Privacy policy
Last updated: 31 October 2026
Whatdunit tools
Whatdunit tools is a private app that the owner of the YouTube channel @whatdunit runs on their own computer. It uses YouTube API Services. Google's handling of data is described in the Google Privacy Policy.
What data the app uses
- YouTube: only the @whatdunit channel's own data. The app uploads and edits the channel's own videos, thumbnails, subtitles and publishing times, posts the channel's own comments, and reads the channel's own statistics through the YouTube Analytics and Reporting APIs.
- Gmail: the app can send email from the channel's Gmail address, and nothing more. It cannot read, search or delete mail. It sends short notes to the authors of the published case reports the videos are based on, using work addresses printed in those reports.
The app does not access any other person's Google account.
How the data is used and stored
The access key stays on the channel owner's computer. The app does not share, sell or transfer data to anyone, and it uses none of it for advertising. It sets no cookies. Whatdunit tools' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long data is kept
- The access key stays on the channel owner's computer for as long as the app needs it.
- Statistics from the YouTube Analytics and Reporting APIs can be kept. The app confirms its access every time it runs, and at least every 30 days.
- Other data from YouTube API Services is kept for no more than 30 days. After that it is deleted or fetched again.
How to remove access and delete data
Access can be revoked at any time on the Google security settings page. If access is revoked, the app deletes the data it holds from that access within 30 days. If you ask us to delete data, we do it within 7 days.
Authors who receive an email from us
When a video is based on a published case report, the channel sends one short email to the report's authors. We use the name and work email address printed in the report. We keep a local record of the name, address, article and date, so that nobody gets the same email twice. We do not share the record and do not use it for anything else. If you reply and ask us to, we delete your details within 7 days and do not write to you again.
Our legal basis is legitimate interest (GDPR Article 6(1)(f)). We tell authors that their published work was used and credited, and we give them a chance to correct mistakes. You have the right to see the data we hold about you, to object to its use, and to have it deleted. Write to contact@whatdunit.org. You can also complain to the Danish Data Protection Agency (Datatilsynet).
The data controller is Whatdunit, contact@whatdunit.org.
This website
whatdunit.org sets no cookies and runs no tracking or analytics scripts. Videos on this site show only a still image until you click play. Nothing loads from YouTube before that. When you click, the video plays from youtube-nocookie.com, and the Google Privacy Policy applies.