1Who we are and what this policy covers
This Privacy Policy explains how the ETERNAL WORKSPACE desktop application for Windows (“the app”) and this website handle information. In this policy, “we” and “us” refer to ETERNAL WORKSPACE.
It describes what the app actually does in its current version. Where a behaviour depends on a feature you choose to use — most importantly connecting a YouTube channel — that is stated explicitly.
2The short version
- The app works on your computer. Your audio files are read, analysed and tagged locally. They are not uploaded to us.
- There is no ETERNAL account and no ETERNAL server. The app does not send your files, your usage, or your Google data to us or to any service we operate.
- The app contains no advertising, analytics, telemetry or crash-reporting code.
- The only online feature is YouTube Studio, and it is optional. If you connect a YouTube channel, the app communicates directly between your computer and Google to show your channel and upload the videos you choose.
- You stay in control. Disconnecting a channel deletes its sign-in token from your computer and asks Google to revoke the app’s access.
3Information processed on your device
When you use the Tag Editor, BPM & Key and the preview player, the app processes the following on your computer only:
- Audio files you open (MP3 and WAV), including their file names and folder paths. Audio is decoded in memory to detect tempo, key and tuning.
- Tag data stored in your MP3 files (for example title, artist, album, genre, year, BPM, key, detune and cover artwork). The app writes changes back to your files only when you save.
- App preferences such as the selected theme and recently used folders, stored in the app’s local settings for your Windows user.
None of this information is transmitted to us or to third parties.
4YouTube Studio and your Google account
YouTube Studio is an optional module. It is only active after you connect a YouTube channel. ETERNAL WORKSPACE uses YouTube API Services; by connecting a channel you also agree to the YouTube Terms of Service (opens in a new tab), and Google’s handling of your data is governed by the Google Privacy Policy (opens in a new tab).
How sign-in works
When you choose Connect a channel, the app opens Google’s sign-in page in your default web browser. You sign in with Google directly — the app never sees your Google password. After you grant consent, Google returns an authorization code to the app through a temporary address on your own computer (127.0.0.1), protected by the OAuth 2.0 PKCE mechanism. The app exchanges that code with Google for access and refresh tokens.
Permissions (OAuth scopes) the app requests
| Permission | Why the app requests it |
|---|---|
openid, email | To read the email address of the Google account you signed in with, so the app can show which account each connected channel belongs to. |
youtube.force-sslManage your YouTube account | To read your channel details, your recent uploads and their status, your playlists and the available video categories; to add an uploaded video to a playlist you pick; and to set a custom thumbnail you choose. The app does not delete videos, and does not post, edit or delete comments, ratings or captions. |
youtube.uploadUpload YouTube videos | To upload the video files you add to the upload queue, with the details you enter. |
yt-analytics.readonlyView YouTube Analytics reports | Requested at sign-in for channel reporting features. The current version of the app does not request any data from the YouTube Analytics API. If a future version uses it, this policy will describe exactly what is read. |
Google and YouTube data the app accesses
- Google account: your email address.
- Channel: channel ID, title, handle, profile image, the ID of the channel’s uploads playlist, and public counts (subscribers — unless hidden — total views and number of videos).
- Your videos: for your most recent uploads (up to 50 per channel): video ID, title, thumbnail, privacy and upload status, publish and scheduled-publish times, and view, like and comment counts.
- Playlists: the IDs and titles of your playlists, so you can choose one for an upload.
- Video categories available in your region.
Data the app sends to YouTube on your instruction
When you upload, the app sends to YouTube the video file you selected and the details you entered: title, description, tags, category, privacy setting or scheduled publish time, the “made for kids” declaration, and the thumbnail image and playlist you chose.
5How Google user data is used
Google user data is used only to provide the YouTube Studio features you see and use in the app: showing your connected channels and recent uploads, and uploading, scheduling and organising the videos you choose.
- Google user data is not sold, rented or traded.
- It is not used for advertising, including personalised or retargeted advertising.
- It is not used to determine creditworthiness or for lending purposes.
- It is not transferred to us or to any third party — it moves only between your computer and Google.
- It is not used to develop, improve or train generalised artificial-intelligence or machine-learning models.
- No person at ETERNAL reads your Google user data. The data stays on your computer, where we have no access to it.
Limited Use disclosure. ETERNAL WORKSPACE’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements.
6Where data is stored and how it is protected
Everything the app stores is kept on your computer, in your Windows user profile under %APPDATA%\com.eternal\eternal_workspace\. Nothing is stored on servers operated by us.
| What | Where | Protection |
|---|---|---|
| Google refresh tokens for connected channels, and the Google Cloud OAuth client ID and client secret the app signs in with | youtube\vault.bin | Encrypted with Windows DPAPI (Data Protection API), bound to your Windows user account on this computer. Never written in plain text and never written to logs. |
| Google access tokens | Memory only | Short-lived (about one hour) and never saved to disk. |
| Connected channel list: channel ID, title, handle, profile-image address, uploads playlist ID, public counts, and the Google account email | youtube\channels.json | Stored unencrypted, protected by your Windows account’s file permissions. |
| Upload queue per channel: drafts and their details (file paths, title, description, tags, schedule, status, upload progress and the resumable-upload address) | youtube\queue_<channel>.json | Stored unencrypted, protected by your Windows account’s file permissions. |
All communication with Google uses HTTPS. Channel and video thumbnails are loaded directly from Google’s servers while you view them.
DPAPI protects stored tokens from other Windows users and from copies of the file taken to another computer. Like any local protection, it cannot protect against malware running under your own Windows account, so keep your system secure.
8Data retention
Locally stored data stays on your computer until you remove it. The app does not delete it automatically after a period of time.
- Disconnecting a channel immediately deletes that channel’s refresh token, its upload queue and its entry in the channel list.
- The Google Cloud OAuth client configuration stays in the encrypted vault until you change it in Settings or delete the data folder.
- Videos and data you have uploaded to YouTube remain on YouTube until you delete them there.
We hold no copies of your data, so there is nothing for us to retain or delete on our side.
9Disconnecting, revoking access and deleting your data
Disconnect a channel in the app
- Open Settings → YouTube Studio.
- Choose Disconnect next to the channel and confirm.
The app deletes the channel’s refresh token from the encrypted vault, deletes its upload queue and removes it from the channel list. It then asks Google to revoke the token. If several connected channels were authorised in the same sign-in, they share one token, and the token is revoked when the last of them is disconnected.
Revoke access in your Google Account
You can remove ETERNAL WORKSPACE’s access at any time — even without the app — from Google Account → Third-party apps & services (opens in a new tab). Revocation by the app needs an internet connection and is best-effort, so if you disconnected while offline we recommend checking this page as well.
Delete all local data
Close the app and delete the folder %APPDATA%\com.eternal\eternal_workspace\. Uninstalling the app may not remove this folder automatically, so delete it yourself if you want every trace removed. Your MP3 files are never stored by the app — they remain wherever you keep them.
10This website
This website is a static site. It has no sign-in, sets no cookies, and runs no analytics, advertising or tracking scripts. Fonts and images are served from this site itself.
Like any web host, our hosting provider (Cloudflare) processes technical data such as IP addresses and request details in server logs, to deliver the site and protect it against abuse. We do not combine this with any other data.
11Children
ETERNAL WORKSPACE is a tool for music producers and is not directed at children under 13. YouTube features require a Google account and are subject to Google’s own age requirements.
12Your rights
Depending on where you live, you may have rights to access, correct, delete or restrict the processing of your personal data. Because the app keeps your data on your own computer and under your control, you can exercise these rights directly using the steps above. For anything else, or if you have a question about this policy, contact us using the details below.
13Changes to this policy
If the app’s handling of data changes — for example, if a new module starts using an online service, or the app begins reading YouTube Analytics data — we will update this policy before or when that version is released and change the effective date at the top of this page. Significant changes will also be noted in the app’s release notes.
14Contact
Questions or requests about privacy:
- Email: eternalgvt@gmail.com
You can also use the Support page.