Privacy Policy
DreTube (dretube.nl)
Last updated: 31 October 2026
1. Who we are
DreTube is a website for watching and rating videos, operated by Andre (the “owner”, “we”, “us”). If you have questions about this policy or your personal data, contact us at usteepia@gmail.com.
DreTube has no user accounts and no login. You can watch videos and rate them up or down without registering.
2. What data we process
Rating cookie and rating records. When you rate a video up or down, we store a cookie in your browser to remember your rating and to stop you from rating the same video repeatedly. We may also store your rating on our server, linked to a hashed (scrambled) version of your IP address, for the same purpose.
Statistics (Google Analytics). With your consent, we use Google Analytics to understand how the site is used, for example which videos are watched, how long visitors stay, and what device or browser they use. Google Analytics sets cookies in your browser and collects data such as your approximate location, device and browser details, pages viewed, and a pseudonymous identifier. Google acts as a service provider for this, and your data may be transferred to and processed in countries outside the European Economic Area, including the United States. Google relies on safeguards such as the EU-US Data Privacy Framework and standard contractual clauses for these transfers.
Server logs. Our web server keeps technical logs (date and time, requested page, browser type, and referring page) to keep the site secure and working. Your IP address is stored only in hashed form. A hashed IP address is not directly readable, but because it can still be linked to a device, we treat it as personal data.
Contact form. If you send us a message through the contact form, we process the name, email address and message you provide so we can reply to you.
3. Embedded YouTube videos
Some videos on DreTube are embedded from YouTube, which is operated by Google. When an embedded video is loaded or played, YouTube may place cookies on your device and receive data such as your IP address, the page you are on, and your interaction with the video. If you are logged in to a Google account, YouTube may link this to your account. We have no control over what YouTube collects or how it uses that data. Please see Google’s privacy policy at https://policies.google.com/privacy. Embedded YouTube content is loaded as soon as you open a page with a video, and it uses YouTube's privacy-enhanced mode (youtube-nocookie.com).
4. Cookies
| Cookie | Purpose | Type | Consent needed |
|---|---|---|---|
| Rating cookie | Remembers your up/down ratings | Functional | No |
| Cookie consent cookie | Remembers your cookie choices | Functional | No |
Google Analytics cookies (e.g. _ga, _ga_*) | Collects usage statistics | Analytics | Yes |
| YouTube cookies | Set by embedded YouTube videos | Third-party | Yes |
You can change or withdraw your cookie choices at any time through the cookie banner settings, or by deleting cookies in your browser. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
5. Why we process your data and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Remembering ratings and preventing repeated rating | Legitimate interest (Art. 6(1)(f)) in a working rating system |
| Statistics through Google Analytics | Consent (Art. 6(1)(a)) |
| Showing embedded YouTube videos | Consent (Art. 6(1)(a)) |
| Security and operation of the server | Legitimate interest (Art. 6(1)(f)) |
| Answering contact form messages | Legitimate interest (Art. 6(1)(f)) or steps you request (Art. 6(1)(b)) |
6. Who receives your data
- Google (Google Analytics and YouTube), as described above.
- Our hosting provider, Contabo, which hosts our server in Germany. Contabo processes data on our behalf under a data processing agreement.
- Our email provider, which handles messages sent through the contact form.
We do not sell your personal data, and we do not use it for advertising.
7. How long we keep your data
- Rating cookie: 12 months. It is what stops the same browser from voting twice.
- Rating records on our server: none. A vote is kept only as an anonymous counter on the video, without your IP address or any other identifier.
- Rate-limit records (hashed IP address): 1 day. They exist only to stop contact-form spam and repeated login attempts, and are deleted automatically after 24 hours.
- Server logs: 30 days. Our hosting provider keeps the web server's access log, which contains the IP address of each request, and rotates it daily.
- Google Analytics data: [14 months], or the retention period set in our Analytics settings.
- Contact form messages: 12 months after we have dealt with your message, unless we need to keep them longer by law.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw your consent at any time.
To use these rights, email usteepia@gmail.com. Please note that because we do not have accounts and store IP addresses only in hashed form, we may need additional information from you to find your data, and in some cases we may not be able to identify it at all.
You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl).
9. Security
We take reasonable technical and organisational measures to protect your data, including hashing IP addresses and hosting on a server we manage ourselves. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
DreTube is not aimed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with data, please contact us and we will remove it.
11. Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date of the last update at the top.