Syncsofa Privacy Policy

Syncsofa is a browser extension that lets two friends watch the same web video in sync, with a chat next to it. This policy explains what data it handles and why. We keep it to the minimum the extension needs to work.

What we store

• Your username and the look of your profile (avatar, background and name colour).
• A SHA-256 hash of your recovery code. The code itself never leaves your browser in readable form and we cannot recover it.
• Your friends list and pending friend requests. Unanswered requests expire after 7 days.
• A hash of each invite link you create. Links work once and expire after 7 days.

What passes through but is never stored

• Chat messages, reactions and GIF choices are forwarded to the friend you are watching with and then discarded. They are not written to any database or log.
• Playback state: play, pause, position and speed of the video.
• A SHA-256 hash of the page address you are watching, used only to pair you with a friend on the same video. We never receive the full address.
• Your IP address, which every internet server sees. It is used for rate limiting and is not stored.
• For optional video and voice calls, only connection set-up messages pass through our server. Audio and video go directly between the two browsers; your friend can see your IP address.

What stays in your browser

Your account credential, settings, chosen reactions and the last 100 chat messages are kept locally. The messages are held in memory only and are gone when the browser or extension restarts.

What we never do

• We do not read page content, forms, passwords or the video itself.
• We do not sell or share your data, use it for advertising, or use it for anything other than the extension's single purpose.
• We do not use analytics or tracking.

Service providers

The relay server runs on Cloudflare Workers. GIF search is provided by KLIPY: only your search words are sent, through our server, never your identity. Connection set-up for calls uses Cloudflare's STUN server.

Your choices

You can rotate your recovery code, sign out, or permanently delete your account and all friendships at any time from the profile screen in the extension.

Contact

Questions about privacy? Use the contact address on the Syncsofa listing in the Chrome Web Store.