Privacy Policy
Last updated: 7 October 2026
VidHatch is built so that we see as little as possible. This policy explains what the extension, the Telegram extension, the Android app and the website do with data.
The extension
- Page content. VidHatch reads network requests in your current tab to detect media. This detection happens locally in your browser. It is not sent to us.
- Your files. Downloads and any audio/video merging run on your machine. The files never pass through our servers.
- Settings. Your preferences are stored locally in the browser. They stay on your device.
- Hard-site resolver (paid). For a small set of cipher-protected sites, the extension asks our resolver for the information needed to locate the stream. This request carries the page address and your licence key, which confirms your plan. The address is held in memory for at most ten minutes to answer a repeat request, is never written to disk or logged, and is not used to profile you. The media itself still downloads directly to your machine.
The Telegram extension
- Where it runs. “Telegram Video Downloader – VidHatch” runs only on web.telegram.org. It has no access to any other site.
- Your messages. To find the file behind a message, photo or story you click, the extension asks Telegram Web for that item inside your own browser tab. Your chats, contacts and message text are never sent to us or to anyone else.
- Your files. Files travel from Telegram, through Telegram Web in your tab, to your disk. They never pass through our servers.
- No login. The extension never asks for your Telegram phone number, your password or a Google account, and it has no analytics.
- Stored on your device. The number of free downloads you used today and, if you add one, your licence key. Nothing else.
- Network requests to us. None. “Get VidHatch Pro” and “Lost your key?” only open a page on vidhatch.com in a new tab.
The Android app
- Pages you open. The app shows pages in Android System WebView and watches that page's requests to find media. This happens on your phone. It is not sent to us. WebView applies Google Safe Browsing, as Chrome does.
- Your files. Downloads and merging run on your phone. Files are saved to Download/VidHatch and never pass through our servers.
- No account, no analytics. The app has no sign-in, no analytics, no ads and no crash reporting.
- Update checks. Once a day the app asks vidhatch.com whether a newer version of the app exists, and asks GitHub for the latest release of yt-dlp, the open-source tool it uses to read some sites. The request to us carries only the app version. Our web server logs it with your IP address, as it does for any visit, and deletes those logs after about two weeks.
- Permissions. Internet access to load pages and files, notifications to show download progress, and a foreground service so a download keeps running when you leave the app.
Licensing & payment
If you buy Pro, your payment is handled by Whop (whop.com) when you pay by card, or by NOWPayments when you pay with crypto. Each processes your payment under its own privacy terms; we receive a license record and the email you used, so we can deliver and support your license.
The website
This site uses Google Analytics 4 to understand aggregate traffic: which pages are read, which sites send visitors here, and which install buttons get used. Google Analytics sets its own first-party cookies (_ga) and receives your IP address to estimate a general location; Google says GA4 does not log or store IP addresses. Advertising features and Google signals are turned off. You can block it with any content blocker or with Google’s opt-out browser add-on.
When a link to this site carries a ?ref= tag, we also count which site sent the visit and whether an install button was clicked. That count stores only the site name, the action and the time — no IP address and no cookie.
If you send a report from the Report a site page, we receive the page address you enter, your note, the error VidHatch showed, the extension version and browser name, and your email only if you type one. The extension fills in the page address for you but sends nothing itself; the report goes out only when you press Send. It is delivered to our inbox by email, is not stored on this server, and is used only to fix that site and to reply to you.
We do not sell your data, and we do not use it to build advertising profiles.
What we do not do
- We do not sell or rent your data.
- We do not track what you download.
- We do not embed third-party ad or tracking networks in the extension or the app.
Your requests
You can ask what license data we hold for your email, or ask us to delete it, at [email protected].