Privacy Policy

1. Introduction

SINK is currently operated by Dashon Howard. This policy describes how the SINK website, mobile beta, browser extension, and invite-only Hosted Screenings pilot collect, use, retain, and protect information.

2. Information We Collect

Information you provide

• Account details such as email address, username, and profile image
• Comments, reactions, room activity, reports, and support messages
• Preferences and settings you choose

Playback and sports sync

• The browser extension may read supported player state, including title, playback position, pause state, and page URL, to synchronize the room.
• To resolve unidentified or broadly supported playback pages, the extension may send page URL and player/title metadata to SINK. When structured signals are insufficient, it may also send a bounded, whitespace-collapsed excerpt of visible page text and privacy-redacted URL or embed hints to the content-identification service; raw page HTML is not sent for this step.
• Extension error reports may include the current page URL, extension version, browser user agent, error message, stack, and related diagnostic fields.
• Sports rooms may store the selected event, game-clock state, and your broadcast-delay calibration.
• Manual sync stores the position you select.

Phone microphone sync

• Microphone access is optional and starts only when you invoke phone sync.
• User-started Phone sync may continue while the app is in the background or the screen is locked, until you disable Phone sync or switch sync modes.
• On Android, an ongoing notification remains visible while background microphone access is active and includes a direct Stop action.
• A short audio window is processed on your device into a fingerprint query and matched against a downloaded reference for covered titles.
• Raw microphone audio and the phone's query fingerprint are not uploaded to or retained by SINK for this feature.

Opt-in fingerprint contributions

• With explicit permission, the browser extension may process audio from the current tab, not your microphone, on your device.
• Only derived, non-audio fingerprint data and its playback position are uploaded. Raw tab audio is not uploaded.
• You may disable future contributions or permanently remove your account association in extension settings. Accepted public-catalog measurements remain under a rotated, non-account identifier and cannot be linked across titles after removal.
• The contribution license covers only accepted, de-identified technical measurements. It does not give SINK ownership of or a license to distribute the source audio or video; private partner assets remain contract-scoped and revocable.

Technical and usage data

• Device, browser, operating-system, error, performance, and security-log data
• Feature usage and product analytics, with identifiers minimized where practical

Hosted Screenings

• Organization, production, project, title, version, event, rights-contact, and billing-administration information supplied by screening organizers.
• Organizer-authorized source audio or video temporarily uploaded to create an exact-cut fingerprint. SINK does not stream that source to the audience.
• Derived fingerprints, processing status, integrity checks, source-deletion receipts, and operational audit records.
• When separately enabled, authorized captions, scripts, audio description, production notes, scene or character data, and derived private search indexes.
• Invitation, consent, attendance, playback-health, moderation, and screening-feedback records. The organizer chooses whether a feedback study is identified, pseudonymous, or anonymous before responses begin.

3. How We Use Information

• Operate accounts, rooms, comments, reactions, and synchronized timelines
• Provide and improve playback, fingerprint, manual, and game-clock sync
• Moderate abuse, investigate errors, secure the Service, and meet legal obligations
• Communicate service and support updates
• Process an organizer's exact content version, operate its private screening, provide authorized contextual features, and produce audience feedback reports

4. Service Providers

SINK uses service providers including Supabase for authentication, private storage, data, and realtime infrastructure; Vercel for hosting; PostHog for allowlisted product analytics; Sentry for error monitoring; Stripe for payments when a paid pilot is enabled; TMDB for licensed movie and television metadata; and OpenAI to classify user-submitted text and images for safety, including checking visible words embedded in an image. An organizer-authorized AI provider may process private knowledge material only when that organization separately enables the feature. Providers may change as the pilot evolves; material changes will be reflected here before affected processing begins.

Confidential Studio and screening-management pages are excluded from session replay and feedback screenshots. SINK does not send titles, filenames, scripts, dialogue, free-text feedback, invitation secrets, signed URLs, or source media to product analytics.

5. Retention and Control

• Raw phone and browser-tab audio is not retained by SINK.
• Accepted public fingerprint measurements may remain for the life of the shared sync catalog under the contribution license. Account attribution is removed on withdrawal or account deletion; debug captures and rejected or failed staging data are deleted.
• Hosted source media is deleted after authorized processing succeeds. A failed job may retain the source for retry for up to 24 hours; cancellation requests immediate deletion.
• Private fingerprints and authorized knowledge indexes remain while the associated version is active, and are revoked before deletion when the organizer withdraws authorization or deletes the version.
• Pilot screening responses and reports are retained for up to 12 months after the event unless the organizer deletes them earlier. Anonymity settings cannot be weakened after responses begin.
• Invitation secrets expire with their event or earlier revocation. Non-content audit and deletion receipts may be retained for security, contractual, and legal accountability.
• Comments and account data remain until deleted, subject to safety, fraud, backup, and legal-retention needs.
• You may update or delete account data in Settings or request access, correction, deletion, or export by emailing legal@sink.chat.

6. Organizers and Attendees

A screening organizer determines the purpose of its event, its invitation list, the questions it asks, and the identity mode of its feedback study. Organizers are responsible for giving attendees any additional production-specific notice and obtaining any consent their screening requires. SINK processes that screening information to provide the organizer-requested service. Attendees can contact the organizer or SINK about access, correction, export, or deletion; SINK may need to coordinate an organizer-controlled request with that organizer.

7. Browser Extension Limited Use

SINK's use and transfer of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is used only to provide or improve the user-facing SINK features described in this policy, protect the Service, comply with law, or as part of a merger or acquisition with prior notice where required. It is not sold or used for personalized advertising. Humans do not read browsing or activity data except with your explicit consent for support, when required for security or abuse investigation, to comply with law, or when the data has been aggregated and anonymized for internal operations.

8. Security and Children

We use access controls, encryption in transit and at rest where supported, private storage, short-lived access links, database security policies, audit records, and verified deletion workflows, but no system can guarantee absolute security. The Hosted Screenings pilot is for adult production teams and audiences and does not support youth or school events. SINK is not intended for children under 13, and we do not knowingly collect their personal information.

9. Changes and Contact

We may update this policy and will post the revised date here. Questions or privacy requests may be sent to legal@sink.chat.