mirror of
https://github.com/Shik3i/KoalaSync.git
synced 2026-07-26 12:08:15 +00:00
Timo
329 lines
24 KiB
HTML
329 lines
24 KiB
HTML
<!DOCTYPE html>
|
||
<html lang="en" class="lang-en">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
<title>Privacy Policy | KoalaSync</title>
|
||
<link rel="preload" href="style.min.css" as="style">
|
||
<link rel="stylesheet" href="style.min.css">
|
||
<link rel="icon" type="image/webp" href="assets/NewLogoIcon_64.webp">
|
||
<link rel="canonical" href="https://sync.koalastuff.net/privacy">
|
||
<link rel="alternate" hreflang="en" href="https://sync.koalastuff.net/privacy">
|
||
<link rel="alternate" hreflang="de" href="https://sync.koalastuff.net/de/datenschutz">
|
||
<link rel="alternate" hreflang="x-default" href="https://sync.koalastuff.net/privacy">
|
||
<meta name="description" content="Privacy Policy of KoalaSync. Learn how live room data, encrypted chat, operational logs and website access logs are handled.">
|
||
<meta name="robots" content="index, follow">
|
||
|
||
<script type="application/ld+json">
|
||
{
|
||
"@context": "https://schema.org",
|
||
"@type": "BreadcrumbList",
|
||
"itemListElement": [
|
||
{ "@type": "ListItem", "position": 1, "name": "Home", "item": "https://sync.koalastuff.net/" },
|
||
{ "@type": "ListItem", "position": 2, "name": "Privacy Policy", "item": "https://sync.koalastuff.net/privacy" }
|
||
]
|
||
}
|
||
</script>
|
||
|
||
<script type="application/ld+json">
|
||
{
|
||
"@context": "https://schema.org",
|
||
"@type": "WebPage",
|
||
"name": "Privacy Policy",
|
||
"url": "https://sync.koalastuff.net/privacy",
|
||
"description": "Privacy Policy of KoalaSync. Learn how live room data, encrypted chat, operational logs and website access logs are handled.",
|
||
"inLanguage": "en",
|
||
"isPartOf": {
|
||
"@type": "WebSite",
|
||
"name": "KoalaSync",
|
||
"url": "https://sync.koalastuff.net/"
|
||
}
|
||
}
|
||
</script>
|
||
|
||
<!-- Mobile Browser Theme Styling -->
|
||
<meta name="theme-color" content="#10190e">
|
||
<meta name="apple-mobile-web-app-capable" content="yes">
|
||
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
|
||
|
||
<script src="lang-init.min.js"></script>
|
||
</head>
|
||
<body>
|
||
<div class="bg-nature" aria-hidden="true">
|
||
<div class="bg-dusk-tint"></div>
|
||
<div class="bg-depth-day">
|
||
<div class="bg-godrays">
|
||
<span class="godray godray-1"></span>
|
||
<span class="godray godray-2"></span>
|
||
<span class="godray godray-3"></span>
|
||
</div>
|
||
<div class="bg-canopy"></div>
|
||
<span class="canopy-arc canopy-arc-1"></span>
|
||
<span class="canopy-arc canopy-arc-2"></span>
|
||
<span class="canopy-arc canopy-arc-3"></span>
|
||
<span class="canopy-arc canopy-arc-4"></span>
|
||
</div>
|
||
<div id="bamboo-far">
|
||
<span class="bamboo-stalk far-1"></span>
|
||
<span class="bamboo-stalk far-2"></span>
|
||
<span class="bamboo-stalk far-3"></span>
|
||
<span class="bamboo-stalk far-4"></span>
|
||
<span class="bamboo-stalk far-5"></span>
|
||
</div>
|
||
<div id="bamboo-near">
|
||
<div class="bamboo-stalk near-1">
|
||
<i class="bamboo-node node-1"></i>
|
||
<i class="bamboo-node node-2"></i>
|
||
<i class="bamboo-node node-3"></i>
|
||
<i class="bamboo-leaf leaf-1"></i>
|
||
<i class="bamboo-leaf leaf-2"></i>
|
||
</div>
|
||
<div class="bamboo-stalk near-2">
|
||
<i class="bamboo-node node-1"></i>
|
||
<i class="bamboo-node node-2"></i>
|
||
<i class="bamboo-node node-3"></i>
|
||
<i class="bamboo-leaf leaf-1"></i>
|
||
</div>
|
||
<div class="bamboo-stalk near-3">
|
||
<i class="bamboo-node node-1"></i>
|
||
<i class="bamboo-node node-2"></i>
|
||
<i class="bamboo-node node-3"></i>
|
||
<i class="bamboo-leaf leaf-1"></i>
|
||
</div>
|
||
</div>
|
||
<span class="fall-leaf fall-leaf-1"><i></i></span>
|
||
<span class="fall-leaf fall-leaf-2"><i></i></span>
|
||
<span class="fall-leaf fall-leaf-3"><i></i></span>
|
||
<span class="fall-leaf fall-leaf-4"><i></i></span>
|
||
<span class="fall-leaf fall-leaf-5"><i></i></span>
|
||
<span class="fall-leaf fall-leaf-6"><i></i></span>
|
||
<span class="fall-leaf fall-leaf-7"><i></i></span>
|
||
<span class="fall-leaf fall-leaf-8"><i></i></span>
|
||
<span class="bg-grass bg-grass-1"></span>
|
||
<span class="bg-grass bg-grass-2"></span>
|
||
<span class="bg-grass bg-grass-3"></span>
|
||
<span class="bg-grass bg-grass-4"></span>
|
||
<div class="bg-depth-dusk">
|
||
<div class="bg-mist bg-mist-1"></div>
|
||
<div class="bg-mist bg-mist-2"></div>
|
||
<div class="bg-horizon"></div>
|
||
<span class="firefly-wrap fw-1"><span class="firefly"></span></span>
|
||
<span class="firefly-wrap fw-2"><span class="firefly"></span></span>
|
||
<span class="firefly-wrap fw-3"><span class="firefly"></span></span>
|
||
<span class="firefly-wrap fw-4"><span class="firefly"></span></span>
|
||
<span class="firefly-wrap fw-5"><span class="firefly"></span></span>
|
||
<span class="firefly-wrap fw-6"><span class="firefly"></span></span>
|
||
</div>
|
||
<div class="bg-light-sweep"></div>
|
||
<div class="bg-grain"></div>
|
||
</div>
|
||
|
||
<nav>
|
||
<div class="container nav-content">
|
||
<a href="./" class="logo-area" style="text-decoration: none;">
|
||
<img src="assets/NewLogoIcon_128.webp" alt="KoalaSync Logo" width="40" height="40">
|
||
<span>KoalaSync</span>
|
||
</a>
|
||
<div class="nav-links">
|
||
<a href="./" style="display: inline-flex; align-items: center; gap: 6px;">
|
||
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" style="width: 16px; height: 16px; display: block;"><path d="m3 9 9-7 9 7v11a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path><polyline points="9 22 9 12 15 12 15 22"></polyline></svg>
|
||
<span>Home</span>
|
||
</a>
|
||
<a href="https://github.com/Shik3i/KoalaSync" target="_blank" rel="noopener" style="display: inline-flex; align-items: center; gap: 6px;">
|
||
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor" width="16" height="16" aria-hidden="true" style="display: block;"><path d="M12 0c-6.626 0-12 5.373-12 12 0 5.302 3.438 9.8 8.207 11.387.599.111.793-.261.793-.577v-2.234c-3.338.726-4.033-1.416-4.033-1.416-.546-1.387-1.333-1.756-1.333-1.756-1.089-.745.083-.729.083-.729 1.205.084 1.839 1.237 1.839 1.237 1.07 1.834 2.807 1.304 3.492.997.107-.775.418-1.305.762-1.604-2.665-.305-5.467-1.334-5.467-5.931 0-1.311.469-2.381 1.236-3.221-.124-.303-.535-1.524.117-3.176 0 0 1.008-.322 3.301 1.23.957-.266 1.983-.399 3.003-.404 1.02.005 2.047.138 3.006.404 2.291-1.552 3.297-1.23 3.297-1.23.653 1.653.242 2.874.118 3.176.77.84 1.235 1.911 1.235 3.221 0 4.609-2.807 5.624-5.479 5.921.43.372.823 1.102.823 2.222v3.293c0 .319.192.694.801.576 4.765-1.589 8.199-6.086 8.199-11.386 0-6.627-5.373-12-12-12z"/></svg>
|
||
GitHub
|
||
</a>
|
||
</div>
|
||
<div class="nav-right">
|
||
<div class="lang-select-container">
|
||
<select class="lang-dropdown" aria-label="Select Language">
|
||
<option value="en">🇬🇧 English</option>
|
||
<option value="de">🇩🇪 Deutsch</option>
|
||
<option value="fr">🇫🇷 Français</option>
|
||
<option value="es">🇪🇸 Español</option>
|
||
<option value="pt-BR">🇧🇷 Português (Brasil)</option>
|
||
<option value="ru">🇷🇺 Русский</option>
|
||
<option value="it">🇮🇹 Italiano</option>
|
||
<option value="pl">🇵🇱 Polski</option>
|
||
<option value="tr">🇹🇷 Türkçe</option>
|
||
<option value="nl">🇳🇱 Nederlands</option>
|
||
<option value="ja">🇯🇵 日本語</option>
|
||
<option value="ko">🇰🇷 한국어</option>
|
||
<option value="pt">🇵🇹 Português (Portugal)</option>
|
||
</select>
|
||
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" class="chevron-icon"><polyline points="6 9 12 15 18 9"/></svg>
|
||
</div>
|
||
<button class="hamburger" aria-label="Menu" aria-expanded="false">☰</button>
|
||
</div>
|
||
</div>
|
||
</nav>
|
||
|
||
<main class="legal-content">
|
||
<div class="legal-card" data-reveal style="padding: 2rem;">
|
||
<div style="display: flex; justify-content: center;">
|
||
<img src="assets/KoalaPrivacy-180.webp" srcset="assets/KoalaPrivacy-180.webp 180w, assets/KoalaPrivacy-360.webp 360w" sizes="180px" alt="Cute Koala representing privacy and data security" class="legal-mascot" width="180" height="180">
|
||
</div>
|
||
<h1>Privacy Policy</h1>
|
||
<p style="text-align: center; text-transform: uppercase; letter-spacing: 0.1em; font-size: 0.8rem; border-bottom: 1px solid var(--glass-border); padding-bottom: 1.5rem; margin-bottom: 2rem;">
|
||
Security & Privacy
|
||
</p>
|
||
|
||
<section>
|
||
<h2>1. Contact</h2>
|
||
<p>
|
||
KoalaSync is operated by Timo Schmidt.<br>
|
||
For privacy-related questions, contact: <span class="email-reveal" data-user="koalasync" data-domain="koalastuff.net" style="color: var(--accent); cursor: pointer; text-decoration: underline;">[Show Email]</span>
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>2. Website Hosting & Access Logs</h2>
|
||
<p>
|
||
KoalaSync is hosted on infrastructure provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Finland, within the EU/EEA. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
When you visit this website, standard access logs may include your IP address, browser/user agent and timestamp. These logs are used only for security, stability and abuse prevention and are automatically deleted after 7 days.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in operating the website securely, maintaining stability, and preventing abuse.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>3. No Third Parties & Open Source</h2>
|
||
<p>
|
||
KoalaSync deliberately avoids analytics tools, tracking cookies, or advertising networks. We do not load any third-party resources (such as Google Fonts) to maximize the protection of your privacy.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Since KoalaSync is 100% open-source, every single line of code can also be publicly viewed and audited for security on our <a href="https://github.com/shik3i/KoalaSync" target="_blank" rel="noopener" style="color: var(--accent);">GitHub repository</a>.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>4. Official Relay Server & Room Data</h2>
|
||
<p>
|
||
The official KoalaSync relay server does not create a room, chat, synchronization or watch history. Operational console logs used for security and troubleshooting may contain IP addresses, socket or peer identifiers, protocol versions and shortened room identifiers. Their retention depends on the server infrastructure and logging configuration.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
To provide the room feature, the relay temporarily processes room and synchronization data in memory while a room is active. This can include room ID, peer ID, display name, playback state, sync events, and, depending on title privacy settings, tab/media titles. This data is only forwarded to participants in the same room and is removed from memory when the room expires or is closed.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Room-chat message content is end-to-end encrypted in the browser extension before transmission. KoalaSync derives a 256-bit AES-GCM key locally from the room ID and a randomly generated chat secret. The chat secret is shared through the invite link and stored locally by the extension; it is not included in chat payloads sent to the relay.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
The relay receives only encrypted message content together with the technical metadata required for live delivery, such as sender ID, message ID and timestamp. Because the relay does not receive the chat secret, it cannot decrypt or read the message text. It forwards the encrypted payload to current participants in the same room and does not create a server-side chat history, write messages to disk or retain them after live forwarding.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Anyone who obtains a valid invite link and its chat secret may be able to decrypt messages in that room. Invite links should therefore be shared only with intended participants.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in providing the requested synchronization functionality, maintaining security, and preventing abuse.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Room and peer counts are aggregated operational metrics used to monitor server status.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>5. Browser Extension & Local Storage</h2>
|
||
<p>
|
||
To synchronize playback between participants in the same room, the KoalaSync browser extension temporarily captures data from the currently active video tab (e.g., tab title, media metadata like the video title, and playback state). Tab or media titles can potentially be personal depending on content. They are only processed for the synchronization feature, can be limited or disabled through title privacy settings in the extension, are forwarded only to room participants, and are not logged or stored persistently by the relay.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
The extension stores only settings required for operation locally in the browser, such as username, server URL, current room credentials (including the chat secret), language, title privacy settings, notification preferences and audio-processing settings. KoalaSync does not store general browsing history or a persistent watch history.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Decrypted chat messages are kept only in the memory of the current video-tab overlay, with a maximum of 200 visible message or activity entries. They are not written to browser storage and disappear when the chat is reset or destroyed, the page is reloaded, or the room session ends. Playback and presence entries shown inside the chat are generated locally from existing room events and do not create a separate server-side history.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
If chat notifications are enabled, the decrypted sender name and message text are passed to the browser's notification API and may be displayed or retained by the browser or operating system according to its own notification settings. Chat notifications can be disabled in the extension settings.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
The extension only connects to the relay server while you are actively in a room. No persistent background connection is maintained, so your IP address is not exposed to the server when you are not using the extension.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>6. Extension Permissions</h2>
|
||
<p>
|
||
To fulfill its technical purpose, the browser extension requires certain permissions. Each permission is used exclusively for core functionality:
|
||
</p>
|
||
<ul style="margin-left: 1.5rem; margin-top: 0.5rem; color: var(--text-muted); font-size: 0.9rem; list-style-type: disc; display: flex; flex-direction: column; gap: 0.35rem;">
|
||
<li><strong>storage</strong>: Allows local storage of your username, server URL, room credentials, and settings in your browser so they persist between sessions.</li>
|
||
<li><strong>tabs</strong>: Required to list open tabs in the extension's dropdown and read their titles, making it easy for you to select the correct video tab.</li>
|
||
<li><strong>scripting</strong>: Required to securely inject the synchronization script (content.js) into your selected video tab.</li>
|
||
<li><strong>alarms</strong>: Prevents the extension's background service worker from being suspended by the browser during an active synchronization session.</li>
|
||
<li><strong>activeTab</strong>: Enables secure, temporary interaction with the currently active tab for direct playback commands.</li>
|
||
<li><strong>notifications</strong>: Enables optional desktop notifications, such as when a new friend joins the room.</li>
|
||
<li><strong><all_urls> (Host permission)</strong>: Allows the extension to scan for HTML5 video elements on any website, enabling cross-platform synchronization (e.g., on YouTube, Netflix, Jellyfin etc.).</li>
|
||
</ul>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>7. Brute-Force & Rate-Limit Protection</h2>
|
||
<p>
|
||
For abuse prevention, failed join/login attempts may temporarily keep IP address and room ID in memory for up to 15 minutes. This data is not written to disk, is not exposed publicly, and is deleted automatically. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in preventing brute-force attacks and abuse.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>8. Recipients & Third Parties</h2>
|
||
<p>
|
||
Technical hosting and connection data may be processed by Hetzner as hosting provider on behalf of the operator. Room sync data is forwarded only to participants in the same room. Encrypted room-chat payloads and their delivery metadata are likewise forwarded only within the room; readable message content is available only to participants who possess the chat secret. KoalaSync does not use analytics providers, advertising networks, or tracking services.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>9. Required & Optional Data</h2>
|
||
<p>
|
||
Providing technical connection data is necessary to access the website and use the relay. Room credentials and sync events are necessary to use room synchronization. Text chat is optional; when used, encrypted message payloads and delivery metadata are required for live delivery. Sharing tab/media titles and enabling browser notifications are optional and can be controlled through the extension’s privacy settings.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>10. Data Subject Rights</h2>
|
||
<p>
|
||
Under the GDPR, you may have the right to access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with a supervisory authority.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">
|
||
Because KoalaSync does not use accounts and does not keep persistent room logs or watch history, many data points are either short-lived or cannot be linked back to a specific person after deletion. KoalaSync does not collect or retain additional identification data solely to identify users for rights requests.
|
||
</p>
|
||
<p style="margin-top: 0.5rem;">Contact for privacy requests: <span class="email-reveal" data-user="koalasync" data-domain="koalastuff.net" style="color: var(--accent); cursor: pointer; text-decoration: underline;">[Show Email]</span></p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>11. No Profiling & Automated Decision-Making</h2>
|
||
<p>
|
||
KoalaSync does not use profiling or automated decision-making within the meaning of Art. 22 GDPR.
|
||
</p>
|
||
</section>
|
||
|
||
<section>
|
||
<h2>12. Third-Country Transfers</h2>
|
||
<p>
|
||
The regular hosting setup is located within the EU/EEA. No regular transfer of personal data to third countries takes place.
|
||
</p>
|
||
</section>
|
||
</div>
|
||
</main>
|
||
|
||
<footer>
|
||
<div class="container">
|
||
<p>© 2026 KoalaSync. Open source under the MIT License.</p>
|
||
<p style="font-size: 0.8rem; margin-top: 0.5rem;">No chat or watch history. No tracking. Website access logs are deleted after 7 days.</p>
|
||
<div style="margin-top: 1.5rem; font-size: 0.8rem; display: flex; justify-content: center; align-items: center; gap: 1.5rem; flex-wrap: wrap;">
|
||
<a href="https://koalastuff.net/legal" style="color: var(--text-muted); text-decoration: none;">Legal Notice</a>
|
||
<a href="privacy" style="color: var(--text-muted); text-decoration: none;">Privacy Policy</a>
|
||
<a href="alternatives">Guides & comparisons</a>
|
||
<a href="https://mastodon.social/@koalastuff" rel="me noopener" target="_blank" style="color: var(--text-muted); text-decoration: none; display: inline-flex; align-items: center; gap: 4px;">
|
||
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor" width="14" height="14" aria-hidden="true" style="display: block;"><path d="M23.268 5.313c-.35-2.578-2.617-4.61-5.304-5.004C17.51.242 15.792 0 11.813 0h-.03c-3.98 0-4.835.242-5.288.309C3.882.692 1.496 2.518.917 5.127.64 6.412.61 7.837.661 9.143c.074 1.874.088 3.745.26 5.611.118 1.24.325 2.47.62 3.68.55 2.237 2.777 4.098 4.96 4.857 2.336.792 4.849.923 7.256.38.265-.061.527-.132.786-.213.585-.184 1.27-.39 1.774-.753a.057.057 0 0 0 .023-.043v-1.809a.052.052 0 0 0-.02-.041.053.053 0 0 0-.046-.01 20.282 20.282 0 0 1-4.709.545c-2.73 0-3.463-1.284-3.674-1.818a5.593 5.593 0 0 1-.319-1.433.053.053 0 0 1 .066-.054c1.517.363 3.072.546 4.632.546.376 0 .75 0 1.125-.01 1.57-.044 3.224-.124 4.768-.422.038-.008.077-.015.11-.024 2.435-.464 4.753-1.92 4.989-5.604.008-.145.03-1.52.03-1.67.002-.512.167-3.63-.024-5.545zm-3.748 9.195h-2.561V8.29c0-1.309-.55-1.976-1.67-1.976-1.23 0-1.846.79-1.846 2.35v3.403h-2.546V8.663c0-1.56-.617-2.35-1.848-2.35-1.112 0-1.668.668-1.67 1.977v6.218H4.822V8.102c0-1.31.337-2.35 1.011-3.12.696-.77 1.608-1.164 2.74-1.164 1.311 0 2.302.5 2.962 1.498l.638 1.06.638-1.06c.66-.999 1.65-1.498 2.96-1.498 1.13 0 2.043.395 2.74 1.164.675.77 1.012 1.81 1.012 3.12z"/></svg>
|
||
Mastodon
|
||
</a>
|
||
</div>
|
||
</div>
|
||
</footer>
|
||
|
||
<script src="app.min.js"></script>
|
||
</body>
|
||
</html>
|