Hello PonyPrivacy Policy
Hello Pony is a website for big screens and car browsers: watch YouTube, play games and see your phone's screen. This policy explains what data the site uses, why, and how you control it.
Who we are
Hello Pony is operated by an individual developer. Contact: [email protected]. We do not sell data and we do not show ads.
Hello Pony account
The private area of the site is available to invited users with a Hello Pony account. For it we store: the e-mail address, a salted hash of the password (never the password itself), the names of your devices, your watch history and the channels you follow — so the site can show them again on your devices.
Signing in with YouTube
You can optionally connect your own YouTube account. We request only the read-only scope https://www.googleapis.com/auth/youtube.readonly and use it solely to show you, inside Hello Pony, your own subscriptions, playlists, liked videos and your channel's name and picture.
- We store only the OAuth tokens Google gives us, on our server, linked to your Hello Pony account or — on the public home page — to an anonymous random identifier kept in a cookie of your browser. Lists are fetched when you open them and kept in memory for a few minutes.
- We never change anything in your Google account, never download videos, and do not sell, share or transfer YouTube data to anyone. We do not use it for advertising or to train AI or machine-learning models.
- Videos are played by the official embedded YouTube player, which is provided by YouTube under its own terms.
Hello Pony's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Hello Pony uses the YouTube API Services; see also the YouTube Terms of Service and the Google Privacy Policy.
Public home page
The home page works without a Hello Pony account. Your search queries are sent to the YouTube API to get results; identical queries are cached for up to one day with no link to who searched. Suggestions while typing come from YouTube's public suggestion service.
Sending from a phone
When you scan the QR code shown on a screen, your phone is paired with that screen by a random code stored in a cookie on the phone. Links you send are kept in that screen's list (at most 30, with the video title from YouTube) until you remove them. Only YouTube video links are accepted.
Phone screen mirroring
If you use the «Экран в Tesla» phone app, the picture and sound of your phone pass through our server to your screen in real time. Nothing is recorded or stored.
Cookies
We use only cookies needed for the site to work: the sign-in session, the device name, the interface language, the anonymous identifier of the public home page and the phone pairing code. No analytics or advertising cookies. The embedded YouTube player may set its own cookies according to Google's policies.
Storage and security
Data is stored on our own cloud server and is reachable only over encrypted HTTPS connections. Only the operator has access to the server. Tokens are deleted when you sign out or disconnect; other data is deleted on request.
Your choices
- Sign out of YouTube on the site at any time — the token is revoked and deleted.
- Revoke Hello Pony's access in your Google account at myaccount.google.com/permissions.
- Ask us to delete all data linked to you: [email protected]. We do it within 30 days.
Children
Hello Pony is not directed at children under 13 and we do not knowingly collect their data.
Changes and contact
We may update this policy; the date above shows the current version. Questions: [email protected].