Privacy policy · 16 October 2026

Your words, and how they are handled.

This policy describes the code supplied for CaptionKaro. The site operator is responsible for keeping this policy and its contact information accurate when configuring the production website.

Topic text and generated results

When you press Create, your input is sent to this website’s server to compose a template-based result. This release does not send it to an AI provider. The application does not persist your topic or result in its database. Hosting/server logs may record request metadata, and browser memory contains the displayed result.

Local drafts and essential sessions

Saved drafts are kept in this browser’s localStorage. They are not uploaded or synchronized through Google. Clearing browser storage can remove them. You can remove individual or all saved drafts using the interface. The essential CKSESSION cookie contains a session identifier. The corresponding server-side session stores a random CSRF token, request counters and recent template identifiers, not a cloud writing history.

Optional Google/YouTube access

The separately preserved auth.php module requests permission to manage your YouTube account—not merely name, email or proof that you are human. If you authorize it, the module saves access tokens, refresh tokens when supplied and retrieved account details such as email/channel information. It also records IP-related country and referral information when available. These values remain in the legacy server database after a browser session ends. This access is not needed to create captions or save local drafts.

Limits of the preserved module

The original authorization implementation was not rewritten for this release. Its token database fields do not implement application-level token encryption. No absolute security guarantee is made. A logout or session expiry does not revoke Google access or erase saved database records. Remove third-party access in your Google Account connections settings if you wish to revoke permission, and contact the operator for a separate deletion request.

Support requests

If you submit the contact form, your name, email, message and timestamp are recorded in a protected server file so the operator can review the request. This form does not automatically send email. Do not include passwords, OAuth tokens or sensitive account information. Retention and deletion are managed by the operator; the implementation has no automatic support-message deletion.

Cookies, assets and analytics

This release does not include advertising trackers or third-party analytics by default. Fonts are served locally. The Google/YouTube permission screen and external requests made by the preserved module are governed by their respective providers. If the operator later adds analytics, advertising or another processor, this policy and any necessary consent mechanism must be updated before that use.

Your choices

You can use the writing tool without Google/YouTube authorization. You can clear local drafts using the interface and clear site cookies in the browser. For server-side data requests, use the contact page. The site cannot promise how another provider handles data after it has been shared.

Return to the writing studio