Draft — not published, not legal advice. This page is a starting-point template with placeholder business details ([PLACEHOLDER] fields below). Fill those in and have it reviewed before treating it as your actual, binding policy.

Privacy Policy

Last updated: [PLACEHOLDER: date of first publication]

This policy describes what [PLACEHOLDER: legal entity name] ("we", "us") collects when you use SlimeStream, and — just as importantly for this product — what we structurally cannot see, by design.

1. What we can't see: your video content

Video you upload is encrypted in your browser before it ever reaches our servers, using a key derived from your vault passphrase. That passphrase never leaves your device. Transcoding (creating multiple quality renditions) happens in a worker process that holds the decryption key only in memory, only for the duration of that one job, then discards it. The finished, encrypted video is stored in your own Google Drive — not on infrastructure we control. We cannot decrypt your video content, and we have no copy of your vault passphrase to lose, subpoena, or be breached.

2. What we do collect

To operate the Service, we collect and store:

Account information: email address, and a password hash or Google account identifier (never a plaintext password).
Video metadata that isn't part of the encrypted content: title, description, duration, upload date, file size, and the video's thumbnail/poster image (also encrypted — see below).
Usage data: which videos were viewed, when, and for roughly how long, used for your own analytics dashboard and for enforcing plan limits (transcode minutes, concurrent viewers).
Billing information, handled by our payment processor [PLACEHOLDER: Stripe/Paddle] directly — we do not store your card details ourselves.
Technical logs (IP address, request timestamps) kept for [PLACEHOLDER: retention period] for security and abuse prevention.

3. Google Drive access

We request the drive.file Google OAuth scope, which only grants access to files this app itself creates in your Drive — we cannot see or access your other Drive files. You can revoke this access at any time from your Google Account settings, which will stop the Service from being able to deliver your video.

4. Sharing and third parties

We don't sell your data. We share information only with: our payment processor (billing), our hosting provider [PLACEHOLDER: hosting provider name] (infrastructure), and Google (Drive storage, governed by their own privacy policy for the files you store there). If you create a public share link or embed a video, anyone with that link can view the video — that's an intentional feature, not a data leak.

5. Your rights

You can export or delete your account and its associated data at any time from account settings. [PLACEHOLDER: add GDPR/CCPA-specific rights language if you have or expect EU/California users].

6. Cookies and tracking

[PLACEHOLDER: describe session cookies, and confirm — no third-party ad tracking, per the house-ads-only decision].

7. Changes to this policy

We'll announce material changes [PLACEHOLDER: notice method] before they take effect.

8. Contact

Privacy questions or data requests: [PLACEHOLDER: contact email].