Privacy Policy

You provide directly:

• Account info: email address, password (hashed), display name, username, optional avatar URL.
• Profile preferences: default playback speed, theme, notification settings, recent-activity sharing toggle.
• Content you create: playlists, queues, video feedback (thumbs up/down), watch-later items, comments to collaborators, feedback you submit.
• If you sign in with Google or Apple: the basic profile fields the provider returns (email, name, avatar).
• If you subscribe: billing info is collected and stored by Stripe; we receive only a customer ID, plan, status, and renewal date.

Collected automatically:

• Watch events: which videos you played, when, and from which playlist.
• Device & technical info: IP address, browser/OS/device type, app version, language, time zone, and server error logs.
• Aggregated usage metrics (queue refreshes, session length).
• Local-storage and cookie data used to keep you signed in and remember preferences.

From third parties:

• Video metadata from YouTube, Rumble, and Odysee in response to your search and queue requests.
• Subscription and payment status from Stripe.
• Authentication tokens from Google or Apple if you use social sign-in.

• Operate, maintain, personalize, and improve the Service.
• Generate and refresh your video queues based on your preferences and history.
• Process subscription payments and manage your account.
• Detect, investigate, and prevent abuse, fraud, and security incidents.
• Send transactional emails (account, security, billing). We do not send marketing email without your separate opt-in.
• Comply with legal obligations and enforce our Terms.

We do not use your personal data to train AI models. AI-assisted features (queue suggestions) send only the minimum context needed (e.g., your selected topics) to our model provider and do not include your identity.

For users in the European Economic Area, United Kingdom, or Switzerland, we process your data under the following bases:

• Contract: to provide the Service you signed up for.
• Legitimate interests: to secure the Service, prevent abuse, and improve the product (balanced against your rights).
• Consent: for optional analytics or marketing, where applicable. You may withdraw consent at any time.
• Legal obligation: to comply with applicable laws.

We do not sell your personal information. We share data only with the service providers required to run the Service:

• Supabase (database, authentication, file storage) — United States.
• Stripe (payment processing) — United States.
• Lovable / Cloudflare Workers (application hosting and edge runtime) — global edge.
• Lovable AI Gateway (AI inference for queue suggestions) — United States.
• Google (YouTube Data API), Rumble, Odysee — video metadata providers.
• Google Sign-In / Apple Sign-In — authentication providers (if you choose them).
• Google Analytics 4 — aggregated usage analytics (cookie-based or measurement-protocol). You may opt out via the GA opt-out browser add-on or by disabling analytics in your device settings.
• Email delivery providers used to send transactional email.

We may also disclose information when required by law, to enforce our Terms, to protect the rights, safety, or property of users or the public, or as part of a corporate transaction (merger, acquisition, asset sale), in which case we will notify you before your data becomes subject to a different policy.

Streemrly uses YouTube API Services. By using the Service you also agree to the YouTube Terms of Service and the Google Privacy Policy. You can manage what Google stores about you at your Google security settings.

We use first-party cookies and browser local storage to keep you signed in, remember settings, and protect against CSRF. We do not use cross-site advertising cookies. If GA4 is enabled, it sets first-party cookies with anonymized IP. You can clear these at any time in your browser settings.

Do Not Track: we honor browser DNT signals by disabling optional analytics.

• Account, profile, and playlist data: kept while your account is active.
• Watch events: kept for up to 24 months for the recent-activity and analytics features.
• Server logs: 30 days.
• After account deletion: personal data is permanently removed within 30 days, except where retention is required by law (e.g., tax records for Stripe payments are kept by Stripe per its retention schedule).

We use TLS in transit, encrypted storage at rest, row-level security on every user data table, scoped database roles, and short-lived authentication tokens. No system is perfectly secure; please use a strong unique password and contact us immediately if you suspect unauthorized access.

We are based in the United States and our subprocessors operate primarily in the United States and on global edge networks. When data is transferred from the EEA, UK, or Switzerland, we rely on the relevant provider's Standard Contractual Clauses or equivalent safeguards.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (you can do this yourself from Profile → Delete Account, or see delete-account).
• Export your data in a portable format (email us to request).
• Restrict or object to certain processing.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with your local data protection authority.

To exercise any right, email admin@streemrly.com. We will respond within 30 days.

In the prior 12 months we collected the categories of personal information described in Section 1 (identifiers, internet activity, commercial information, geolocation inferred from IP, audio/visual usage data) for the purposes in Section 2. We do not sell or "share" (as defined by CPRA) personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would require an opt-out under CPRA.

California residents may request to know, delete, correct, and limit our use of their personal information, and may not be discriminated against for exercising these rights. Submit requests to admin@streemrly.com. We may verify your identity using the email associated with your account.

Streemrly is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please email admin@streemrly.com and we will promptly delete the account.

Parents and guardians: if you allow a child under 13 to use Streemrly under your supervision, you do so using your own adult account. Streemrly does not serve targeted advertising, does not display behavioral ads, and does not sell user data. The Service surfaces third-party video content (e.g., YouTube) which may include material unsuitable for children; we recommend using each platform's own parental controls (e.g., YouTube Kids, YouTube Restricted Mode) for child use.

You can delete your account and all associated personal data at any time from Profile → Delete Account inside the app, or by visiting /delete-account. Deletion is permanent and cannot be undone.

We may update this Policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect. The "Effective" date at the top shows when this version was published.

Greg Nigh (operating Streemrly)
Email: admin@streemrly.com