Privacy & Safety
This notice describes the application code as published in this repository. It is not a promise about the practices of third-party infrastructure providers.
Information processed
Your chosen nickname may be saved in this browser's local storage. To let you refresh or reconnect without losing your place, your browser's session storage holds a randomly generated room credential. Never share your host credential or screenshots of it.
With the default Cloudflare multiplayer transport, room membership, game progress, video queue state, and up to 80 recent chat messages are temporarily stored in a Cloudflare Durable Object for the active room. The room expires after approximately six hours without activity and cannot remain open longer than 24 hours from creation; the host may end it earlier. This is temporary server-side storage, not a permanent account or chat archive.
Connections and voice
Games, chat and room presence connect over encrypted HTTPS and WebSocket connections to Cloudflare, which acts as the real-time room server. Cloudflare and network providers may process IP addresses and connection metadata to provide these services. The application validates player actions server-side and restricts access using private invite tokens or explicit host approval for code-only joining. A six-digit code alone does not identify a person.
Optional voice calls currently use PeerJS signaling and direct WebRTC audio between browsers. On restrictive networks, voice may fail without TURN relay support even if games and chat work. Your browser requests permission before accessing the microphone. The application does not intentionally record calls or upload audio to the Cloudflare game server; the other participant could independently record what they hear. This service does not provide end-to-end encryption of server-handled game/chat data.
Watch Together and YouTube
When you open Watch Lounge and select a YouTube video, your browser embeds the official YouTube player and may load YouTube thumbnails. YouTube/Google may receive your IP address, device details, cookies or playback information under their own policies. See the Google Privacy Policy and YouTube Terms. Video IDs, the playlist, synchronization timing, and emoji reactions are shared through the room server. The app does not rebroadcast video content or bypass YouTube's licensing, geographic, embedding, or age restrictions.
Retention and room access
When the host leaves, the room and its server-side game/chat history are deleted. When a guest leaves, their seat and the room's game/chat history are cleared. Reloading the page normally reconnects you using a temporary session token. If both devices are offline, room state remains until the room's expiry. A nickname may persist in local storage until you delete this site's browser data. Browser session data is removed when you clear session storage or close that browser session, subject to browser behavior.
Private invitations contain an unguessable token in the URL fragment. Treat the complete invite link as private; recipients who use it before the first guest is admitted can join without host approval. Anyone who enters only the six-digit code needs the host's approval. Approved users are not identity-verified.
Safety tips
Only invite someone you trust. Do not send passwords, government IDs, account recovery codes, financial records or other sensitive information in games or chat. Deny unfamiliar join requests. You can decline voice calls, mute yourself, hang up, skip challenges or end the room. If a networking failure occurs, the game reconnects automatically but internet outages and voice NAT restrictions are still possible.
Updates and questions
This website and notice may be updated when features change. For technical questions or to review the open-source code, visit the project repository by azhardotcoder.