Privacy Policy
This policy explains what information fishcut stores, where it stores it, and what it uses it for. fishcut is software that runs on your computer, and NomaDamas does not receive your data.
1. Where this policy applies
This policy applies to fishcut (the command-line tool and the local editor), an open source tool for making shorts that NomaDamas distributes, and to this website. NomaDamas is an AI open source hacker house operated by Markr.
- fishcut runs on your computer. NomaDamas does not operate servers for fishcut, and it does not receive or keep the information that fishcut handles.
- When you connect through the Google Cloud project that NomaDamas registered, the Google consent screen shows the app name fishcut, and this policy applies.
- When you connect with an OAuth client you created yourself, you manage that Google Cloud project. In that case too, the fishcut software handles information in the way this policy describes.
2. Use of YouTube API Services
fishcut uses YouTube API Services to check the YouTube channel you connected and to upload the videos you have checked. When you use the YouTube features, the Google Privacy Policy also applies. The YouTube Terms of Service are covered in the Terms of Service.
3. Information fishcut accesses and stores
YouTube upload is optional. If you do not connect a Google account, fishcut does not handle any of the Google-related information below.
| Information | Source | Where it is stored |
|---|---|---|
| Google OAuth tokens (access token, refresh token) | Issued by Google when you connect your Google account | The fishcut state folder on this computer |
| ID and name of the connected YouTube channel | YouTube Data API (youtube.readonly) | Same folder |
| ID, visibility status, scheduled time, and upload progress of uploaded videos | YouTube Data API (youtube.upload, youtube.readonly) | Same folder |
| Upload settings (title, description, tags, visibility, category, made for kids, synthetic content, scheduled time) | Entered by you | Same folder |
| OAuth client file | Added by you | Same folder |
| Project files (scripts, voice, images, render output) | Made by you and the AI agents you connect | A work folder you choose |
fishcut does not read your Google account password, watch history, subscriptions, comments, contacts, or YouTube Analytics data.
4. How fishcut uses the information
- It shows the name and ID of the channel you are about to upload to, so you can confirm that it is the right channel.
- It uploads the video for which you pressed the confirm button to the connected channel, with the settings you chose.
- After an upload, it checks that the video's visibility status and scheduled time match what you requested, and shows you the result.
- It lets the AI agents you connect over MCP read the name of the connected channel and the upload records, so they can help you plan videos and prepare uploads (section 5).
fishcut does not use this information for advertising, profiling, sale, or credit assessment.
5. Sharing and transfer
- fishcut does not send the information above to NomaDamas or to any other company.
- Channel checks and upload requests go directly from your computer to Google over HTTPS. There is no server in between.
- AI agents that you connect over MCP (such as Claude Code or Codex) can read part of what the editor stores on your computer: video projects, channel settings (channel name, planning settings, upload defaults, default voice, publishing schedule, and the name of the connected YouTube channel), and upload records (channel name, time, visibility or schedule, video URL, title sent, and pinned comment). You decide which agents to connect, and the policies of those agent providers also apply. fishcut does not pass Google tokens or YouTube channel IDs over MCP.
- If you choose a paid voice provider (such as Typecast or ElevenLabs) and approve it, the sentences to be voiced are sent to that provider with your API key. That provider's policies apply to this transfer. It contains no Google user data.
6. Where it is stored and how it is protected
- fishcut creates the state folder with permissions that let only the user who runs fishcut read and write it (0700 for the folder, 0600 for files). When you run fishcut with Docker, the folder is kept in that installation's
statevolume. - All communication with Google is encrypted with HTTPS.
- The local editor accepts connections only at this computer's address (
127.0.0.1), and only a browser opened with the token issued at startup can use it.
7. Retention period
| Information | Retention period |
|---|---|
| Google OAuth tokens | As long as you stay connected |
| Channel ID and name, status of uploaded videos | Up to 30 days. After 30 days, fishcut checks YouTube again and refreshes the information or deletes it. |
| Upload settings, OAuth client file, project files | Until you change or delete them |
8. Deletion and revoking access
- When you disconnect in the editor's channel management, fishcut immediately asks Google to revoke the token and deletes the related information on this computer within 7 days.
- You can also revoke access on the Google Account permissions page. In that case, fishcut finds that the token is invalid the next time you use it and deletes the related information within 30 days.
- You can also delete the fishcut state folder yourself. NomaDamas does not hold this information, so deleting it on your computer completes the deletion right away.
- Deleting information on this computer does not affect videos already uploaded to YouTube or data that YouTube stores. YouTube manages that data.
9. Device storage and cookies
- The fishcut software creates a state folder (tokens, channels, upload history) and a work folder on your computer.
- The local editor sets a session cookie so that only the browser opened with the startup token can use the editor. It may keep convenience information, such as display settings, in browser storage. This cookie and this storage are used only for the editor's address on this computer.
- This website does not use cookies or analytics tools. It loads fonts from outside font services (jsDelivr, Google Fonts) and is served through a hosting provider, so these providers may keep access logs (IP address, browser information).
10. Ads and third-party content
fishcut and this website do not show ads, and they do not allow third parties to place content or ads in them.
11. Limited Use of Google user data
When fishcut uses information it receives from Google APIs, or transfers that information to another app, it follows the Google API Services User Data Policy, including the Limited Use requirements.
fishcut's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- fishcut uses Google user data only for the features in section 4 above.
- NomaDamas does not receive Google user data, so no one at NomaDamas reads it.
- fishcut does not use Google user data to train AI or machine learning models, and it does not sell Google user data or use it for advertising.
12. Children
fishcut is not a service made for children, and it does not knowingly collect information about children. Each time you upload, you set whether the video is made for kids.
13. Changes to this policy
If this policy changes, the last updated date on this page is changed. If fishcut starts to handle information in a way or for a purpose that this policy did not cover, fishcut asks you inside the app to agree to the changed policy again.
14. Contact
Send questions or complaints about how personal information is handled to nmdms.mkt@gmail.com. Operator: NomaDamas (legal entity: Markr).