How Gazenest Encrypts Your Data

When you sign up for Gazenest, you trust us with some personal information: your email address, your licence key, and your IP address during sync. We take that trust seriously.

Here's exactly how we protect your data - no marketing fluff, just the technical details.

What's encrypted

The principle: only personally identifiable information (PII) is encrypted. Public YouTube metadata stays in plaintext for query performance.

How the encryption works

AES-256-GCM

We use AES-256-GCM (Galois/Counter Mode) - an authenticated encryption algorithm that provides both confidentiality and integrity. It's the same standard used by:

• Online banking
• Government classified communications
• Password managers like 1Password
• Signal messenger

Each encrypted value includes a unique nonce (number used once) and an authentication tag. This means:

• The same email encrypted twice produces different ciphertext
• Any tampering with the encrypted data is detectable
• Decryption requires both the correct key and the correct nonce

Your rights

Under GDPR, you can:

• Export all your data (decrypted) from the dashboard
• Delete your entire account and all associated data
• Request correction of any personal information

Account deletion is permanent. After a 30-day grace period, all data is hard-deleted - no soft deletes, no "deactivated" state.

Open about our approach

We believe security through transparency is stronger than security through obscurity. This blog post describes our actual implementation, not a marketing version of it. If you have questions about our security practices, reach out at support@gazenest.com.

Your data, encrypted and under your control. Learn more about Gazenest →