Last updated 12 August 2026
This notice sets out what personal data Yideos processes, the legal basis on which it does so, who it is shared with, how long it is kept, and the rights you may exercise. The service is built so that watching requires no account, and so that visitors without one leave no record with us.
This notice describes how the operator of Yideos ("we", "us"), acting as data controller, processes personal data in connection with the website at yideos.com and its subdomains (the "service"). It does not apply to any third-party service you reach from it, each of which acts as its own controller under its own notice.
NOTE FOR THE OPERATOR — the controller’s legal name and postal address must be stated here before launch. A privacy notice that does not identify the controller is deficient under GDPR Article 13(1)(a).
You may browse and watch without an account, and we create no user record when you do.
So that the service can avoid recommending material you have already seen, your browser retains locally a record of videos opened and playback position reached. This data is written to and read from local storage on your own device, is not transmitted to us, is not accessible to us, and covers approximately the preceding thirty days. Clearing your browser storage erases it permanently.
We maintain an aggregate count of how many times each video has been played. That figure is an attribute of the video, contains no identifier, and cannot be attributed to an individual.
If you create an account, we process the following categories of personal data:
Where UK or EU data protection law applies, we rely on the following lawful bases under Article 6(1):
We maintain an aggregate tally of how frequently each search term is submitted across the service, including terms submitted by visitors without an account. That tally records the term and its frequency and contains no identifier. Its purpose is to identify material people look for and cannot find. A term submitted only once is deleted after 90 days; the remainder is retained for two years.
Your individual search history is stored separately and only where you are signed in. It exists to offer your recent searches back to you. Terms older than 90 days are deleted automatically, and only the 50 most recent are retained.
You may delete any individual term, or your entire search history, from the search box at any time.
If you use the contact form or submit a channel request, we retain the content of your message together with the name and email address you supply, in order to respond and to maintain a record of the request.
We set a strictly necessary authentication cookie when you sign in, cleared when you sign out. It is required to keep you signed in and is exempt from consent requirements on that basis.
We also use Google Analytics to measure how the service is used — which pages are opened, from what kind of device, and in what volume. It sets cookies of its own (named _ga and similar) to tell one visit from another. Its advertising features are switched off, so the data is not fed into Google’s advertising products, and this site carries no advertising. We set no advertising cookies of our own.
Video playback is separate. Video content is streamed by a third-party platform, and pressing play may cause that platform to set cookies under its own policy. We request its no-cookie player so that nothing is set merely by a page loading. Certain network filters block that particular hostname; where the player will not load at all, we fall back to the platform’s standard host, which may set a cookie on page load. In either case, playing a video is what makes such cookies possible.
We disclose personal data to the following categories of recipient, each engaged as a processor under contract and each processing only on our instructions:
Our providers may process data in the United States and other countries outside your own. Where personal data is transferred out of the UK or European Economic Area, that transfer is made under an appropriate safeguard, ordinarily the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses. Details are available on request through the contact page.
Video thumbnails and channel images are served through yideos.com rather than linked directly to their origin. This is done so that the service functions behind network filters. It has the incidental effect that browsing does not disclose to the originating host which pages you viewed.
Account data is retained until you request erasure. Search terms expire automatically as described in section 5. Local playback data on your own device expires after approximately thirty days.
On deletion of an account, the watch history, saved videos, likes and follows associated with it are deleted with it. Aggregate counts that contain no identifier are unaffected, as they are not personal data.
Correspondence is retained for as long as necessary to deal with the matter and to evidence how it was handled.
We apply technical and organisational measures appropriate to the risk, including transport encryption, row-level access control in the database, hashed credentials, and rate limiting on submission endpoints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The service is intended for a general audience and is not directed at children under 13, from whom we do not knowingly collect personal data. If you believe a child under 13 has provided personal data, contact us and we will delete the account and its data.
Subject to the law applicable to you, you have the right to request access to your personal data, its rectification, its erasure, restriction of processing, and portability, and to object to processing carried out on the basis of legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
California residents have the right to know what personal information is collected, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CPRA, and we have not done so in the preceding twelve months.
Requests may be made through the contact page and will be answered within the period required by applicable law. You also have the right to lodge a complaint with your national supervisory authority.
Recommendations are generated algorithmically from viewing activity. This does not produce legal or similarly significant effects and is not automated decision-making within the meaning of GDPR Article 22. Where you are not signed in, the personalised element is computed in your browser and the underlying data never reaches us.
We may update this notice. The date above records when the wording last changed. Material changes will be announced on the service rather than made silently.
Questions about this notice, or about the personal data we hold, may be sent through the contact page.