fYT Rating · Last updated: 21 August 2026
fYT Rating is a free, open-source Android application that reads and changes the like status of YouTube videos on the signed-in user's own account. This policy describes what it does with personal data.
The application has no server and no backend of its own. It collects no analytics, contains no advertising, and shares no data with anyone. The only external service it contacts is the YouTube Data API, on the user's behalf and only after the user has authorised it.
If the user signs in, the application can read and set the rating of a
YouTube video on that account. It requests a single scope,
https://www.googleapis.com/auth/youtube.force-ssl, and uses it for
exactly two YouTube Data API calls:
videos.getRating — reads the signed-in user's rating of a
video, so it can be displayedvideos.rate — sets that rating when the user, or an
application the user has allowed, asks for itThe narrower read-only scope cannot be used: videos.getRating
returns the user's own rating and rejects it.
Authorisation is delegated to Google Play services through Android's standard
AccountManager. The user chooses the account and approves the
consent screen drawn by the system. The application never receives, requests or
stores a password, and no client secret is embedded in it. Access tokens are
managed by Google Play services and are not written to storage by this
application.
In the application's private storage, and nowhere else:
All of it is removed when the user signs out, except the allow list, which the user manages directly.
The application does not collect names, contacts, messages, browsing or watch history, files, photographs, location, device identifiers or any identifier used for tracking or advertising. It does not build profiles and does not sell data, because it transmits none.
Video titles and thumbnails fetched for display are held in memory only and are not stored.
fYT Rating can answer rating requests from other applications so they do not have to request Google authorisation themselves.
No application is allowed by default. A request from an application the user
has not explicitly allowed is refused. The identity of a caller is established
from the creator of an Android PendingIntent, which is recorded by
the operating system and cannot be forged by the caller.
An allowed application can ask for the rating of a video and can change it. It receives no account credentials, no access token, and no information about the account beyond the ratings it asks about. Access can be withdrawn at any time in Allowed applications.
The YouTube Data API is the only external service contacted, and only while the user is signed in. Those requests are governed by Google's Privacy Policy.
Video thumbnails are loaded from Google's public thumbnail host. No account information is sent with those requests.
Access can be withdrawn in two ways, and either is sufficient:
After withdrawal the application can no longer read or change any rating.
Nothing is retained anywhere but the device. Signing out removes the stored account address and channel name immediately. Uninstalling the application removes everything it stored.
The application is not directed at children and collects no data from them.
Changes are published on this page, with the date at the top updated. Material changes will also be noted in the release notes.
Questions and requests can be raised as an issue in the project repository, or sent to the support address shown on the Google consent screen.