeps an audit record of publishing actions. Those records contain the action, platform, result and timestamp — never a token or secret.

Keeping, revoking and deleting Google user data

You stay in control of the connection:

  • Disconnecting the YouTube account inside EarnRoom removes the stored authorisation for that channel, so EarnRoom can no longer read the channel or upload to it.
  • You can also revoke EarnRoom's access at any time from your Google Account at https://myaccount.google.com/permissions. Revoking there stops EarnRoom's access immediately.
  • To request deletion of the stored connection and associated personal records, email businesstornado3@gmail.com, or use the data deletion instructions page. Requests are handled manually by a person; EarnRoom has not published a guaranteed response time, so no timescale is promised here.
  • Records of videos actually published, and the related audit entries, may be kept as an operational record of what was posted. These records never contain Google tokens or secrets.

Limited use of Google user data

EarnRoom's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve the YouTube connection and publishing feature that the user explicitly authorised; it is not transferred to others except as needed to provide that feature, to comply with applicable law, or as part of a merger or acquisition with prior notice. It is not used for advertising and no human reads it except with the user's consent, for security purposes, or where required by law. This is a description of how EarnRoom operates; it is not a claim that any Google review or certification has been completed.

To ask us to delete your data, follow the data deletion instructions. Privacy questions can be sent to businesstornado3@gmail.com.

This page describes how the product actually behaves today. It is a plain-English explanation, not a legal notice: the wording, and our position under UK data protection and PECR requirements, still needs review by a qualified adviser before launch. Nothing here should be read as confirmation that such a review has taken place.