Privacy Policy
This policy explains what personal information Tyson Veach, doing business as ClksOptimal ("ClksOptimal", "we", "us"), collects when you use clksoptimal.com, our free tools and blog, and the ClksOptimal browser extension (together, the "Services"), and what we do with it. If you have a question, email clksoptimalsupport@gmail.com.
- We collect what we need to run your account and the tools: your name, email, password (stored only as a hash), plan, and the content you ask us to analyze.
- We send that content to AI providers (OpenAI and Google) to produce your results. We don't sell your personal information.
- Optional analytics and advertising tools (Microsoft Clarity and TikTok) load only if you accept them, and never when your browser sends Global Privacy Control.
- If you connect YouTube, we get read-only access to your channel's statistics. You can disconnect at any time.
- You can delete your account and its data yourself from your profile.
- You must be 13 or older to use ClksOptimal.
1. What we collect
Information you give us
- Account details: your name, email address and password. Passwords are stored only as a salted hash; we can't read them.
- Preferences: what you publish (for example "YouTube"), whether you want tips and product emails, whether you want results-tracking reminders, and the date you accepted our Terms.
- Content you analyze: titles, headlines, descriptions, thumbnails or image links, short video clips, and messages to Clks Coach. We save each title you analyze with its scores, plus any results you later record for it, so you can track what worked.
- Support messages: what you write when you contact us, and your email address.
- Newsletter sign-ups: your email address and which page you signed up from.
Payment information
Payments are handled by Stripe. Your card details go directly to Stripe; we never receive or store your card number. Stripe tells us your customer and subscription IDs, your plan, your billing period and whether payments succeed. Stripe's handling of your data is described at stripe.com/privacy.
Information from YouTube (only if you connect a channel)
See section 5.
Information collected automatically
- Server and security data: your IP address, browser user agent, and the pages and API endpoints you request. We use this to run the Services, prevent abuse (for example, limiting sign-ups or free analyses per connection) and fix problems. Where we keep these for rate limits, we store a keyed hash of the IP or email address rather than the address itself.
- First-party visit counts: we count page views using a daily visitor code derived from your IP address and browser, which changes every day and can't be reversed. We don't store your raw IP address or user agent in these records.
- Optional analytics and advertising data: only with your consent. See section 6.
We don't collect precise location, contacts, biometric data, or sensitive personal information such as health or financial account details. We don't offer sign-in with Facebook, X or other social accounts.
2. How we use it
- To create and secure your account and log you in.
- To provide the tools you ask for: scoring and rewriting content, analyzing thumbnails and clips, generating images, and showing your channel statistics.
- To process payments, manage subscriptions and credits, and send receipts, renewal reminders and account notices.
- To answer support requests.
- To prevent fraud, spam and abuse, and to enforce our Terms.
- To understand, in aggregate, how the Services are used and whether our scores match real-world results, so we can improve them.
- To send tips and product updates, only if you opt in. You can opt out at any time.
- To measure our advertising, only if you accept optional cookies.
- To comply with the law.
Our scores and suggestions are produced automatically by AI, but we don't use automated decisions that have legal or similarly significant effects on you.
3. Who we share it with
We share personal information only with the providers that help us run the Services, and only what each needs:
| Provider | What it does for us | What it receives |
|---|---|---|
| Render (and Cloudflare, where traffic is routed through it) | Hosting, network security and delivery | All requests to the Services, including IP addresses and server logs |
| Supabase | Database hosting | Account, preference, analysis and subscription records |
| Stripe | Payments and billing | Your email, plan and payment details you enter at checkout |
| OpenAI | AI text and image analysis and generation | The content you submit for analysis, and your preferences that shape the prompt |
| Google (Gemini API) | AI video clip analysis | Video clips you submit to the Hook Analyzer |
| Google (YouTube API Services) | Channel connection | Your authorization and requests for your channel's data |
| Our email delivery provider | Sends account, billing and opted-in emails | Your email address, name and the email content |
| Microsoft Clarity (only with consent) | Site usage analytics, heatmaps and session replays | Device and usage data and how you interact with pages; text inside the logged-in app is masked |
| TikTok Pixel and Events API (only with consent) | Measures whether our TikTok ads lead to visits, sign-ups and checkouts | Device and page data, the TikTok ad click ID, and for sign-ups and checkouts a hashed (SHA-256) email address and account ID |
| PostHog or Plausible (only with consent, if enabled) | Product usage analytics | Device and usage data |
Microsoft and TikTok may use the data they receive under their own privacy policies: Microsoft Privacy Statement and TikTok Privacy Policy.
We may also disclose information if the law requires it, to protect someone's safety, to protect our rights or investigate fraud, or as part of a sale or transfer of the business (in which case this policy would continue to apply to your information).
We do not sell your personal information for money. Under some US state laws, letting TikTok receive data from our site to measure ads can count as "sharing" for targeted advertising. That only happens if you accept optional cookies, and you can withdraw that at any time with Privacy choices or by turning on Global Privacy Control.
4. AI processing and video clips
When you use a tool, the content you submit is sent to OpenAI or Google to produce your result. Both process it under their API terms, which say API data isn't used to train their models by default. We don't use your unpublished content to train any model.
Hook Analyzer clips: the clip you choose streams through our server straight to Google's Gemini API. We never write it to disk or keep a copy. We delete it from Google as soon as the analysis returns, and Google deletes any remaining copy automatically within 48 hours. Don't upload footage you don't have the rights to, or that contains information you wouldn't want processed by a third party.
AI output can be wrong. Scores are estimates, not measurements or guarantees.
5. YouTube API Services and Google data
ClksOptimal uses YouTube API Services. If you choose to connect a YouTube channel, you authorize us through Google with read-only permissions (youtube.readonly and yt-analytics.readonly). By connecting, you agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy.
- What we access: your channel's name and ID, your recent videos (titles, thumbnails, publish dates) and their statistics from YouTube Analytics, such as impressions, click-through rate, views and watch time.
- What we store: the authorization (refresh) token Google gives us, your channel ID and name, and the date you connected. Channel statistics are fetched when you view them and kept only in short-lived server memory, not in our database.
- How we use it: only to show you your own channel's performance and compare our scores with your real results. We never post, edit or delete anything on YouTube.
- Who sees it: only you. When you ask for an AI review of your videos, the relevant titles and thumbnails are sent to OpenAI to produce it. We don't share YouTube data with advertisers.
- Disconnecting: use Disconnect on your profile, which revokes our access and deletes the stored token and channel details. You can also revoke access at any time from your Google security settings at security.google.com/settings/security/permissions. If you revoke access there, we delete the stored token and channel details the next time we try to use them, and in any case within 30 days.
ClksOptimal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Cookies, analytics and advertising
On your first visit we ask whether you accept optional analytics and advertising tools. Until you accept, none of them load. "Necessary only" keeps them off. If your browser sends a Global Privacy Control signal, they stay off and the accept button is disabled. You can change your choice at any time with the Privacy choices button at the bottom of our pages. Turning tools off reloads the page and removes the optional cookies this site can access; it doesn't delete data third parties already received. We don't respond to "Do Not Track" signals, because there's no agreed standard for them, but we do honor Global Privacy Control.
| Name | Type | Purpose | Lasts |
|---|---|---|---|
clks_privacy | Necessary cookie | Remembers your privacy choice | 180 days |
clks_demo | Necessary cookie | Counts how many free title scores this browser has used, to enforce the free limit. Contains no personal information. | Up to 1 month |
clks_token | Necessary browser storage | Keeps you logged in | Until you log out or delete your account |
clks_ttclid | Optional browser storage | Remembers the TikTok ad click that brought you here, so a sign-up can be credited to the ad | Until you withdraw consent or clear site data |
_ttp, ttcsid* | Optional cookies (TikTok) | Advertising measurement | Set by TikTok, up to 13 months |
_clck, _clsk | Optional cookies (Microsoft Clarity) | Usage analytics and session replay | Set by Microsoft, up to 1 year |
ph_* | Optional cookies (PostHog, if enabled) | Product usage analytics | Set by PostHog, up to 1 year |
Server-side advertising events are sent to TikTok only when your browser has a current consent cookie and no Global Privacy Control signal. Payment webhooks never send advertising events.
7. Email
We send account emails you can't opt out of while you have an account: password resets, receipts and subscription confirmations, renewal reminders, payment problems and important changes to our Terms. Tips, product updates and the guides newsletter are sent only if you ask for them. Every one of those includes a one-click unsubscribe link, and you can also turn them off in your profile. Newsletter sign-ups are confirmed by email before we send anything else.
8. How long we keep it
- Account, preferences and analyses: until you delete your account. Deleting it removes your account record, saved analyses, usage counters, YouTube connection and any newsletter subscription for that email address from our database straight away.
- Billing records: Stripe keeps payment and invoice records as required for tax and accounting.
- Rate-limit counters: deleted automatically after about 70 days.
- First-party visit counts: deleted after 365 days. They don't contain your raw IP address.
- Database backups: deleted once they are 30 days old (we always keep the single most recent one). If you delete your account, your data may stay in a backup until that backup is deleted; we don't restore it into use.
- Unsubscribes: if you unsubscribe from the newsletter, we keep your email address on a do-not-email list so we don't send to you again. Ask us if you want it removed entirely.
- Server logs: kept by our hosting provider for a limited period for security and troubleshooting.
9. Security
All traffic is encrypted with HTTPS. Passwords are hashed. Card details never reach our servers. Access to production data is limited to the owner of the business. No system is perfectly secure; if we learn of a breach that affects you, we'll notify you as the law requires.
10. Children
ClksOptimal is not for children under 13, and we don't knowingly collect personal information from anyone under 13. If you are 13 to 17, you may use ClksOptimal only with a parent's or guardian's permission. If we learn that we've collected information from a child under 13, we'll delete the account and its data. If you believe a child under 13 has given us information, email clksoptimalsupport@gmail.com.
11. Your choices and rights
- See and change your information: log in and open your profile.
- Delete your account: Profile, then Delete account. This also cancels any subscription immediately.
- Get a copy of your data, or make any other request: email clksoptimalsupport@gmail.com from the address on your account.
- Marketing email: use the unsubscribe link or the setting in your profile.
- Optional cookies: use Privacy choices or turn on Global Privacy Control.
- YouTube: disconnect from your profile or from your Google security settings.
We'll respond within 30 days (or sooner where the law requires) and won't treat you differently for exercising your rights. We may need to confirm your identity first, usually by asking you to write from the email address on your account. An authorized agent can make a request for you with your signed permission.
12. US state privacy rights
Depending on where you live (for example California, Colorado, Connecticut, Virginia and other states with consumer privacy laws), you may have the right to know what personal information we've collected about you, to get a copy, to correct it, to delete it, and to opt out of "sale", "sharing" or targeted advertising. To exercise them, use the options in section 11. If we decline your request, you can appeal by replying to our decision; if the appeal is denied, you can contact your state attorney general.
In the past 12 months we have collected these categories of personal information: identifiers (name, email, IP address, account IDs); commercial information (plan and purchase history); internet activity (how you use the Services); audio and visual content you submit (thumbnails and clips); and, if you connect YouTube, your channel information. We collect them from you, from your browser, from Stripe, and from Google if you connect YouTube, for the purposes in section 2, and disclose them to the providers in section 3. We have not sold personal information. With your consent only, internet activity may be shared with TikTok for advertising measurement, as described above. We don't knowingly sell or share the personal information of anyone under 16.
13. Visitors outside the United States
We're based in the United States and process your information here and wherever our providers operate. If you're in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases: performing our contract with you (running your account and tools), your consent (optional cookies and marketing email, which you can withdraw at any time), our legitimate interests (security, fraud prevention and improving the Services) and legal obligations. You have the rights to access, correct, delete, restrict or object to processing, and to data portability, and you can complain to your local data protection authority. Where our providers transfer data internationally, they use safeguards such as the European Commission's Standard Contractual Clauses.
14. Changes to this policy
We'll update the date at the top when we change this policy. If a change materially affects how we use information we already have, we'll email account holders before it takes effect.
15. Contact us
Tyson Veach, doing business as ClksOptimal
Iowa, United States
clksoptimalsupport@gmail.com