WeHuddleWeHuddleBack to home

Privacy Policy

Last updated: 2026-06-13

1) What this product does

WeHuddle (including the “Huddle for Netflix” browser extension) helps users watch content together by synchronizing playback (e.g., play/pause/seek) and enabling room-based chat.

2) Data we collect and process

When you use the service, we may process:

  • Room information (e.g., the Room ID you enter).
  • Playback sync events (e.g., play, pause, seek actions and timestamps).
  • Page URL (e.g., Netflix watch URL) to keep participants synchronized on the same title.
  • Chat messages you send in a room.
  • Account details if you choose to register: a username and password. Accounts are optional — rooms work without one. Passwords are never stored in plaintext; we store only a salted, hashed value (scrypt) used to verify your login.
  • Saved rooms that you bookmark while logged in. These are stored on our servers and tied to your account.
  • Voice/video and screen-share connection data. Optional calls and screen sharing use peer-to-peer WebRTC. The server only relays the connection-setup signaling needed to start a call (offers/answers and ICE candidates) — it does not relay or record the audio/video itself. Setting up a direct peer-to-peer connection reveals participants’ IP addresses to one another; this is standard WebRTC behavior.
  • Technical data such as IP address and basic connection metadata for security, abuse prevention, and service reliability.
  • Aggregate usage and performance analytics via Vercel Web Analytics and Speed Insights (e.g., page views, referrers, and anonymized page-performance metrics). This is privacy-friendly: it uses no cookies, does not track you across other sites, and does not build an advertising profile.

We do not collect your Netflix credentials (username/password) or payment information.

3) How we use data

We use data only to:

  • Synchronize playback for room participants
  • Deliver and display chat messages
  • Enable optional peer-to-peer voice/video calls and screen share
  • Create and authenticate your account, keep you signed in, and store the rooms you save (only if you choose to register)
  • Operate, secure, and improve reliability (e.g., preventing abuse, diagnosing outages)
  • Understand aggregate, anonymized usage (e.g., which pages are visited) to improve the product

We do not use your data for advertising, and we do not sell it. We use no advertising SDKs and run no third-party tracking cookies.

4) Data storage and retention

  • Chat messages and room activity may be stored on our servers to support features like chat history.
  • If you register, your account (username and hashed password) and your saved rooms are stored on our servers for as long as your account exists.
  • Recent room history is stored only in your browser’s localStorage on your own device — it stays client-side and is not sent to our servers. You can clear it by clearing your browser storage.
  • In some cases (e.g., during outages), data may be handled temporarily and could be lost on server restart.
  • We retain data only as long as necessary to provide the service and for legitimate operational needs.

5) Cookies

When you log in, we set a single first-party, HttpOnly session cookie so we can keep you signed in. It is not readable by client-side JavaScript and is used only for authentication.

We do not use third-party or advertising tracking cookies. Our analytics (Vercel Web Analytics and Speed Insights) are cookie-free.

6) Data sharing

We do not sell user data. We do not share user data with third parties except:

  • service providers required to operate our infrastructure (hosting, databases, monitoring), under appropriate protections;
  • a third-party STUN server (currently Google's public STUN server) contacted only during voice/video call setup to discover your network address — a standard step in establishing a peer-to-peer WebRTC connection; or
  • when required by law.

7) User controls

  • You can stop data processing by disconnecting or uninstalling the extension.
  • Room IDs are user-provided; using a different Room ID creates a separate session.
  • You can use the service without an account. If you registered, logging out ends your session, and you can add or remove saved rooms at any time.
  • Recent room history lives in your browser; clearing your browser storage removes it.

8) Security

We use reasonable technical measures to protect data in transit and at rest. No method of transmission or storage is 100% secure.

9) Children’s privacy

This service is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

10) Contact

Questions or requests about this Privacy Policy can be sent to: