Yugma for Firefox — Privacy Policy
Effective 7 October 2026

Yugma keeps two people's video players in sync on Netflix, Prime Video and YouTube. It is built and operated by Yash Vijay Patil, an individual based in India. Contact: hello@yugma.app. That is also the grievance contact under India's Digital Personal Data Protection Act, 2023. The full policy for the website and the Chrome version is at https://yugma.app/privacypolicy.

THE SHORT VERSION
- No account, no sign-up, no profile. We assign no identifier to you or your device.
- We never touch the video. It streams from Netflix, Prime Video or YouTube straight to you.
- Chat is end-to-end encrypted. Our server passes it along but cannot read it.
- Nothing is sold, nothing is used for advertising, and no analytics service receives anything.

WHAT THE ADD-ON SENDS, AND WHY
Only while you are in a watch-party room, the add-on talks to Yugma's relay server (yugma.app, hosted by Google Cloud in Mumbai, India). It sends:
- Website activity: your position in the video, when you play, pause, seek or change speed, and when an ad starts or ends. This is relayed to your partner to keep the two players together.
- Browsing activity: the platform, catalogue ID and title of what you are watching, including the episode. This is relayed so that you both open the same episode.
- Personal communications: your chat messages and reactions. Messages are encrypted on your device (X25519 + AES-GCM) with a key that never leaves your device and your partner's. The server receives only scrambled text it cannot read. A one-time public key is sent each time you join a room so the two devices can agree on that key.
- The room code, and the add-on's version, so that an outdated version can be asked to update.

Your IP address is seen by the server while you are connected. It is held in memory only, to limit how fast one connection can create rooms, and is never written to a log.

HOW LONG IT IS KEPT
- Rooms exist only in the server's memory. A room is deleted about thirty seconds after the last person leaves, and is never written to a disk or a database.
- The server keeps technical logs: connections, errors and hourly totals such as "forty rooms created". These contain no chat, no titles, no IP addresses and no codes of rooms that exist. They are cleared every week.
- A code that matched no room is noted in the log, to find mistyped or expired codes. Such a code identifies nobody.

WHAT WE NEVER RECEIVE
Your name, email, phone number, streaming account, viewing history, payment details, or anything you type outside Yugma's chat box.

STORED ONLY ON YOUR DEVICE
These stay in your browser's storage. They are never sent to us, and uninstalling the add-on removes them:
- Your chat transcript, so it survives a refresh. It is removed when you join another room, or after six hours.
- The last room code, and what the two of you are watching, so a reload rejoins you. The watching record is ignored after six hours.
- The emoji you used most recently (up to 24). Emoji are images inside the add-on; showing them contacts no one.
- Whether Yugma is switched on, and that you have seen the first-run tour.

VIDEO CALLS
The Firefox version has no video calls and never accesses your camera or microphone. If your partner, using the Chrome version, tries to call you, the call is declined automatically.

THIRD PARTIES
- Google Cloud hosts our server in Mumbai, India.
- Mozilla distributes the add-on through addons.mozilla.org. Mozilla's own privacy policy governs that site.
Netflix, Amazon Prime Video and YouTube receive nothing from us. Yugma does not log you in or touch your account with them.

YOUR RIGHTS
In India, under the Digital Personal Data Protection Act, 2023, you may ask what personal data we hold about you, ask us to correct or erase it, nominate someone to act for you, and raise a grievance. You may also complain to the Data Protection Board of India.

In the EU, UK or EEA, under the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your supervisory authority. We relay data only to provide the watch party you asked for.

In practice, we hold no personal data about you. Write to hello@yugma.app for any request.

CHANGES
If this policy changes, we update this text and its effective date before the change takes effect.