Privacy
omega-share has no accounts, no cookies, no analytics and no tracking. This page says what we keep, where, and for how long.
Data controller
The data controller is Wang Zhou, a natural person established in the Netherlands: Jonkvrouw Sanderijndreef 987, 3562 LP Utrecht, the Netherlands. Contact omegashare.support@gmail.com for privacy questions or to exercise your rights.
Our hosting processor is Hetzner Online GmbH, Germany, which hosts the server on our behalf.
Why we process data
In-memory rate-limit counting by network address and report notes are processed for our legitimate interest in keeping omega-share safe and preventing abuse (GDPR Art. 6(1)(f)). We process the room data you create to provide the service you requested (GDPR Art. 6(1)(b)). The sections below describe the data and retention periods.
In your browser
Your nickname and avatar are stored in your browser (local storage) so you don't have to pick them again. They are sent to the room you join while you are in it, and are never written to our disk. Clear your site data to remove them.
On our server
Each room is one database row: its id, title, layout, the video being shown, whether it is public or private, timestamps, and a hash of the room's owner key and invite key. We keep hashes, never the keys themselves. A room title is whatever its creator typed, so don't put a real name in it. The room's owner can delete the room at any time, and that removes the whole row.
We store no IP addresses, no accounts, no email addresses and no record of who created or joined a room.
In memory only
To stop floods and abuse, rate limits count requests per network address in memory only. Those counts are never written to disk and are gone when the server restarts. Who is in a room right now, and what they are watching, is also held in memory only.
If your connection drops or your tab is suspended without you leaving, the server keeps your place in the room (your name, seat and spot) in memory for up to 2 minutes, so you come straight back to it. A random rejoin key, kept only in that browser tab, lets you return. When you leave, the room's owner removes you or the 2 minutes run out, the key stops working and your place is freed. A server restart forgets these keys too.
Reports
"Report room" in a room sends a report that goes to the people who run omega-share only, not to the room's host or anyone in it. A report holds the reason you picked, your note if you wrote one, the room's id and title, and the address of the video playing when you sent it. Before the note is stored, email addresses, IP addresses and phone numbers in it are replaced with placeholders.
A report keeps nothing about you: no IP address, nickname, account or browser details. To spot the same browser reporting a room twice, the server remembers in memory only that a report came from your network address, never on disk. Every report is deleted 30 days after it was sent, whatever happened to it, and is then gone once it has rotated out of the last 14 nightly backups. We can't reply to a report.
Backups and logs
Nightly backups of the room database are kept for 14 days, so a deleted room is gone from them after at most 14 days. The web server keeps no access log, and system logs are deleted after 14 days.
Videos
A video plays in the provider's own player (YouTube, Twitch or Vimeo), which loads in your browser while you are in the room, so that provider sees your visit under its own privacy policy. Any other shared page loads only when you click it.
The browser extension
The omega share extension reads the page you are on only when you open it: the page's address and the addresses of the videos embedded in that page, to list the ones it can share. It also reads the room's share token from your open room tabs on your chosen server, so the server knows the share comes from a member of that room. It touches no other tab and does nothing in the background.
The video address and the share token are sent only to the omega-share server you chose, and only when you click Share or Add to queue. The server then handles them as described above. The extension's only setting, the server address, is stored in the extension on your computer.
The extension has no analytics and loads no code from the internet. What it reads is used only to share the video, and is never sold or used for advertising.
In the terms Firefox shows when you install it, the extension sends three kinds of data, all only when you click Share or Add to queue, and only to the server you chose: website content (the address of a video embedded in the page), browsing activity (when the video is the page itself, that address is a page you visited) and authentication information (the room share token from your open room tab, which proves you are in the room). The Chrome Web Store listing names the same data.
Your rights
Under the GDPR, where applicable, you have rights of access to your personal data, rectification of inaccurate data, erasure, restriction of processing, and data portability. You can object to processing based on legitimate interests. We make no automated decisions about you that produce legal or similarly significant effects.
To exercise your rights, email omegashare.support@gmail.com. We answer without undue delay. We have no accounts or record of who created or joined a room, so please include enough information to locate the data concerned, such as the room's web address. You do not need to post personal information publicly.
You have the right to complain to the Dutch Autoriteit Persoonsgegevens or your own supervisory authority, including in the country where you live or work or where you believe an infringement occurred.
Questions and deletion
If a room needs to go and you can't delete it yourself, email omegashare.support@gmail.com with the room's web address and why. Please don't use public issues for privacy or deletion requests.