Privacy Policy

What we collect

• Account information — your name and email address, if you create an account. Handled by Clerk, our authentication provider. You can use the extension and join parties without an account.
• Room data — a room code, the display name you choose for a party, whether you are the host, and current playback state (playing/paused and position), so we can keep everyone in sync.
• Join requests — when you ask to join a party that requires host approval, we store your chosen display name and the time of the request, and show them to that party's host so they can decide. If a room uses a password instead, we store only a salted hash of it, never the password itself.
• Party history — for parties created from a signed-in account, we keep the room code, an optional name you gave the party, the display names of participants, and join/leave timestamps, so you can see your past parties. We deliberately do not record which titles were watched in a party.
• Technical logs — our hosting and database providers process standard request data, including IP addresses, to operate and secure the service.

Chrome will tell you the extension can "read and change all your data on all websites". It asks for that breadth for one reason: Chrome disables an extension until every user re-approves it whenever its permissions grow, so requesting sites one at a time would knock everyone offline each time we add a streaming service. In practice the extension only ever reads or acts on the streaming services listed on our home page and on FlickTandem invite links. We do not read or collect anything from other sites you visit, we do not track what you watch outside an active watch party, we do not build advertising profiles, and we do not sell or share your personal information for advertising or any other purpose.

Video and audio chat

Video and audio chat uses WebRTC and is transmitted directly between participants wherever the network allows. We never record, store or listen to it.

Two things are worth knowing about how peer-to-peer connections work. First, camera and microphone access is only ever used after your browser asks you and you allow it, and you can turn either off at any time. Second, establishing a direct connection involves exchanging network addresses, so other participants in your party may be able to observe your IP address. When a direct connection can't be made, traffic is relayed through a third-party TURN relay service. Only join parties with people you trust.

How long we keep it

• Pending join requests expire automatically after about 10 minutes, and denied requests are deleted immediately.
• Live playback and presence state exists only while a party is running and is discarded shortly after it ends.
• Party history for signed-in accounts is kept until you delete it or close your account.
• Account information is kept for as long as your account exists.

Who processes data for us

We use a small number of providers to run FlickTandem. They process data on our instructions only:

• Clerk — accounts and authentication.
• Vercel — website and API hosting.
• Neon — the database storing room and party data.
• Open Relay Project — the TURN relay used as a fallback for video chat connections.

Cookies

We use cookies set by Clerk to keep you signed in. We do not use advertising or analytics cookies. The extension stores your current party locally in your browser so it can reconnect you; clearing extension data or leaving a party removes it.

Your rights

Depending on where you live — including under the GDPR in the UK and EU, and the CCPA in California — you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy of it, or object to or restrict how we use it. We rely on your consent for camera and microphone access, and on our legitimate interest in operating a working service for the room data needed to keep a party in sync.

To exercise any of these rights, email privacy@flicktandem.com. We don't sell personal information, so there is nothing to opt out of in that respect. You may also have the right to complain to your local data protection authority.

Children

FlickTandem is not intended for children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we make a material change we will update the date at the top of this page, and give notice in the product where the change is significant.

Contact

Questions about this policy can be sent to privacy@flicktandem.com.