Privacy Policy

Last updated: June 2026 · Applies to stfu.cc and the STFU Chrome Extension

Who we are

Standard Fundament ("we", "us", "our") operates the website stfu.cc and the STFU Chrome Extension. Our service helps users cut through YouTube clickbait by generating AI-powered summaries of any YouTube video.

Data controller: Standard Fundament, Berlin, Germany.
Contact for privacy matters: stfu@stfu.cc

What data we process

Short version: We do not collect any personal data. We do not require you to create an account, log in, or provide any identifying information. No cookies are set. No analytics tracking.

YouTube video URL

When you submit a YouTube link, the URL (e.g. https://youtube.com/watch?v=…) is processed locally in your browser to extract the video ID. The URL is not stored on our servers.

Video transcript content

We fetch the publicly available auto-generated transcript for the YouTube video you submit — this is the same transcript YouTube makes available to all viewers. This transcript text is then sent to our AI provider (Groq) to generate a summary. The transcript is public data belonging to the video publisher, not personal data of the user.

Cloudflare web logs

Our website is hosted on Cloudflare Pages. Cloudflare may collect standard technical data (IP address, browser type, request timestamp) as part of normal web hosting operations. This is governed by Cloudflare's own privacy policy. We do not access or store these logs ourselves.

What we do NOT collect

No name, email address, or personal identifiers
No browsing or watch history
No payment information
No device fingerprinting
No cookies or local tracking (the Chrome Extension uses localStorage only to remember your language preference on your own device)

Legal basis (GDPR Article 6)

Since we do not process personal data, GDPR's legal basis requirements are generally not triggered. To the extent that incidental technical data (e.g. IP address in server logs) constitutes personal data, we rely on Legitimate Interest (Article 6(1)(f)) — specifically, the legitimate interest of operating a secure and functional web service.

Sub-processors & third-party services

The following third-party services are used to operate Standard Fundament. Where personal data or content is transferred to processors outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) as the legal transfer mechanism unless otherwise noted.

Processor	Purpose	Location	Transfer basis
Groq, Inc. Privacy Policy	AI inference API. Receives video transcript text to generate the summary using Meta Llama 4.	US	Standard Contractual Clauses (SCCs)
Cloudflare, Inc. Privacy Policy	Website hosting (Cloudflare Pages) and CDN. May log standard HTTP request metadata.	US EU PoPs	SCCs + EU-US Data Privacy Framework
allorigins.win allorigins.win	CORS proxy used to fetch YouTube's public transcript data. Only the YouTube video URL is passed; no personal user data.	US	No personal data transferred
Meta Platforms / Llama Privacy Policy	The underlying AI model (Llama 4 Scout) that generates summaries. Runs on Groq's infrastructure — Meta is not directly contacted.	US	Via Groq (SCCs)
Google / YouTube Privacy Policy	Source of video metadata (title, channel name) and public transcript data. We read publicly available data only; no YouTube login required.	US	Public data only — no personal data transferred

Data retention

We do not store any user data on our own servers. Video transcripts are sent to Groq's API transiently at the time of summarization and are not retained by us afterwards.

Groq's API data handling: per Groq's privacy policy, API inputs and outputs are not used to train models and are not stored beyond the duration of the API call, unless you have opted in.

Cloudflare retains standard access logs for up to 24 hours per their default configuration for Pages deployments.

Your rights under GDPR

If you are located in the EU/EEA, you have the following rights regarding any personal data we may process. Since we collect no personal data, most of these rights have limited practical application — but we are committed to honouring them.

Right of access

Request a copy of any personal data we hold about you.

Right to rectification

Correct inaccurate personal data.

Right to erasure

Request deletion of your personal data ("right to be forgotten").

Right to restriction

Ask us to limit how we use your data while a dispute is resolved.

Right to portability

Receive your data in a structured, machine-readable format.

Right to object

Object to processing based on legitimate interests.

Right to complain

Lodge a complaint with your local data protection authority.

Right to withdraw consent

Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at stfu@stfu.cc. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority (e.g. the CNIL in France, the ICO in the UK, the BfDI in Germany).

Cookies & tracking

We set no cookies. We use no analytics platforms (no Google Analytics, no Mixpanel, no Hotjar or similar). The Chrome Extension uses the browser's localStorage only to remember your language preference (English or Video language) locally on your device. This data never leaves your device.

Children's privacy

Our service is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be noted with a new "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the revised policy.

Contact

For any privacy-related questions or to exercise your rights:

Standard Fundament
Mehmet Perk
Berlin, Germany
stfu@stfu.cc