Privacy Policy

1. Who We Are

sideby.me ("we", "us", "our") operates the website at sideby.me and the Sideby Pass browser extension (collectively, the "Service"). This Privacy Policy explains what data we collect, why, and how we handle it.

2. Data We Collect

2.1 Website (sideby.me)

• No accounts. We do not require sign-ups or collect email addresses, passwords, or personal profiles.
• Display names. When you create or join a room, you provide a temporary display name. This is stored only for the duration of the session and is not persisted after the room closes.
• Video URLs. When you share a video in a room, the URL is transmitted to other participants in real time via our signaling server. We do not permanently store these URLs.
• Connection metadata. Our server may temporarily log IP addresses and connection timestamps for rate-limiting and abuse prevention. These logs are automatically purged within 30 days.

2.2 Sideby Pass (Browser Extension)

• Network request monitoring. The extension uses the webRequest API to observe network traffic in your browser locally in order to detect video and streaming URLs (e.g., .mp4, .m3u8 files). This analysis happens entirely on your device. We do not transmit your browsing history, request logs, or any page content to our servers.
• DOM scanning. The extension injects content scripts to scan the DOM for <video> elements and intercepts XHR/Fetch responses to find video URLs from site APIs. All processing is local.
• Data sent externally. The only data transmitted to sideby.me is the video URL you explicitly choose to "pass" when you click "Create Room" or use the context menu. No data is sent without your direct action.

3. How We Use Your Data

• To synchronize video playback between room participants in real time.
• To provide the video detection functionality of the Sideby Pass extension.
• To prevent abuse and ensure fair use of our infrastructure.

We do not sell, rent, or share your data with third parties for advertising or marketing.

4. Data Storage & Retention

• Room data (participant names, video URLs, playback state) is ephemeral and stored in-memory using Redis. When a room closes, this data is permanently deleted.
• Server logs (IP addresses, timestamps) are retained for a maximum of 30 days for security and debugging purposes, then automatically purged.
• Extension data is stored entirely in your browser's local memory and is cleared when you close or navigate away from a tab.

5. Cookies & Local Storage

sideby.me uses minimal client-side storage. We may use localStorage to remember your UI preferences (e.g., theme, volume). We do not use third-party tracking cookies or analytics services. See our Cookie Policy for details.

6. Third-Party Services

We do not integrate with third-party analytics, advertising networks, or social login providers. The only external communication is between your browser and our signaling server for real-time synchronization.

7. Children's Privacy

Our Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us so we can take appropriate action.

8. Your Rights

Because we collect minimal data and do not maintain user accounts, most data protection rights (access, correction, deletion) are satisfied by design. If you have questions or requests regarding your data, contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.