Privacy policy

What we collect

• Email address — to create and sign in to your account.
• Social account identity — if you link a social provider to verify yourself, we record which provider it was and the account identifier they give us. We do not read your posts, contacts or follower list.
• Phone number — only if you choose phone verification. See below.
• Display name and profile — avatar, bio, links, genres. All of it is public by design.
• Your 18+ affirmation — that you confirmed you are an adult, and when.
• Show and seat activity — shows you created, seat requests you made, and whether they were approved.
• Recordings — if a host records a show you appear in. See below.

Your phone number

Phone verification is optional: you can verify with a social account instead, and you never need to verify at all to watch or chat.

If you do verify by phone, your number is held by our authentication provider to send the code. In our own database we store only a salted one-way hash of the number, never the number itself. The hash uses a secret held outside the database, so someone who obtained a copy of our database could not reverse the hashes back into phone numbers.

We do not send marketing texts, and we do not sell or share your number.

Recordings and replays

A host can record their own show. While a recording is running, an on-screen REC indicator is visible to everyone in the room for its whole duration, whether you are on camera or watching. Nobody is recorded without that indicator being on screen.

Recordings are stored in a private cloud bucket and are not public by default. A host may choose to publish one as a replay, at which point it becomes a public page anyone can watch, including your face and voice if you were on camera. Unpublishing removes the page.

Retention is not yet set. Nothing currently deletes recordings automatically. A retention period will be set with counsel and stated here before this policy is finalised. Unpublishing a replay takes the page down; a viewing link already issued keeps working until it expires, and a copy someone already downloaded is theirs.

Live video and chat

Live audio and video are relayed in real time. Unless a host is recording, they are not stored.

Chat is never stored. Messages are delivered live to the people in the room and are gone when the show ends. There is no chat history, for you or for us.

Payments

Host fees are processed by Stripe on a Stripe-hosted checkout page. We never see or store your card details. We keep a reference to the checkout session so we know which show was paid for.

Age

Birby is an adults-only service. You must be 18 or older to register, and there are no accounts for anyone younger. See child safety and 18+.

Cookies

We set a cookie to keep you signed in. That is what it is for, and it is required for the service to work.

Flagged for counsel. If we serve EU or UK traffic, a cookie policy and a consent mechanism are likely required. Neither is built yet.

Your rights

• You can request a copy of what we hold about you.
• You can request deletion of your account and associated data.
• You can verify with a social account instead of a phone number.
• You can watch without an account at all.

Requests go to privacy@birby.live.

Flagged for counsel. Jurisdiction-specific rights (GDPR lawful basis, CCPA disclosures) and the deadline for answering a request are not drafted.

Who holds this data