Privacy policy

Updated: October 6, 2026

Account and rooms

Identity, messages and playback to share a session.

Authentication, storage, payments, analytics and website advertising.

Access to compatible sites and the selected title's URL.

Request access, correction or deletion through our privacy contact channel.

This policy covers Zopley's website, accounts, rooms and extension. The data used depends on the features you choose.

Account: user ID, email, display name, avatar and preferences. The authentication provider manages credentials and the session.
Rooms: participants, presence, messages, reactions, GIFs and stickers; video title, URL and ID; playback, pause, position, speed and participation time.
Website: uploaded files and their technical data, subscriptions and payment references, support messages, and operational and security logs.

We use data to authenticate accounts, manage files and plans, maintain rooms, deliver messages and coordinate playback.

People admitted to a room receive your display identity, messages and the data needed for the shared session. Access settings determine who can enter.
We also provide support and protect the service against errors and abuse. We do not sell extension data or use it to assess creditworthiness or provide loans.

Zopley uses external providers to deliver the service. Connections to them may include your IP address and technical browser data.

Clerk manages authentication and accounts. Convex stores room data, messages and activity. Vercel hosts the website and provides usage analytics.
Cloudflare Stream processes and delivers uploaded videos; Vercel Blob may host files. Stripe processes website payments and subscriptions. The extension does not request payment cards or streaming passwords.
When you search for GIFs or stickers, KLIPY receives the search, a client ID associated with your account, language and pagination. Assets load from its servers; we do not send the entire chat for these searches.

Rooms, messages, presence and playback state are stored in the backend. Closing the browser does not automatically delete this data.

Deleting a room removes its messages, presence, reactions and playback state. Activity summaries may remain, including participants, message counts and usage time; library files are managed separately.
Account, file, support and billing data is retained according to the features used and operational or legal needs. Uninstalling the extension does not delete your account or server records. You can request deletion through the privacy contact channel.

The extension coordinates the player and room chat. It does not download or retransmit audiovisual files from streaming services.

Local storage holds verified identity, display name, appearance and configuration. Session storage links tabs and rooms. Extension authentication tokens remain in memory and are not saved to its disk storage.
The selected title's URL is transmitted for the room; general browser history is not queried. The extension accesses sites covered by its permissions and requests authorization for additional sites. You can revoke these permissions in the browser.
Executable code is distributed within the package. Each participant plays the content using their own authorized access to the selected service.

The website uses cookies and browser storage for authentication, language and preferences, as well as analytics and advertising services.

Clerk uses session and device verification technologies. Zopley remembers language through a cookie and local storage, and saves interface preferences and session data needed for its features.
Vercel Web Analytics collects visits, paths, referrers, dates, device and browser data, and approximate region for aggregate statistics. Its analytics does not use third-party cookies to identify visitors across sites.
The website loads Google AdSense. This provider may use cookies and other identifiers, IP addresses, and browsing or device data for advertising, measurement and fraud prevention, depending on its configuration and your preferences. This does not mean the extension sends chat or streaming URLs for advertising.
You can delete or block cookies and storage in your browser; some sign-in and preference features may stop working. To manage Google's personalized advertising, visit https://myadcenter.google.com. External services have their own privacy policies.

The service uses encrypted connections and access controls for accounts, rooms and files.

Service connections use HTTPS or WSS. Account and room controls determine who can access or modify information.
Protect your credentials and share invitations only with people you want to admit. No system can guarantee that incidents will never occur.

You can request access, correction or deletion of your data and ask about available privacy controls.

To exercise these rights, write to us at zopley@sendus.cc with the subject 'Privacy'.
Specify the data or account related to your request. We may ask for information needed to verify your identity and explain deletion limits arising from legal or security obligations.

We update this page when features, data use or service providers change.

The update date appears in the header. The cookie and terms pages complement this policy.