Privacy Policy
Last updated: May 8, 2026
Your privacy matters to us. This Privacy Policy explains what personal data SnuggleStream collects, why we collect it, how we use it, and your rights regarding that data. By using SnuggleStream you consent to the practices described here.
1. Who We Are
SnuggleStream is a free, browser-based watch party platform that lets people watch videos together in real time. It is an independent passion project. If you have questions about this policy, you can reach us at contactus@snugglestream.uk.
2. Data We Collect
We collect the minimum amount of data needed to operate the service:
- Google Account Information. When you sign in via Google OAuth, we receive your display name, email address, and profile picture. We use these to identify you in watch party rooms.
- Session Data. We store a session cookie on your browser to keep you signed in. This cookie contains a session identifier and expires after 7 days.
- Room Data. When you create or join a room, playback state, chat messages, and participant information are held in server memory. This data is ephemeral and is permanently deleted when the room empties.
- Uploaded Files. If you upload a video file, it is stored temporarily on the server for transcoding and streaming. Files are removed after the session ends.
3. How We Use Your Data
We use the data we collect solely to:
- Authenticate your identity so you can create and join rooms.
- Display your name and profile picture to other participants in a room.
- Maintain your session state across page loads.
- Transcode and serve uploaded video files for synchronised playback.
We do not use your data for profiling, behavioural advertising, or any purpose beyond operating SnuggleStream.
4. Third-Party Services
SnuggleStream integrates with the following third-party services, each of which has its own privacy policy:
- Google OAuth 2.0 — used for authentication. Google Privacy Policy.
- Google AdSense — used to display advertisements. AdSense may use cookies and similar technologies to serve ads based on your browsing history. Google Ads Privacy.
- GIPHY — used for GIF search in chat. GIPHY Privacy Policy.
- Google Fonts — used to load the Inter typeface. Google Fonts Privacy.
5. Cookies
We use cookies to maintain your signed-in session and to remember your theme preference. Third-party services (Google AdSense, Google OAuth) may set their own cookies. For full details, see our Cookie Policy.
6. Data Sharing
We do not sell, rent, or trade your personal data to anyone. We do not share your data with third parties except as required to operate the services listed above (authentication, ad serving, GIF search). We may disclose data if required by law or to protect the rights and safety of our users.
7. Data Retention
- Session data is retained for up to 7 days (the session cookie lifetime) and then automatically expires.
- Room data (chat messages, playback state, participant lists) is held only in server memory and is deleted the moment a room empties.
- Uploaded video files are stored temporarily for the duration of the session and removed afterwards.
- Google account information (name, email, picture) is stored only in your active session. We do not maintain a persistent user database.
8. Your Rights (GDPR / UK GDPR / CCPA)
If you are located in the European Economic Area, the United Kingdom, California, or another jurisdiction with data-protection laws, you have the following rights:
- Access & Portability. You may request a copy of the personal data we hold about you.
- Rectification. You may ask us to correct inaccurate data.
- Erasure. You may request deletion of your personal data. Because we store minimal data and room data is ephemeral, most information is already not retained.
- Restriction & Objection. You may request that we limit processing or object to processing of your data in certain circumstances.
- Withdraw Consent. Where processing is based on consent, you may withdraw it at any time by signing out and discontinuing use of the service.
- Do Not Sell (CCPA). We do not sell personal information. No opt-out is necessary because no sale occurs.
To exercise any of these rights, contact us at contactus@snugglestream.uk.
9. Children's Privacy
SnuggleStream is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
10. Security
We take reasonable measures to protect your data, including HTTPS encryption for all connections, signed session cookies, security headers (CSP, HSTS, X-Frame-Options), and path traversal protections on file serving. However, no system is perfectly secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of SnuggleStream after changes are posted constitutes acceptance of the updated policy.
12. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at contactus@snugglestream.uk.