Global SharePlay

Privacy Policy

How Global SharePlay handles data in the extension, on the sync server, and on this website.

Last updated: 18 August 2026

This policy describes how [Legal entity name], doing business as Global SharePlay (“Global SharePlay”, “we”, “us”), handles information when you use:

  • this website (globalshareplay.com and www.globalshareplay.com);
  • the Global SharePlay Chrome extension;
  • the hosted join/wait page at redirect.globalshareplay.com;
  • the sync service that keeps a room together.

We operate from the United States. If you are in the EEA, UK, or Switzerland, extra rights are described below.

Questions: support@globalshareplay.com.

Short version

We do not create accounts. We do not sell personal information. Nicknames and room settings live mainly in your browser. The sync server keeps in-memory room state so playback can stay together, and that state is not a permanent user profile database.

1. Who is responsible

The operator of this site and the Global SharePlay services is [Legal entity name] (placeholder until the legal entity name is filled in), d/b/a Global SharePlay.

Contact: support@globalshareplay.com.

2. Information we handle

2.1 Information you give us

  • Email, if you write to support@globalshareplay.com. We use it to reply and to handle privacy requests. We do not add you to a marketing list from that mailbox unless you ask.
  • Nickname, which you type in the extension. It is shown to others in the same room.

2.2 Stored in your browser (extension)

The extension uses Chrome storage (and similar local storage) for things such as:

  • your nickname;
  • last room ID and server URL preferences;
  • UI state for the popup.

That data stays on your device unless the extension sends it to the sync server as part of joining a room (nickname, room ID, playback position, video ID, connection status).

2.3 Sync server (in memory)

To keep a room in sync, the server holds temporary room state while the room is alive, for example:

  • room ID;
  • member nicknames and connection status;
  • current video ID and playback position;
  • host / pending-join / hold state.

This is not a login system. There is no persistent account table. After a room goes idle (about 15 minutes without activity) members are removed and that room’s live state is discarded.

We may keep ordinary server logs (IP address, time, request path, error traces) for security, abuse, and debugging, then rotate or delete them on a routine schedule.

2.4 Hosted join/wait page

Invite and wait flows use https://redirect.globalshareplay.com. That page is a normal HTTPS site (not a chrome-extension:// page). It may receive room and video identifiers in the URL so it can open the right YouTube watch page.

2.5 This marketing website

Pages are static files. We do not run a membership database here.

Analytics: Google Analytics 4 is not loaded unless we configure a Measurement ID on this site. If that happens, GA4 is described in section 5 and a consent banner will appear for visitors in regions that require it (we use Consent Mode and default storage to denied until you accept).

Advertising: This marketing site does not show ads until we explicitly add them. After Google AdSense approval, ads may appear on the join/wait page, not inside the Chrome extension UI.

3. Chrome extension permissions

The extension requests permissions that match how it works. Today that includes:

  • storage — nickname and preferences on your device.
  • tabs — know which YouTube tab is in which room and open or focus the right watch URL.
  • notifications — tell you about room events (for example join problems or sync status).
  • scripting — run the content scripts that talk to YouTube’s player.
  • Host access to YouTube watch pages, and broader http/https access so invite links and your configured sync server (including wss:// backends) can work.

We do not use those permissions to read your unrelated browsing history for advertising in the extension itself.

4. Cookies and similar tech

This website

If Google Analytics is not configured, we do not set analytics cookies from this site.

If Google Analytics is configured, we use:

  • Google tags that may set cookies or use local storage;
  • a first-party record of your analytics consent choice.

You can Accept or Decline. Decline keeps analytics storage denied (Consent Mode v2).

Join/wait page (after AdSense is turned on)

If we enable Google AdSense there, Google may use cookies or device identifiers to:

  • serve and measure ads;
  • limit how often you see the same ad;
  • personalize ads only if you accept personalized ads.

If you decline, we ask Google for non-personalized ads (contextual / coarse location) or we hide the slot if nothing fills. We store that choice in a first-party cookie on the redirect host so later lands and wait mode can reuse it.

Google’s own policies apply to their ads: https://policies.google.com/privacy and https://policies.google.com/technologies/ads.

5. Google Analytics (only if enabled)

When a GA4 Measurement ID is set on this site we use Google Analytics 4 to see aggregate traffic (pages, countries, devices). We:

  • load gtag only in that configuration;
  • default Consent Mode signals to denied (analytics_storage, ad_storage, ad_user_data, ad_personalization);
  • update to granted only if you Accept.

Google may process data in the United States. See Google’s privacy policy.

6. Google AdSense (join/wait page, after approval)

We may show one display ad unit on the hosted join/wait page. We do not use Auto ads, full-screen interstitials, or ads inside the extension popup or YouTube player chrome.

Personalized ads use interest and activity signals Google already associates with your Google browsing; non-personalized ads do not. You choose on the page (and, in the EEA/UK, through Google’s Funding Choices / Privacy & messaging if we enable that in AdSense).

ads.txt will be published at https://globalshareplay.com/ads.txt and https://redirect.globalshareplay.com/ads.txt only after we have a real publisher ID. Until then those URLs return 404 on purpose.

Where GDPR or UK GDPR applies, we rely on:

  • Legitimate interests — run a watch-together product, keep rooms in sync, secure the servers, answer email.
  • Contract / steps you request — operate the room you joined.
  • Consent — analytics cookies (when GA4 is on) and personalized ads (when AdSense is on).
  • Legal obligation — if we must keep or disclose information to comply with law.

8. Sharing

We share information with:

  • Infrastructure providers that host this site, TLS, and the sync server (they process data on our instructions).
  • Google, if Analytics or AdSense is enabled, as independent controllers for their tags and ads.
  • Authorities if required by law.

We do not sell personal information and we do not share it for cross-context behavioral advertising except through Google ads after you consent to personalized ads.

9. Retention

  • Browser storage: until you clear site data or uninstall the extension.
  • Live room state: while the room is active; idle rooms time out.
  • Email: as long as needed to handle your request, then ordinary mailbox retention.
  • Logs: short operational windows unless we must keep them for security or law.
  • Consent cookies: typically up to 12 months, then we ask again.

10. Security

We use HTTPS for this site, the join page, and production sync (wss://). No method of transmission is perfect. Do not put passwords or payment cards in a room nickname or invite link.

11. Children

Global SharePlay is not directed at children under 13 (or the equivalent age in your country). We do not knowingly collect personal information from children. YouTube’s own age and account rules still apply.

12. Your rights

EEA / UK / Switzerland

You may request access, correction, deletion, restriction, objection, and portability where those rights apply, and you may withdraw consent for analytics or personalized ads without affecting earlier lawful processing. You may complain to your local data protection authority.

California and similar US state laws

We do not sell personal information. You may request to know, delete, or correct personal information we hold (typically an email you sent us). We will not discriminate against you for exercising those rights.

To use any of these rights, email support@globalshareplay.com.

13. International transfers

Servers and vendors may be in the United States. If we transfer EEA/UK data to the US, we rely on appropriate safeguards (for example Standard Contractual Clauses used by those vendors).

14. Changes

We will update this page when the product, ads, or analytics change. The “Last updated” date at the top is the source of truth.

15. Chrome Web Store

When the extension is listed on the Chrome Web Store, that listing will point at this Privacy Policy.