Your night. Your privacy.

Your conversations

Chat, GIFs, reactions, drawings and shared game boards pass through our server so people in your session can receive them. They stay in the active room’s memory, not in a permanent chat archive or your Wrapped history.

Chats are not end-to-end encrypted: our server processes them. People in the session can save what they see. New arrivals do not receive messages sent before they joined.

Your camera and microphone start off. Turn them on only when you want to. We don’t record calls, create transcripts or track speaking time.

Your recap, only if you want it

Recap saving is off until you choose it. If you opt in, we save shows and games, results, time together and consenting co-participants, linked to your account. This is for your own recap, not a public profile or advertising.

In Account → Two Seats Wrapped, turn off Save recap history to stop new saving. Delete saved history removes your saved recap records and turns saving off. Turning the switch off alone keeps records already saved.

Other people’s own records remain theirs. Choosing no recap does not stop the temporary processing needed to run your session, manage your account or diagnose technical problems.

What makes Two Seats work

• Your account

  We keep your email, display name, profile preferences, sign-in and membership information. Google sign-in shares your basic profile and verified email; it does not give us access to your Gmail, Drive, contacts or calendar. Your browser stores sign-in, reconnection and interface preferences.

• Watching and playing

  Selected show titles, episode IDs and URLs, playback position, ads and buffering help your screens stay together. Shared games use submitted guesses and results visible on the game page. We don’t read hidden answers, game account data, streaming passwords or general browsing history.

• Invitations

  A shared link can include the show title for its preview; messaging services can receive and cache that title. A person opening the link may see who is in the session before signing in. The link is for that session only.

• Bug reports

  Limited technical events—such as playback errors, connection timing, provider and extension version—help us find problems. These reports exclude chat text, call media, passwords, invitation secrets, show titles and show URLs. They are separate from recap history.

• Basic website counts

  To improve our public website, we count visits to the home and about pages, grouped by day and a broad source such as search or Instagram. These counters do not contain visitor IDs, names, emails, IP addresses, full URLs or individual browsing histories. They are not linked to accounts, chats, calls, rooms, recap history or advertising profiles, and are not sent to Google.

  These counts work without analytics cookies. Use Cookie choices → No thanks to stop new counts. We also respect previous analytics refusals, Global Privacy Control and Do Not Track. Normal network information still reaches our hosting providers to deliver requests. Counts are page visits, not a list or exact count of people.

• Optional analytics

  Only if you allow analytics, Google Analytics measures visits to public home/about pages and setup-button clicks. It receives a cookie identifier and technical device/network information. There is no Google Analytics in the extension, automatic form/search tracking or advertising personalization.

  With the same choice, Two Seats records setup milestones on the website and in Chrome: opening the Store, detecting the extension, signing in, opening a room, copying or sharing an invitation, another person joining and the player becoming ready. We record success or failure, an app version, a broad browser/device category and a rough time bucket.

  A random setup ID connects these steps for up to 24 hours in this browser session. It is not linked to your account, email, room or invitation. These reports contain no chats, recordings, show titles, browsing URLs or raw error text. Normal network information still reaches our hosting providers. Existing visitors are asked again before this additional setup measurement starts.

Services we use

• Keeping you connected

  Render hosts the app and room server. Supabase handles sign-in and our database. LiveKit carries calls. They receive what is needed for these functions, including normal network information such as IP addresses.

• GIFs and effects

  GIPHY receives your search terms, GIF requests and normal network/device information. Opening GIFs during a show searches using its title. Optional DeepAR effects process camera frames in your browser; filtered video travels through LiveKit. DeepAR receives license and SDK usage information. We don’t save face tracking data.

• Other sites

  Google Analytics handles optional website analytics. Streaming and game sites handle their own accounts and activity under their own policies. Two Seats does not provide streaming access or bypass ads or DRM.

We use this information to provide the service, maintain your account, save the recap you choose and improve reliability. Information received from Google APIs is used in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements.

How long we keep it

Chat and shared room content

In active-room memory until the session ends or the server restarts. Typing indicators expire shortly after activity stops.

Recap history

Up to 730 days, with daily cleanup, or until you delete it. Saved records can include speaking-time and message/reaction totals collected before these measurements were stopped. Delete saved history removes these too.

Technical bug reports

Up to 15 minutes in the live buffer. Saved reports are eligible for deletion after 14 days, with hourly cleanup. Outages can delay cleanup.

Account and preferences

While your account is active, until deletion is requested and completed. Browser preferences remain until cleared or replaced.

Session recovery

Active checkpoints keep your seat and selected activity, without chat. Ended membership and invitations clear after one day; non-secret session IDs can remain for 730 days. Request deduplication records last 30 days.

Setup analytics

Random-ID setup records are eligible for deletion after 30 days, with hourly cleanup. Daily totals without setup IDs are kept for two years. Your extension setup choice expires within 24 hours and is cleared when you decline analytics on the website while Chrome is connected.

Basic website counts

Daily totals are kept for up to two years, with daily cleanup. We do not keep individual visit records for these totals.

Website analytics

Analytics cookies and your choice last up to 180 days. Google retains user/event data for two months; aggregate reports may remain longer.

Hosting logs, provider backups and other participants’ copies can have different retention periods. Deletion from the app does not mean immediate removal from provider backups.

You stay in control

• Recap: change saving or delete history in Account → Two Seats Wrapped.
• Analytics: use Cookie choices. Declining stops new basic visit counts and optional analytics, and removes our analytics cookies and connected extension’s setup ID. It does not erase reports already collected. Setup analytics is separate from Wrapped history. We respect Global Privacy Control and Do Not Track.
• Your session: turn devices on or off yourself. Use Leave session to disconnect; collapsing the sidebar keeps the session open.
• Shared games: stop sharing your board or sit out in Game options.

For a copy, correction or deletion of your account data, contact support@ourtwoseats.com. We may verify your identity. Other people’s records and necessary security records may limit what can be removed.

We update this page when our practices change and explain material new collection before enabling it.