Privacy Policy

1. Who is responsible

The data controller is Synchra, operated by Thomas Erlang Sloth, based in Denmark. For anything related to your personal data, write to [email protected].

2. What we collect

• Account data. Your email address and username, collected when you sign up.
• Connected accounts. When you link an external service — a streaming platform, a donation or membership service, an alert service, or a music service — we store the access tokens and account identifiers that service gives us. The tokens are what let Synchra read your chat and act on your behalf. The full list of supported integrations is in our documentation.
• Chat and activity history. Chat messages and stream events (donations, subscriptions, follows) from your connected channels, stored so you and your moderators can review them later. This includes messages written by your viewers.
• Technical data. IP address, browser type, and server logs — the ordinary records any web service produces, which we use to keep Synchra running and to debug problems.
• Payment data. If you take out a paid subscription, payments go through Stripe. We receive your subscription status and billing history; your card details go to Stripe directly and never reach our servers.

3. If you're a viewer

Some of the data we store is about people who never created a Synchra account: viewers whose chat messages, follows, donations, and similar events happen in a connected channel. We process that data because the streamer whose channel you take part in uses Synchra to run their chat and review their history — our legitimate interest in providing that service. The messages themselves are ones you already posted publicly on the platform in question.

Viewers and moderators can also create a Synchra account of their own — for example to use the viewer watch page. If you do, everything in this policy about account holders applies to you as well, including deleting your account from your settings.

The rights described in this policy apply to you too. If you want data about you corrected or deleted, email [email protected] with your platform username and the channel involved.

4. Why we use it

Under the GDPR we need a legal basis for each use of your data. Ours are:

• Running the service you signed up for (contract) — merging your chats, storing your activity history, updating your stream info, processing your subscription, and answering support requests.
• Keeping the service secure and working (legitimate interest) — using technical logs to prevent abuse, diagnose errors, and improve stability, and counting page views to see which parts of Synchra get used.
• Meeting legal obligations — for example, keeping billing records for as long as Danish bookkeeping law requires.

We don't use your data for advertising, we don't profile you, and we don't sell or rent personal data to anyone.

5. Who else handles your data

A few providers process data on our behalf to keep Synchra running:

• Hetzner (Germany) — hosts our servers and databases. Your data lives in the EU.
• Cloudflare — content delivery and DDoS protection; sees IP addresses and request metadata.
• Sentry — error monitoring; receives technical details when something in Synchra breaks.
• Stripe — payment processing for subscriptions.
• Backblaze — stores our encrypted backups.

Each of these works under a data processing agreement and can only use the data to provide their service to us. Separately, the platforms and services you connect handle your data under their own privacy policies — Synchra talks to them through their APIs but doesn't control what they do on their side.

In particular, Synchra uses YouTube API Services. By using the YouTube integration you also agree to the YouTube Terms of Service, and the Google Privacy Policy applies to the data Google handles. You can revoke Synchra's access to your Google data at any time in your Google security settings.

Beyond that, we only disclose personal data if the law requires it.

6. Where your data goes

Synchra is based and hosted in the EU. Some of our providers (Cloudflare, Sentry, Stripe, Backblaze) are US companies that may process data outside the EU; where that happens, the transfer is covered by the EU–US Data Privacy Framework or the EU's standard contractual clauses, as the GDPR requires.

7. How long we keep it

• We keep your data for as long as your account exists.
• Chat and activity history from viewers is tied to the streamer's account it was collected for and follows the same retention.
• Delete your account — from your settings page, or by emailing us — and we delete the data associated with it. Backup copies are purged within 30 days.
• The exception is data we're legally required to keep, such as invoices under Danish bookkeeping rules, which we keep only for the mandated period.

8. Security

All traffic to and from Synchra is encrypted. Sensitive data — like the access tokens for your connected accounts — and our backups are also encrypted where they are stored. Access to production systems is restricted, and servers and software are kept up to date. No system is immune to every attack, but if a breach ever affects your personal data, we'll notify you and the Danish Data Protection Agency as the GDPR requires.

9. Cookies and analytics

Synchra sets one cookie: a session cookie that keeps you logged in. There are no advertising, tracking, or third-party cookies.

To see which pages get visited, we run a self-hosted analytics tool on our own servers. It sets no cookies, counts page views without identifying you, doesn't follow you across other sites, and the data never leaves our infrastructure.

10. Your rights

Under the GDPR you can ask us to:

• show you the personal data we hold about you;
• correct data that's wrong;
• delete your data;
• hand your data over in a portable, machine-readable format;
• restrict or object to certain processing.

Email [email protected] and we'll respond within a month. If you're not satisfied with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet) or to the supervisory authority in your own EU country.

11. Children

Synchra is not intended for children under 13, and we don't knowingly collect their data. If we find out we hold data about a child under 13, we'll delete it.

12. Changes to this policy

If we change this policy in any meaningful way — new data types, new providers, new purposes — we'll tell you by email or in the app before the change takes effect. Minor edits just update the date at the top of this page.

13. Contact

Questions about your data or this policy: [email protected].