Privacy Policy

Popcorn In Bed LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, browser extension, desktop application, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using our Service, you consent to the practices described in this policy.

1. Information We Collect

Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Email address, username, display name, and password
• Set up your profile: Avatar image, bio, and preferences
• Use the Service: Comments, forum posts, reactions, and other content you create
• Subscribe: Payment information processed through Patreon
• Contact us: Name, email, and message content

Information Collected Automatically

When you access our Service, we automatically collect:

• Device information: Browser type, operating system, device type
• Usage data: Pages visited, features used, time spent on pages
• Log data: IP address, access times, referring URLs
• Cookies and similar technologies: See "Cookies" section below

Information from Third Parties

We may receive information from:

• Google OAuth: If you sign in with Google, we receive your email, name, and profile picture
• Patreon: Subscription tier, membership status, and pledge information

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process subscriptions and provide tier-based access
• Send you updates, notifications, and communications
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and abuse
• Enforce our Terms of Service and other policies
• Comply with legal obligations

3. Third-Party Services

Our Service integrates with the following third-party services, each with their own privacy policies:

Authentication and Database

• Clerk: We use Clerk for user authentication and identity management. Your account credentials, email address, and profile information are processed by Clerk. Privacy Policy
• Convex: We use Convex for real-time database storage and synchronization, including user profiles, content, notifications, and live updates. Privacy Policy

Authentication Providers

• Google OAuth: We offer sign-in with Google for convenience. When you use this, Google shares your basic profile information with us. Privacy Policy
• Patreon: We integrate with Patreon for subscription management. Your Patreon membership information is used to determine your access tier. Privacy Policy

Content and Media

• Mux: We use Mux for video hosting and streaming. Video playback data and analytics are processed by Mux. Privacy Policy
• The Movie Database (TMDB): We use TMDB to display movie information, posters, and metadata. No personal data is shared with TMDB. Privacy Policy
• YouTube: We may embed YouTube videos or display YouTube-related content. YouTube's privacy policy applies when viewing embedded content. Privacy Policy

Analytics and Error Tracking

• Sentry: We use Sentry for error monitoring and performance tracking to improve our Service. Error reports may include technical information about your browser and device. Privacy Policy

4. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential cookies: Required for authentication and basic functionality
• Preference cookies: Remember your settings (theme, display preferences)
• Analytics cookies: Understand how you use our Service
• Session cookies: Maintain your login state

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• With your consent: When you explicitly agree to share information
• Service providers: With third-party vendors who assist in operating our Service
• Legal requirements: When required by law, court order, or government request
• Protection of rights: To protect our rights, privacy, safety, or property
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide you with our Service
• Required to comply with legal obligations
• Necessary to resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at support@popcorninbed.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

10. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@popcorninbed.com.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@popcorninbed.com.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights under the GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing your data includes: performance of a contract, legitimate interests, consent, and compliance with legal obligations.

13. Browser Extension (PIB Auto Sync)

Our browser extension, PIB Auto Sync, provides synced viewing functionality on supported streaming platforms. This section describes the additional data practices specific to the extension.

Data the Extension Accesses

• Video playback state: The extension reads the current playback position, play/pause status, and playback rate of videos on supported streaming sites (Netflix, Disney+, Hulu, Max, Amazon Prime Video, Apple TV+, Paramount+, Peacock, and YouTube). This is used solely to synchronize reaction videos with your stream in real-time.
• Page URL: The extension checks page URLs to determine whether you are on a supported streaming platform and to activate the appropriate sync adapter. URLs are not collected, stored, or transmitted to our servers.

Data the Extension Stores Locally

• User preferences: Overlay position, opacity, volume, and display mode (inline or pop-out window) are stored locally in your browser using the Chrome Storage API.
• Session state: Sync session identifiers and connection state are stored locally so the extension can recover from browser restarts or service worker reloads.

Data the Extension Transmits

• Playback timestamps: Current video playback timestamps are sent to our backend to calculate sync offsets and keep the reaction video aligned. These timestamps are transient and are not stored after the session ends.
• Authentication tokens: Your Popcorn In Bed session token is used to authenticate with our backend and retrieve sync session data and reaction video URLs.

Data the Extension Does Not Collect

• The extension does not read, collect, or transmit page content, browsing history, form data, cookies, or any personal information from streaming sites.
• The extension does not inject ads, track your activity across sites, or share data with third parties.
• The extension does not execute any remotely hosted code. All functionality is bundled locally.

Permissions

The extension requests the following browser permissions:

• Host access to supported streaming sites: Required to detect video players on the page, read playback state, and inject the reaction overlay.
• Storage: Required to persist user preferences and sync session state locally.
• Tabs: Required to open the reaction player in a pop-out window and detect navigation to supported platforms.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us