Privacy Policy

(1) Without an account — screen sharing only

We do not collect personally identifying information such as your name, email address, or phone number. You can use the Service without any sign-up process. (The server access logs described in section 2 below are still recorded automatically.)

(2) With an account — using sign-in or a subscription

• Information received via social sign-in (external SSO such as Google): email address, name, and profile picture (avatar)
• Information you enter yourself during profile setup (onboarding): name and phone number
• When using a subscription: subscription status information such as the selected plan and free trial period

Sign-in happens only through external SSO, and the Service does not collect or store passwords directly. The Service currently does not collect or process payment information (cards, bank accounts, and the like).

To operate the Service reliably and to respond to incidents, the following information is recorded automatically in server logs (for both account holders and users without an account).

• Access IP address
• Access date and time
• Request path (URL), HTTP method, and response status code
• Browser and operating system information (User-Agent)
• Temporarily issued channel identifier
• Network statistics related to streaming (connection time, bitrate, and so on)

The information above is not used to identify any specific individual, and is processed only for operating the Service and for statistical analysis.

• Providing the Service reliably and analyzing the cause of incidents
• Member authentication (sign-in) and account management
• Checking subscription status and providing subscription features
• Detecting and blocking abnormal use or abuse
• Statistical analysis to improve service quality
• Fulfilling obligations under applicable law

The Service does not use separate tracking or advertising cookies. Browser storage is used only in the following cases.

• Sign-in session cookie: an essential cookie for keeping you signed in. It is removed when you sign out or delete your account.
• sessionStorage: temporarily stores share channel information, and is deleted automatically the moment you close the browser tab.

The Service uses the infrastructure of the providers below to operate smoothly, and the information above may be processed and stored in the course of that use.

• Google LLC — social sign-in (OAuth) authentication
• Supabase Inc. — member authentication, database, and file storage hosting

We do not provide collected information to outside parties for any purpose other than those above. Information may be provided exceptionally only where an investigative or supervisory authority makes a request through lawful procedures under applicable law.

• Member information (account, profile, subscription status): retained until you withdraw your membership (delete your account), and destroyed without delay upon a deletion request.
• Automatically collected information such as server access logs: retained for up to 3 months from the time of collection, then deleted automatically.

Where applicable law sets a separate retention obligation, that period applies instead.

Account holders can review their account information on the Service's Account settings screen, and can delete their account and related information at any time, immediately, via Delete account (withdraw membership). Users without an account can end the processing of their information simply by stopping use of the Service, with no separate application process. If you would like to access or delete information recorded in server logs, please contact us at the address below.

For inquiries regarding the handling of personal information, please email us at the address below.

support@boaba.net

If the contents of this policy are added to, removed, or modified, we will post the changes on this page, and the revised policy takes effect from the date it is posted.