Privacy policy

1. What we collect and why

Without an account (rooms by link):

• the display name you enter when joining a room, the room code and your messages, reactions and playback commands in that room — to run the room (performance of a contract);
• a random participant id stored in your browser, so you keep your seat after a page reload;
• connection data: IP address, browser type, time of request — in short-lived logs for security, rate limiting and abuse prevention (legitimate interest).

With an account, in addition:

• email address — to confirm it once with a code at signup and to send service messages (performance of a contract);
• login and a password hash — to sign you in. The password itself is never stored;
• profile settings: avatar, interface language, time zone, theme, default subtitle settings;
• your rooms, queue, favourites and the daily watching-time counter;
• subscription status, plan, renewal date and payment history received from Paddle. Card details never reach us.

Content you add: video links, uploaded video and subtitle files, chat messages. These are stored to provide the Service and removed as described in section 4.

Analytics: with your consent, anonymous-as-possible usage events (page views, room created, video started, sync corrections, subscription purchased) collected by PostHog, hosted in the EU. We do not record session replays of chat content. See the Cookie policy.

Advertising (free plan only): Google AdSense may set cookies and process your IP address and browser data to show and measure ads. Personalised ads are shown only to users aged 18+ who consented; otherwise only non-personalised ads are requested.

2. Legal bases (GDPR, art. 6)

• performance of a contract — running rooms, accounts and subscriptions;
• consent — analytics cookies, advertising cookies, personalised ads; you can withdraw it at any time in the cookie settings;
• legitimate interests — security, abuse prevention, moderation, improving the Service;
• legal obligation — age checks, tax and accounting records kept by Paddle and us, responding to lawful requests.

3. Who we share data with (processors)

• Cloudflare, Inc. — hosting, storage, networking and DDoS protection. Data is stored on Cloudflare’s infrastructure; where possible we select EU locations;
• Paddle.com Market Ltd (UK/EU) — payments and subscriptions, as merchant of record and an independent controller for the payment itself;
• PostHog (EU Cloud) — product analytics, with consent;
• Google (AdSense) — advertising on the free plan, with consent for personalised ads;
• Anthropic (Claude API) and a speech-recognition provider — only for Plus features you start yourself (subtitle translation, speech recognition of your own uploaded video). The subtitle text or audio is sent for processing and not used to train models under our agreement;
• LiveKit — voice and video calls in rooms; media is relayed, not recorded;
• an email provider — magic links and service emails;
• Sentry — error reports that may contain an IP address and browser data.

We do not sell personal data. We disclose it to authorities only when the law requires.

Some processors are outside the EU/EEA. Transfers rely on adequacy decisions or the EU Standard Contractual Clauses.

4. How long we keep data

• rooms without an account: content and chat history are deleted [30] days after the last activity;
• account data: while the account exists and [30] days after deletion, to allow recovery of a mistaken deletion;
• uploaded video files: until you delete them or the account is deleted;
• payment records: as required by tax law (usually [7] years), kept by Paddle and in our records;
• security logs: [30] days;
• moderation records (reports, bans): [2] years, so that repeat offenders stay banned;
• analytics: [12] months in PostHog.

5. Your rights

Under the GDPR and similar laws you can:

• access your data and get a copy — "Download my data" in the profile, or by email;
• correct it — most fields in the profile; the date of birth only through support;
• delete it — "Delete account" in the profile, or by email;
• restrict or object to processing based on legitimate interests;
• withdraw consent for cookies and ads at any time (cookie settings in the footer);
• data portability — the export is in a machine-readable JSON format;
• complain to a supervisory authority, in particular the one in your country of residence.

To exercise a right, write to support@soffa.tv from the email of your account. We answer within one month.

6. Children

The Service is not intended for people under 16. We do not knowingly collect data from them. If you believe a child under 16 has an account, write to us and we will delete it.

7. Security

All traffic is encrypted (TLS). Access to data is restricted to the people who need it to run the Service. Secrets are stored in environment variables, never in code. Payment data never passes through our servers. No system is completely secure; if a breach affects you, we will notify you as the law requires.

8. Changes

We may update this policy. The current version is at /legal/privacy with its date. Material changes are announced by email or in the interface before they take effect.

9. Contact

Controller: [Company name], [Registered address], [Jurisdiction]. Email: support@soffa.tv. [EU representative / data protection officer, if required: name and address.]