Privacy Policy

Last updated: August 12, 2026

At 2ix.Online ("we", "us", "our"), your privacy is fundamental. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our YouTube-to-MP3 converter.

1. Information We Collect

We are designed to be zero-data. Specifically:

• We do not require you to create an account or sign up.
• We do not store the YouTube URLs you paste.
• We do not save, cache, or re-host any downloaded audio files.
• We do not track your identity, IP history, or browsing behavior across sessions.

The only transient data we process are the YouTube URL you submit (to fetch metadata), a one-time verification token (to block bots), and a short-lived browser fingerprint hash used solely to rate-limit abuse. All of these are held in memory and discarded within minutes.

2. How We Use Your Data

Data is used strictly to:

• Parse the YouTube video you requested and return the available MP3 options.
• Verify you are a human (Cloudflare Turnstile) and not an automated bot.
• Prevent abuse and protect the service from DDoS or scraping attacks.

We never sell, rent, or share your data with advertisers, data brokers, or third parties.

3. Cookies & Local Storage

We use a single browser localStorage key to remember your language preference (e.g. lang=es). This is strictly functional and is never transmitted to our servers. Cloudflare Turnstile may set a short-lived cookie solely to verify you are human; that cookie is managed by Cloudflare under their privacy policy.

4. Third-Party Services

We use a small number of trusted services to run the site:

• Cloudflare — DDoS protection, Turnstile human verification, and CDN delivery.
• hCaptcha — only used inside the "Send Comment" form to block spam.
• Web3Forms — only used to deliver comments you voluntarily send us.
• Google Fonts — to load the Montserrat typeface.

Each of these services has its own privacy policy. We do not pass any personal data to them beyond what is strictly required to render the widget you interacted with.

5. Security

All traffic is encrypted with HTTPS (TLS 1.3) and protected by HSTS. Our backend runs rate-limiters, one-time session tokens, strict origin checks, and SSRF defenses. We regularly audit the code and update dependencies.

6. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

7. Your Rights (GDPR / CCPA)

Because we do not store personal data, there is nothing to access, correct, or delete. If you believe otherwise, contact us and we will investigate.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new "Last updated" date. Continued use of the service after changes constitutes acceptance.

9. Contact

Questions about this policy? Use the Send Comment button inside the app drawer.