Arivuno

Plain-language policy

Privacy

Arivuno is local-first. The extension's Shorts-related processing stays in your browser.

Effective August 23, 2026

Controller

Arivuno is an independent, non-commercial project operated by Andrei Medvedev in the Netherlands. Andrei Medvedev is the data controller for the processing described in this policy.

Privacy questions and data-rights requests can be sent to [email protected].

Scope

This policy explains how the Arivuno browser extension, this website, and direct support email handle data. YouTube, the web browser, Cloudflare, Proton Mail, and other email providers also process data under their own terms and privacy policies.

Data processed by the extension

After installation, Arivuno stays off until the user reviews its in-extension disclosure and chooses Enable Arivuno. Closing the disclosure or choosing Not now leaves the extension off. While enabled, Arivuno processes the following information locally:

  • the current YouTube URL;
  • the destinations of links on YouTube;
  • visible YouTube page structure; and
  • ordinary click or activation events, only to determine whether the activated element is a Shorts link.

Arivuno uses this information only to identify and hide known Shorts entry points and interrupt recognized Shorts pages. To the extent data-protection law applies to this local processing, the legal basis is the controller's legitimate interest in providing the functionality that the user deliberately enabled and requested. The processing is limited to YouTube, stays on the user's device, and is not used for an unrelated purpose.

The Enable action controls whether the feature runs. Where the GDPR applies, this product-level choice is separate from the legal basis for processing: Arivuno relies on the legitimate interest described above, not consent.

When Arivuno blocks one specific clip, its interruption page temporarily receives the validated YouTube video identifier in the local page's URL fragment so it can offer the regular-player link. The page immediately removes that fragment from the current browser-history entry. The extension does not persist it.

Extension retention, transmission, and sharing

The extension does not retain or automatically transmit the URLs, video identifiers, page structure, or interaction events it processes. Arivuno cannot retrieve that locally processed information from a user's browser.

The extension also does not:

  • use analytics, telemetry, advertising, tracking, or remote configuration;
  • create an Arivuno account or persistent activity history;
  • sell or share personal information; or
  • use data for advertising, creditworthiness, or lending.

To remember activation, Arivuno stores one local record containing only that the extension is enabled and the version of the disclosure the user accepted. It contains no YouTube URL, page content, video identifier, or activity history. A missing, invalid, or outdated record leaves Arivuno off; disabling Arivuno removes the record. The browser and YouTube may keep their own navigation records independently of Arivuno.

Using Go back returns to the previous browser-history entry when one is available. If no previous entry is available, Arivuno navigates to YouTube Home instead. Choosing Watch once opens one blocked clip in YouTube's regular player and includes its validated video identifier in the YouTube URL. YouTube's own terms and privacy policy apply there.

Website

The Arivuno website has no account system, contact form, analytics, advertising, tracking code, external fonts, or third-party embeds. Its own code sets no cookies and does not profile visitors. Arivuno does not enable optional Cloudflare visitor analytics.

Cloudflare delivers and protects the website. It may process standard request and security information such as IP addresses, requested URLs, browser and device details, timestamps, routing data, and security events. Arivuno relies on its legitimate interests to use Cloudflare to make the website available, reliable, and secure. Cloudflare determines its own legal bases for data it processes as a controller under its privacy policy.

Arivuno does not create or retain a separate visitor log. Cloudflare retains or deletes site-delivery and security records according to the applicable service configuration, its contractual obligations, and the criteria in its privacy policy.

Support email

If you email Arivuno, you voluntarily provide your email address, message, attachments, and associated email metadata. Arivuno uses that information only to manage, secure, and reply to the correspondence and to diagnose issues you report. Replies are sent to the address from which the request was received. Contacting support is optional, but Arivuno cannot reply without a working return address.

The legal basis is the controller's legitimate interest in answering requested support, maintaining the extension, and protecting the project and its users. If retention is required to comply with a legal obligation, that obligation is the legal basis for the additional retention.

Support correspondence is deleted from the active mailbox within 12 months after the last meaningful exchange. A message may be retained longer only while reasonably necessary for an unresolved security or abuse report, a legal claim, or a legal obligation. Once the exception ends, the message is deleted promptly.

Do not send passwords, authentication codes, cookies, full browsing histories, or other secrets. Remove unrelated personal information from screenshots before attaching them.

Service providers and international transfers

Arivuno uses only the service providers necessary for the public website and support email:

  • Cloudflare provides website hosting, delivery, and security. Under its Data Processing Addendum, Cloudflare acts as a processor for customer content and customer logs, and it separately acts as a controller for certain network and service data described in its privacy policy. Cloudflare is a global provider and may process data outside the EEA. It states that relevant transfers are protected by the EU-U.S. Data Privacy Framework or Standard Contractual Clauses where applicable.
  • Proton AG provides the support mailbox. Proton Mail processes messages and email metadata as described in its privacy policy. Proton states that Proton Mail servers are located in Switzerland, Germany, or Norway and that encrypted offline backups may be kept for up to 30 days. Switzerland is covered by an EU adequacy decision; Germany and Norway are within the EU or EEA.
  • The sender's email provider and the mail systems needed to deliver a message may also process it under their own terms. Their location depends on the provider chosen by the sender.

Arivuno does not sell personal data, provide it to advertisers, or use it for marketing or profiling. Apart from the service-provider processing described above, Arivuno discloses personal data only when required by applicable law or when necessary to establish, exercise, or defend a legal claim.

Security

Arivuno limits collection, keeps extension processing on the user's device, restricts access to the support mailbox, and uses providers that encrypt data in transit and at rest where their services support it. No internet or email system can be guaranteed completely secure, so support messages should contain only the information needed to diagnose the reported issue.

Your rights

Where applicable, you may request access to, correction of, deletion of, restriction of, or portability of your personal data. Where the GDPR applies, Arivuno does not rely on consent as the legal basis for processing described in this policy for which Arivuno is the controller.

Because extension data stays on your device and Arivuno keeps no account or activity history, Arivuno normally has no extension data to identify or return. For support correspondence, send a request to [email protected], preferably from the address used for the correspondence. Only information reasonably necessary to verify and fulfil the request will be requested.

You also have the right to complain to the supervisory authority where you live or work, or where you believe an infringement occurred. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens.

Right to object

Where the GDPR applies, you have the right to object at any time, on grounds relating to your particular situation, to Arivuno's processing of your personal data based on legitimate interests. Arivuno will stop that processing unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed to establish, exercise, or defend legal claims. To object, email [email protected].

Automated decisions

Arivuno does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Chrome Web Store Limited Use

Arivuno's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

If a release changes Arivuno's data handling, this policy and the Chrome Web Store disclosures will be updated before that release is published. The date at the top of this policy will show when the current version took effect.