Privacy & access.

This candidate is for adult testing. The public address shows a generic login; access requires the configured parent account. The hosting provider processes requests, and Supabase verifies sign-in and stores the bounded collection. Passwords and refresh tokens are not retained by Willow TV.

An encrypted, Secure, HttpOnly cookie holds the access token and restricted capability for at most 15 minutes from sign-in. Activity does not extend that deadline. No token is available to page JavaScript.

Lock & exit clears normal browser access and attempts both database closure and provider sign-out. If neither confirms, the screen says so: a copied cookie may work again after an outage until its original deadline. Browser locking alone is not global revocation.

Photos and activation remain disabled. YouTube is enabled for a bounded adult test. Inspecting a selected video retrieves its public metadata through YouTube API Services. Thumbnails and the official player connect your browser to Google/YouTube, which receives connection and device information. The privacy-enhanced player can still show ads and outbound links; its controls remain visible. No YouTube sign-in, write actions, downloads or transcript scraping is provided. The product is intended to be child-directed; this adult test does not change that designation. No passive viewing history, player analytics or AI assessment is collected. Optional reactions, saves and parent observations are prepared but disabled pending review. When enabled, each item has one current reaction; reactions and notes expire after 30 days, while saves last until removed or the item leaves the catalogue. The parent can clear feedback and notes separately from saves. Choices are shared with the parent. There is no hidden reaction history or AI profile. No child use or policy clearance is implied.

Supabase stores up to ten collection candidates, explicit approval decisions and boundaries. Provider metadata expires for use after one hour; the separately activated retention job purges metadata after 29 days. The hosting and database providers may retain separate backups or operational logs. Removing app data does not promise immediate backup erasure.

See the Supabase privacy notice, hosting privacy notice, YouTube Terms and Google privacy notice. Use of the YouTube features is subject to the linked YouTube Terms and Google Privacy Policy.