SyncParty privacy policy (full version: https://party.chezcresus.fr/privacy)

What SyncParty never does
- Capture, record or retransmit the video being watched: every participant plays it with their own subscription.
- Record or store camera images or microphone sound.
- Sell, rent or share data, show ads, or profile users.
- Collect browsing history: the extension only activates on the party tab.

Data sent to the SyncParty server (party.chezcresus.fr)
- Nickname and avatar (an emoji and a colour), visible to the other participants of the room.
- Anonymous identity: a signed random identifier. No account, no e-mail address, no real name.
- What the room is watching: identifier and title of the content, so the others open the same one.
- Playback events (play, pause, position, speed), needed for syncing.
- Chat messages and reactions, delivered to the participants of the room.
- Technical data for the video call (WebRTC signalling) and abuse protection (IP address, used hashed and in memory only).

Camera and microphone
They only turn on when the user acts. Streams go directly between participants' browsers, encrypted (DTLS-SRTP). When a direct connection is impossible, they go through a TURN relay (Cloudflare) that forwards encrypted data it cannot read. Nothing is recorded.

Retention
Rooms, messages and reactions are kept in memory only, with no database. They are deleted 10 minutes after the last participant leaves, at the latest 12 hours after the room was created, and on every server restart. Server logs contain no messages, nicknames or IP addresses. Locally, the extension stores the nickname, settings and anonymous identity; the user can erase them in the options ("Erase my local data") or by uninstalling.

Third parties
Cloudflare (secure routing, TURN relay); public STUN servers (Google, Cloudflare). During a direct call, the other participants see the user's IP address, as in any peer-to-peer call; the "Hide my IP address" option forces the relay.

Contact: chezcresus1@gmail.com