Privacy Policy

Effective 17 October 2026

Who we are

Shuffler is a free app — a Chrome extension and apps for iPhone, iPad and Android — for rewatching short videos you have already liked on Instagram and YouTube, and your own photos and videos that you choose yourself, in shuffled order. It is an independent project and is not affiliated with, endorsed or sponsored by Meta, Instagram, Google or YouTube.

• Controller responsible for this policy: Daniil Baev (Daniil Nikolaevich Baev), the developer of Shuffler
• Email: danivichkin@gmail.com

What stays on your device

To build your feed, Shuffler keeps the following in its own storage on your device (the extension's storage in your browser, or the app's private storage on your phone or tablet):

• your library: IDs and links of the videos you liked, with the details shown in the feed (author, caption, date, like and comment counts);
• which videos you have already watched, the current round and recently viewed videos;
• your settings, such as sources, period and language;
• the name and ID of each connected account, so that every account keeps its own separate library;
• copies of the photos and videos you chose yourself for “My photos and videos” (details below);
• a short technical log for troubleshooting, without passwords, cookies or tokens.

None of this is sent to us or to anyone else. Shuffler has no user accounts, no cloud sync and no backend. Comments are loaded from the platform when you open them and are not saved in the library.

Your photos and videos (“My photos and videos”)

This source is part of the iPhone, iPad and Android apps; the Chrome extension does not have it. It works without any account. You choose the files yourself in the system picker: on iPhone and iPad, the system Photos picker, which hands the app only what you select and gives no access to the whole library; on Android, the system photo and video picker, with no storage or media-library permission. Shuffler does not read or browse any other files.

• Shuffler keeps copies of only the selected files in its private storage on your device, with the details needed to show them: type, size, picture dimensions, duration, date added and the shuffle order. Photos in formats such as HEIC are kept as a JPEG copy.
• File names and paths are not stored. To avoid adding the same file twice, only an irreversible fingerprint (hash) of the system identifier of the chosen file is kept.
• A copy is the file itself: if a photo contains, for example, the date or place it was taken, that stays in the copy on your device. Shuffler uses only its orientation and size to display it. File names, contents and details never enter the diagnostic file.
• Copies are never sent to us or anyone else. On iPhone and iPad they are excluded from backups (iCloud and computer); on Android, Shuffler's data is excluded from backups and device transfer.
• Shuffler never changes or deletes the originals in your gallery or on your disk.

What we receive

Nothing, unless you write to us. Shuffler contains no analytics, advertising, tracking or crash-reporting code that sends data to us.

If you contact us — for example with Settings → Report a problem, which prepares an email that you review and send yourself, optionally with a diagnostic file — we receive only what you choose to send. The diagnostic file is created on your device, leaves out cookies, passwords, tokens, account and video IDs, links and comment text, and you can review it before sending. We use your message only to reply and to fix problems, never share or sell it, and delete it on request.

App stores (the App Store, Google Play and the Chrome Web Store) may show us aggregated statistics, such as the number of installs, and crash reports if you allowed sharing them in your device settings. They are provided by the store under its own policy and do not include your library or account details.

Instagram, YouTube and Google

Shuffler works with your own accounts. Your device connects directly to Instagram, YouTube and Google — never through us — to sign in, read your list of liked videos and their comments, and play videos. These services receive those requests just as when you use them directly, and handle data such as your IP address, device information and activity under their own policies: the Meta (Instagram) Privacy Policy and the Google Privacy Policy. Images and GIFs in comments load from the platforms' media servers (some GIFs from GIPHY).

• Chrome extension: uses the Instagram sign-in that already exists in your browser and, if you turn YouTube on, your browser's YouTube sign-in.
• iPhone, iPad and Android: you sign in to Instagram on Instagram's own sign-in page inside the app. That sign-in stays in the app's Instagram web storage on your device.

Shuffler does not extract, save or pass on your passwords or cookies.

Shuffler acts only when you ask. A like is added or removed only when you tap the heart. Sharing opens Instagram's own send screen, where you choose the recipients and confirm. Shuffler never posts, comments, follows or sends messages by itself.

Google Sign-In and YouTube API Services

In the iPhone, iPad and Android apps, YouTube is connected with Continue with Google, and Shuffler uses YouTube API Services.

• Sign-in happens on Google's own screens (Google Sign-In on iPhone and iPad, Google Play services on Android), and Google processes it under the Google Privacy Policy. Shuffler never sees your Google password and does not receive or save your email address. On iPhone and iPad, Google's sign-in component may also process basic profile and device information, as Google describes.
• Shuffler asks for read-only access to your YouTube account, to find the videos you liked and read their details and comments. A separate permission to add or remove your like is requested only when you first tap the heart on a YouTube video.
• Access tokens stay on your device — in the app's memory and in Google's sign-in component — and are used only for requests from your device directly to YouTube. They are never sent to us.
• From YouTube, Shuffler keeps only what your feed needs — video IDs, titles, channel names, links and counts — on your device, and shares it with no one.
• The Chrome extension does not use Google Sign-In: it reads YouTube through your browser's own YouTube sign-in. On every platform, YouTube videos play in YouTube's official embedded player.

By using YouTube features in Shuffler you agree to be bound by the YouTube Terms of Service. See also the Google Privacy Policy. You can revoke Shuffler's access to your Google account at any time on the Google security settings page.

Cookies and device storage

Shuffler itself sets no cookies, uses no advertising identifiers and does not track you across apps or websites. It keeps the data listed above in its own storage on your device. Instagram's sign-in page and YouTube's embedded player may use their own cookies and similar storage under Meta's and Google's policies.

How long data is kept and how to delete it

• Your library stays on your device until you delete it. Signing out or turning a source off does not erase it, so you can come back to the same account later.
• To delete everything Shuffler stored: remove the extension from Chrome; on iPhone or iPad, delete the app (not “Offload App”); on Android, uninstall the app or clear its storage. This also removes the Instagram sign-in saved in the app.
• Photos and videos: “Remove from collection” (the bin icon by a photo or video) deletes the copy of that file, and Settings → Sources → My photos and videos → Clear collection deletes all copies with the collection's order and history after you confirm. Deleting the app also deletes the copies. The originals in your gallery are not changed. Signing out of Instagram or YouTube does not affect the collection.
• On iPhone and iPad, a device backup you make (for example, iCloud Backup) may contain a copy of the app's data, depending on your backup settings. Copies of your chosen photos and videos are not included.
• To revoke Google access, use the Google security settings page. This does not delete your Google account or your likes on YouTube.
• Your likes and accounts on Instagram and YouTube are managed on those platforms. Deleting Shuffler does not change them.
• Emails you sent us are deleted on request.

Sharing and selling

We do not sell, rent or share personal data, and we do not use it for advertising, profiling or credit decisions. Since we do not receive your data, there is nothing for us to share.

Children

Shuffler is not directed at children. Its liked-video features require your own Instagram or YouTube account, and those services set their own minimum ages.

Your rights

Your Shuffler data is on your device and under your control: you can delete it at any time as described above. For anything we hold about you — in practice, only emails you sent us — you can ask for access, correction or deletion, or object to its use, under the GDPR and similar laws. We handle such emails to answer your request (GDPR Art. 6(1)(b)) and in our legitimate interest in supporting and improving Shuffler (Art. 6(1)(f)). You can also complain to your local data protection authority.

This website

These pages are hosted on GitHub Pages. They use no cookies or analytics and load nothing from other sites. Only the interactive design preview runs a script, entirely in your browser: it makes no network requests and stores nothing. GitHub may process technical data, such as your IP address, to deliver them, under the GitHub Privacy Statement.

Changes

If the way Shuffler handles data changes, we will update this page and the date above.

Contact

Privacy questions: danivichkin@gmail.com. Rights holders and platforms: see Support.