Security

What the product is built to do — and what it cannot promise

YouTube Thumbnail Downloader is a static site. The default model is: the core job does not need to reach our origin. That is not a claim that the visitor’s device is safe.

Architecture

  • Pages: HTML, CSS, and JavaScript served as static files (Cloudflare Pages or equivalent).
  • Tool: runs in this tab. The default build ships no server API, Worker, or WASM backend for the core job — the tool runs entirely in your browser.
  • CSP: pnpm build writes a Content-Security-Policy. Inline style= and on* attributes fail that step.
  • Feedback: the only optional third-party write is the header form. It sends text, not the tool payload.
  • Analytics: optional Plausible + delayed Clarity + Cloudflare Insights on production only.

There is no account database on the template default.

Data lifecycle

  1. You enter input on this device.
  2. The page processes it locally.
  3. You copy, download, or leave.
  4. Refresh or close the tab to drop page memory.

If you then paste the result into another site, that site’s policy applies.

Threats this model reduces

  • No password database to leak
  • Core input is not sitting on the origin after you leave
  • A tight CSP reduces stray inline scripts on a built page

What this does not prevent

  • A malicious browser extension on the machine
  • A shared or compromised computer
  • Shoulder-surfing and screen recording
  • Look-alike domains — check the address bar: youtubethumb.com
  • Secrets you paste into Feedback or email

Reporting a vulnerability

Email contact@youtubethumb.com with the URL, steps to reproduce, and impact (for example: unexpected network call while using the tool).

Do not include live secrets or other people’s data.

There is no paid bug-bounty program unless you add one.

Privacy · Contact · About