Privacy

What we collect

If you sign in

  • Your sign-in identityfrom the provider you choose (Twitch, and Apple, Google or Discord where offered): the provider’s account ID, your username or display name, your avatar image link, and your email address if the provider shares it. With Sign in with Apple you can use a private relay address.
  • Your display name — the name other people see in watch parties, if you set one on your account page (otherwise your provider username).
  • That you agreed to the terms — which version of the terms you agreed to and when, because parties require it.
  • Favorites— which VODs you’ve hearted.
  • Watch progress — where you stopped in each VOD and whether you finished it, so you can resume on any device, plus anything you marked as watched or removed from Continue Watching.
  • Collections you follow, so we can show what’s new in them.
  • Sign in with Apple— if you use it, we keep Apple’s refresh token, encrypted, only so we can revoke it with Apple when you delete your account.
  • Linked TVs — when you link an Apple TV at vodboy.tv/link, a short-lived link code, a one-way hash of the TV’s secret and of the requesting IP address (used only to rate-limit code requests), and which account claimed it. Once linked, we keep the TV’s sign-in session, a device name and when it was last seen, so you can see your linked TVs and sign one out.

If you join a watch party

  • Which parties you joined, your role, and when you were last seen, plus the shared playback state.
  • Chat messages you send (up to 500 characters each), with the point in the video you were at. They are stored with the party and are visible to everyone in it, shown with your display name and avatar. If you change your display name, your past messages show the new one.
  • Reactions you send (an emoji), with the point in the video. People who were in the party can replay its chat and reactions alongside the VOD afterwards, until the chat is deleted (below).
  • If you report a message: the message, your reason, and that you reported it, so a moderator can review it.
  • If you RSVP to a scheduled party: that you’re going, so we can remind you when it starts.

If you turn on alerts

  • Your browser’s push subscription: a push-service address and the encryption keys your browser generates, linked to your account if you’re signed in, and which alerts you chose (live now, new VODs, collections you follow, party reminders). No account is needed. Alerts are delivered through your browser maker’s push service (for example Google, Mozilla, Apple or Microsoft).

Anonymous playback statistics

When you play a VOD, the web player and the Apple TV app send a small anonymous event: what happened (playback started, first frame shown, a stall, playback ended, a search or a shared clip), which VOD and part, the position in the video, how long loading took, and whether it was the web or the TV app. It carries no account, no IP address and no cookie, so it can’t be tied to you. We turn these into per-minute replay counts for the “most replayed” strip, which only appears once a VOD has enough plays.

Logs

Like any website, our hosting providers keep standard request logs — IP address, browser user agent, the page requested and when. We use them to keep the service running and to investigate abuse.

On your device

We set no advertising or analytics cookies. We use:

  • Sign-in cookies (sb-…-auth-token) while you’re signed in. These are required for sign-in to work.
  • Preferences in your browser’s storage: player volume and mute, theater mode, autoplay, always skip intros, playback speed, whether you dismissed the install prompt or the live bar, whether the calendar is open, whether you chose to always load the Twitch/Kick players, and, for this browser tab only, a sleep timer you set, how many VODs autoplay has played in a row, and which VODs you watched to the end (so autoplay doesn’t send you back to one). They never leave your device.

Who else sees data

We don’t sell or rent personal data, and we don’t share it for advertising. These services process data to run VodBoy:

  • Supabase — our database, sign-in and real-time (watch parties) provider.
  • Vercel — hosts the website.
  • Cloudflare— runs the service that starts video playback. To play a VOD your player may be redirected to the archive’s own storage (archive.wubby.tv / Cloudflare R2), which then sees your IP address like any website would.
  • Your sign-in provider (Twitch, Apple, Google or Discord), under its own privacy policy.
  • Your browser’s push service, if you turn on live alerts.
  • Twitch and Kick — when Wubby is live, the Live page offers their player (and Twitch chat). Nothing from them loads until you click “Load”; once loaded they may set their own cookies under their policies. The live preview image on the home page comes from their image servers.
  • Google Cast— only if you press the player’s Cast button (Chrome), your browser loads Google’s Cast library from gstatic.com to find your Chromecast.

Our fonts are served from our own site, so loading a page sends nothing to Google or any other font service.

To build the catalog we also use public stream information (titles, dates, categories) from public sources. None of that involves data about you.

How long we keep it

  • Account, favorites and watch progress: until you delete your account.
  • Watch-party chat and reactions: deleted 30 days after the party ends (the host can clear chat sooner), or with your account; after that the party can no longer be replayed. If you host a party and delete your account, the party is handed to another member or ended.
  • The record that you agreed to the terms: until you delete your account.
  • Anonymous playback events: 90 days; after that only the per-minute counts remain.
  • Push subscriptions: until you turn alerts off, or your browser drops the subscription.
  • TV link records: only as long as needed for security and rate limiting.
  • Hosting logs: per our providers’ standard retention.

Your choices

  • Browse and watch without signing in.
  • On your account page: unlink sign-in providers, sign out a single linked TV, or sign out of every browser and TV at once.
  • Turn live alerts off from the same toggle you turned them on with.
  • On your account page: download a copy of your data, or delete your account and everything tied to it, straight away. You can also email vodboy@chukshut.comand we’ll act on it within 30 days.

Children

VodBoy isn’t for children. You must be at least 13 to use it (see the terms). If you believe a child under 13has given us personal data, contact us and we’ll delete it.

Changes and contact

If this policy changes we’ll update the date at the top. Questions or requests: vodboy@chukshut.com.