Privacy Policy

Effective Date: May 26, 2026

This Privacy Policy describes how Roomie ("Roomie", "we", "us", and "our") collects, uses, and discloses information when you use the Roomie browser extension and the website at roomie.neetodeployapp.com (together, the "Service"). Roomie is a watch-party tool that synchronizes playback and adds chat, voice, and video on supported streaming sites (currently Netflix, YouTube, and Hotstar). By using the Service you agree to this Privacy Policy.

When Roomie Collects Your Information

Installation

When you install the Roomie browser extension, a random session identifier is generated and stored in your browser's local storage. This identifier is used to recognise your participant within a watch party and to keep your sidebar visibility preference across browser restarts. It is not tied to any personal identity unless you also sign in.

Using the Service

While a watch party is active in a tab, Roomie collects the information needed to keep everyone in sync: the canonical URL of the streaming page (e.g. the Netflix watch URL), the playback state of that page (play/pause/seek timestamps and the current position), and a nickname you choose for the party. Chat messages you send are routed through Roomie's servers so other party members receive them. Voice and video streams are routed through our voice/video provider (see "Vendors and Service Providers" below) and are not stored on Roomie's servers.

Accounts

Creating a Roomie account is optional. If you sign up with email and password or via Google, we store your email address, hashed password (when applicable), and an opaque API token used by the extension to authenticate. You can sign out from the extension popup or delete your account from the account-settings page to remove this data.

Communications

If you contact us directly (for example by email), we receive whatever information you choose to send: your name, email address, the contents of the message, and any attachments.

Cookies, Storage, and Related Technologies

The Service uses your browser's local storage to remember your session identifier, room reference, sidebar visibility, and (when signed in) your API token. The website uses a Devise session cookie to keep you signed in. We do not currently use third-party analytics, advertising, or tracking cookies.

How Roomie Uses Your Information

Service Operation

We use the information we collect to provide and operate the Service: to authenticate your session, route chat messages to the correct room, synchronize playback between party members, and mint short-lived tokens for voice and video sessions.

Communications

If you have a Roomie account, we may use your email address to verify ownership, respond to support requests, and send transactional notices relating to the Service. We do not send marketing emails.

Aggregate Data

We may aggregate and anonymise data collected through the Service (party counts, browser-version distribution, error rates) to monitor service health and inform product decisions. Aggregated data does not identify you and may be used for any lawful purpose.

Legal Rights

We may use the information collected through the Service to enforce our terms and to comply with applicable law.

How Roomie May Disclose Your Information

Vendors and Service Providers

We share information with third-party providers that operate parts of the Service on our behalf. They are bound by contractual confidentiality and are not permitted to use information for unrelated purposes.

• LiveKit Cloud — provides the WebRTC infrastructure that carries voice and video between party members. LiveKit receives the room name, your nickname, and your audio/video streams while a call is active.
• NeetoDeploy — hosts the Roomie web service and database (room metadata, chat messages, account records).
• Google — provides the OAuth flow if you choose "Sign in with Google". Google shares your email address and name with Roomie at sign-in.
• The Movie Database (TMDB) — looked up at party-create time to enrich a room with a movie/show poster, backdrop, and synopsis. We only send the page title to TMDB; no personal data is shared.

As Required by Law and Similar Disclosures

We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (i) comply with law enforcement requests and legal process such as a court order or subpoena; (ii) enforce this Privacy Policy or our other agreements; (iii) respond to your requests; or (iv) protect your, our, or others' rights, property, or safety.

Merger, Sale, or Other Asset Transfers

If Roomie is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. The use of your information following any such event will be governed by the Privacy Policy in effect at the time of the transfer.

With Your Consent

We may also disclose your information with your permission.

Data Retention

Chat messages and room metadata are retained for as long as the room is active and for up to 30 days of inactivity, after which they are automatically pruned. Voice and video streams are not stored at all — they are routed in real time through LiveKit Cloud and discarded once the call ends. Account records (email, hashed password, API token) are retained until you delete the account.

Security of Your Information

We take reasonable steps to protect the information we collect. Connections to the Service use HTTPS / WSS. Account passwords are stored as bcrypt hashes; API tokens are randomly generated and revocable. No system is perfectly secure, so we cannot guarantee the absolute security of any information you provide to us.

Do Not Track

Some browsers send a "Do Not Track" signal. Because there is no industry-wide standard for responding to this signal, we do not currently change our behaviour based on it. We also do not use third-party tracking technologies.

Children's Privacy

The Service is not directed to children under 13 years of age and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13 we will delete that information and terminate the account.

International Users

Roomie's servers are operated from the United States and the European Union. If you use the Service from another region, your information will be transferred to and processed in those regions. By using the Service you consent to such transfer and processing in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version is always at this URL with the most recent Effective Date. Material changes will be highlighted at the top of the page or by an in-product notice. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy or requests to access or delete your data: [email protected].