Privacy Policy

1. Introduction

WatchSafe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy complies with:

• COPPA (Children's Online Privacy Protection Act)
• GDPR (General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)

2. Information We Collect

2.1 Information You Provide

Parent/Admin Accounts:

• Email address
• Name
• Password (hashed and encrypted)
• Family information
• Payment information (if applicable)

Child Accounts:

• Name
• Age/Date of birth (for COPPA compliance)
• Parent consent information

2.2 Automatically Collected Information

• Watch history (videos viewed, duration)
• Device information
• IP address
• Browser type and version
• Usage patterns and preferences
• Error logs

2.3 Information from Third Parties

• YouTube account information (if connected via OAuth)
• YouTube playlist and channel data
• Google account information (if using Google sign-in)

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Authenticate users and manage accounts
• Generate watch reports and alerts
• Improve and personalize the Service
• Send notifications and communications
• Comply with legal obligations
• Protect against fraud and abuse

4. Children's Privacy (COPPA Compliance)

4.1 Special Protections for Children

WatchSafe is designed for families with children. We take special care to protect children's privacy:

• Parental Consent Required: We require verifiable parental consent before collecting information from children under 13
• Limited Data Collection: We collect only the minimum information necessary
• No Third-Party Sharing: We do not share children's information with third parties for marketing purposes
• Parental Access: Parents can review, modify, or delete their children's information at any time

5. Data Sharing and Disclosure

We do NOT sell your personal information. We may share information only:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and safety
• With service providers (under strict confidentiality agreements)

6. Data Security

We implement industry-standard security measures:

• Encryption of data in transit (SSL/TLS)
• Encryption of data at rest
• Secure password storage (bcrypt hashing)
• Regular security audits
• Secure storage in encrypted databases

However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your information:

• Active Accounts: While your account is active
• Deleted Accounts: 30 days after deletion (for recovery purposes)
• Legal Requirements: As required by law
• Watch History: As long as needed for reporting (parents can delete)

8. Your Rights and Choices

8.1 Access and Correction

You can:

• Access your personal information
• Correct inaccurate information
• Update your account settings

8.2 Deletion

You can:

• Delete your account — steps, data deleted/kept, and retention
• Delete your children's accounts
• Request deletion of specific data

8.3 Data Portability

You can:

• Export your data
• Request a copy of your information

9. Cookies and Tracking

We use:

• Essential cookies: Required for Service functionality (e.g. session, security)
• Optional marketing and analytics: Only if you accept via our cookie banner on public pages. This may include Meta (Facebook) Pixel and Google Analytics (GA4) to measure ads and site usage.
• ClickRank: A third-party SEO verification script may load on non-child pages; it does not run on child viewing routes.

We do not load optional marketing or analytics pixels on child-facing viewing experiences (/child/…). Parents can decline optional tracking via the banner or Privacy Choices.

We do not use behavioral ad networks beyond the optional tools above, and we do not sell personal information.

10. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information
• Right to access personal information
• Right to request deletion

Note: We do not sell personal information.

11. European Privacy Rights (GDPR)

Lawful bases: We process personal data to perform our contract with you (providing the Service), for legitimate interests (security, fraud prevention, product improvement where balanced with your rights), and where we rely on consent (for example, optional analytics/marketing when you opt in via the cookie banner).

If you are in the European Economic Area, you have:

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent

12. Changes to This Policy

We may update this Privacy Policy. We will:

• Post the updated policy on our website
• Update the "Last Updated" date
• Notify you of material changes via email

13. Contact Us

For privacy questions or to exercise your rights:

• Email: privacy@watchsafe.app
• COPPA Contact: coppa@watchsafe.app

14. Third-Party Services

WatchSafe integrates with:

• YouTube / Google: Video metadata, OAuth, and API usage — subject to Google's policies
• Payment processors: e.g. NMI / AlignPay and related card processing — for subscriptions and purchases
• Email providers: Transactional and product email delivery
• Hosting and database: e.g. Fly.io, Neon — infrastructure for the Service
• Optional analytics: Meta and Google when you opt in via our cookie banner

We are not responsible for third-party privacy practices.