Legal / privacy
Privacy policy
This policy explains how marlyman123.com uses public YouTube channel data, optional video embeds, and privacy-conscious website measurement.
Effective 25 September 2026
Who operates this site
marlyman123.com is operated by Merlin in Christchurch, New Zealand. Privacy questions can be sent to support@marly.studio.
YouTube Data API use
The site uses a server-side API key to read public information for the Marlyman123 YouTube channel only. It uses YouTube Data API read methods for channel details, the channel's public uploads playlist, and public video details.
- There is no Google or YouTube sign-in, OAuth consent, or access to any visitor's account.
- The site cannot upload, edit, delete, like, comment on, or otherwise change YouTube content.
- The site does not import, download, store, or cache YouTube video or audio files.
- Processed display data is limited to public fields such as video IDs, titles, publication times, thumbnail URLs, public counters, live-stream fields, and YouTube's Made-for-Kids designation.
The required YouTube snippet responses can also contain public video descriptions. This site discards those descriptions and does not display or rewrite them.
The production site does not retain a YouTube API data snapshot. The server requests a bounded set of current public fields for this owner channel and keeps them only in process memory for a few minutes, so pages load quickly without repeating the same request. There is no persistent response cache: nothing is written to disk, and a restart clears the copy. If YouTube is briefly unreachable, the last in-memory copy may be shown for up to six hours. Missing configuration or unavailable audience status fail closed instead of falling back to another project.
Recent uploads appear in the exact order returned by the owner channel's YouTube uploads playlist. The site does not use duration, view counts, or other signals to infer or label a video as a Short, clip, highlight, category, or content type. Public counters are shown only when the API supplies them and are not used to rank the upload list. A livestream label is used only when YouTube supplies the corresponding live-stream details.
The site sets no cookies of its own and has no accounts, sign-in, or tracking identifiers.
Because this public-key client never requests OAuth or Authorized Data, it cannot appear as a connected app in a visitor's Google account. Google account connections can still be reviewed at Google security settings for apps with account access.
Thumbnails and video embeds
YouTube thumbnail URLs are used to show public channel content. They are delivered directly from YouTube; this site disables its hosting provider's image-optimization cache. Loading a direct thumbnail can send Google your network address, browser and request metadata, and this site's origin before you start playback. A privacy-enhanced YouTube player from youtube-nocookie.com is created only after a visitor explicitly chooses to play a video, never on page load or hover. That click requests immediate playback in the newly created player; there is no player or automatic playback before the click. The player is offered only when YouTube's live Made-for-Kids value is explicitly false. A true or unavailable value shows only the poster and an external “Watch on YouTube” link. When a player is selected, YouTube may receive device, network, cookie, and playback information and may serve third-party video, recommendation, advertising, or other player content under the Google Privacy Policy and YouTube Terms of Service.
You can browse titles and thumbnails without starting an embedded YouTube player. External “Open on YouTube” and “Watch on YouTube” links leave this site and are governed by YouTube's policies.
Hosting, analytics, and logs
The site runs on a server operated by Merlin. It does not use third-party analytics. Vercel Analytics and Speed Insights are built in but only switch on if the site is deployed on Vercel production, which it currently is not. Server security and error logs may briefly contain request metadata such as a timestamp, requested path, browser information, and network address, and are rotated automatically. The hosting provider's infrastructure may be located outside New Zealand. We do not use this site to build advertising profiles or sell personal information.
Your choices and contact
You may avoid YouTube player data by not selecting a video, block analytics or third-party requests using browser controls, and contact us about privacy or public content displayed here. You may ask to access, correct, or delete personal information or log data associated with you by emailing support@marly.studio, subject to applicable New Zealand law and any data the hosting provider must retain. If this policy changes materially, the effective date above will be updated.