Root & Raid

Privacy policy

Root & Raid rig · last updated 19 September 2026

In short: this tool has one user — the person who installed it. It stores an authorisation token on that person's own computer, uses it to manage that same person's YouTube channel, and sends nothing anywhere else. There is no server, no database and no analytics.

Who this covers

Root & Raid rig ("the tool") is a personal command-line program run by its author on a single computer. It is not offered to the public, has no accounts, and collects no information from anyone other than its operator.

What Google data the tool accesses

With the operator's consent, the tool requests the scope https://www.googleapis.com/auth/youtube. It uses that access only to:

Create a live broadcast on the operator's own YouTube channel
Bind that broadcast to the operator's existing stream ingest
Set the broadcast's title, description, category, tags and privacy setting
Read back whether the broadcast is live, and read public view and like counts on the operator's own videos

It does not read, collect or process any other person's data. It does not access subscribers, comments, private viewer information, or any channel other than the operator's own.

What is stored, and where

An OAuth refresh token and the OAuth client credentials are stored in the operating system keyring (KDE Wallet) on the operator's computer.
Stream keys for YouTube and Twitch are stored in the same keyring.
Video recordings and clips are stored on a local disk.

Nothing is transmitted to the author, to any hosted service, or to any third party. There is no remote storage of any kind. This website is static and sets no cookies.

Who the data is shared with

Nobody. Data flows only between the operator's computer and the APIs of the services the operator is publishing to — Google/YouTube and Twitch — and only to perform the actions described above.

Retention and deletion

The refresh token remains in the keyring until it is deleted or expires. The operator can revoke the tool's access at any time at myaccount.google.com/permissions, which immediately invalidates it. The stored token can be removed locally with secret-tool clear service rootandraid account youtube-oauth-refresh.

Google API Services User Data Policy

The tool's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Children

The tool is not directed at children and collects no information from anyone.

Changes

If this policy changes, the date at the top of this page changes with it. There are no users to notify.

Contact

Questions: privacy@smithlabs.group