Privacy Policy

Information we collect

• Account information. If you create an account, we store your email address, a securely hashed password (we never store your password in plain text), and the display name you choose.
• Google sign-in. If you sign in with Google instead, we receive your name and email address from Google to create or match your CueBall account. We do not receive your Google password.
• Guest names. If you join a room without an account, we store the display name you enter for that room.
• Room and queue activity. Room codes, the videos added to a room's queue, and votes cast on those videos, so the shared queue can be kept in sync for everyone in the room.
• YouTube playlist access. If a room's host chooses to “Connect YouTube,” CueBall requests permission (via Google OAuth) to manage a single YouTube playlist on the host's behalf. We store the resulting access and refresh tokens so CueBall can add, remove, and reorder videos in that playlist to match the room's queue. These tokens are stored server-side and are never exposed to other participants or to the browser.

How we use this information

We use the information above only to operate CueBall itself:

• Authenticating you and remembering your account or guest identity.
• Running the shared room queue: adding videos, tallying votes, and determining play order.
• Keeping a connected YouTube playlist in sync with a room's queue, when a host has explicitly connected one.
• Showing your past rooms if you're signed in.

We do not use your data for advertising, and we do not sell or rent it to anyone.

Cookies and local storage

CueBall doesn't use cookies. It does store a small amount of data directly in your browser's local storage (a first-party browser storage mechanism, similar to a cookie, that only CueBall's own code can read) so the app keeps working the way you'd expect between visits:

• Your signed-in session token, if you have an account and are logged in.
• A per-room participant token, so reloading or briefly losing connection to a room keeps you as the same participant instead of asking you to rejoin.
• Your light/dark theme preference.

None of this is used for advertising, cross-site tracking, or analytics, and it's never shared with or accessible to third parties or other participants in a room.

Google API Services User Data Policy

CueBall's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube playlist access is used exclusively to keep a room's queue and its connected YouTube playlist in sync, and for no other purpose. For details on how Google itself handles data it processes on our behalf, see Google's Privacy Policy.

Sharing your information

We don't share your personal information with third parties, except with Google/YouTube's own APIs as strictly necessary to provide the playlist-sync feature you've explicitly enabled. Other participants in a room can see your display name and the videos/votes you contribute to that room, since that's the whole point of a shared queue.

Data retention & deletion

• Rooms (and their queue, votes, and any connected playlist link) are automatically deleted after 24 hours of inactivity with no one connected.
• You can revoke CueBall's access to your YouTube account at any time from Google Account permissions. This immediately invalidates the stored tokens.
• To request deletion of your account or any data we hold about you, contact us at the email below and we'll take care of it promptly.

Security

Passwords are hashed with bcrypt and never stored in plain text. YouTube access/refresh tokens are stored server-side only and are never sent to the browser or to other participants.

Children's privacy

CueBall is not directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of CueBall after a change means you accept the updated policy.

Contact

Questions, or want your data deleted? Email luis.barrantesv@gmail.com.