Privacy policy

Everything is OK · yt.japharsworld.com · updated 2026-10-31

In short: this site keeps nothing that identifies you. It has no accounts, no cookies, no analytics and no ads.

Visitors of the VRChat world

• Searches. When you search from the world, your VRChat client sends the search text to this server. The server asks YouTube for results and hands back a list of videos. Only the results' video IDs and their public titles, channels, lengths, whether they are live, and the start of their descriptions are stored, for up to a day, so that others in the same instance can load the same video and see what is playing. The search text is not stored, the list is not linked to you, and it is overwritten as the server reuses its slots.
• Logs. The server logs which kind of request it answered, the response code and how long it took; for a search, also its length and whether it came from Quest/Android or PC; for a video report, its kind and the same Quest/Android or PC. It does not log search text, IP addresses or anything about your VRChat account.
• Daily limits. So that one visitor can't use up what everyone shares, the server counts how many new videos each visitor has started today. It counts them under the visitor's daily code (see IP addresses below), in memory only: never written to disk, logged or sent anywhere, and gone at the end of the day (America/Chicago time) or when the server restarts.
• Usage counts. The server counts how often things happen each day: searches, plays, caption requests, which of the 16 VRChat languages they came in, whether a play was on PC or on Quest/Android (from the video player's own name, once per room), how often YouTube refused a lookup, by kind of refusal only, how many videos did or did not have captions, and video reports: when someone presses Resync, when the world reloads a stalled video, and the world testers' problem reports, by kind only. These are totals only. They never include search text, video IDs, IP addresses or anything about you or your VRChat account. The world's public VRChat numbers (visits, favorites, how many people are in it) are recorded the same way, as counts.
• IP addresses. Your IP address is not kept. Each request is checked against the limits as it arrives, and what the server remembers afterwards is only a daily code made from your address with a secret key. The key is random, held in memory only, and replaced at the start of each day (America/Chicago time); once it is gone, the day's codes can't be traced back to an address. The codes are in memory only, never written to disk, logged or sent anywhere, and a restart clears them. A code is kept for up to two minutes after your last request (for the per-minute limits); until the end of the day (for the daily limit above); while a video you started is being prepared in higher qualities (usually seconds, at most 12 hours, so they count toward your own daily limit); and, for a code made from your address and your video player's name that tells a reload from a new viewer, 12 hours after you started the video.
• Videos. Videos play straight from YouTube in your VRChat client, so YouTube receives your request as it would for any video. The Google Privacy Policy covers that.
• Channels list. The world reads a public status file and a thumbnail picture from GitHub Pages. GitHub's privacy statement applies to those requests.

YouTube API Services

This site uses YouTube API Services, under the YouTube Terms of Service and the Google Privacy Policy.

• The only Google account connected is the world owner's own, which authorized access with the YouTube scope. That access is used for one thing: to keep the unlisted playlists behind the Channels list on the owner's channel current, by adding a live stream and removing the old one.
• The monitor also reads public information about those streams: whether they are live, their titles and channels, viewer counts and thumbnails. It keeps that information to measure how reliable each stream is.
• No data about any other YouTube user is requested, stored or shared. Visitors never sign in to Google through this site.
• The owner can revoke this access at any time in Google account permissions, after which stored access tokens stop working.

Sharing and keeping data

Nothing is sold. Stream records and the playlist access token are stored on one server run by the world owner. Status alerts about streams go to the owner's private Discord channel.

Aggregate counts and server health numbers (no search text, video IDs or IP addresses) are sent to Grafana Cloud for monitoring. Logs are not sent. Nothing else is shared with third parties.

Contact

Questions or requests: open an issue on GitHub.