Cookie policy
Only what the service needs.
playbakk does not use advertising, analytics or social-media cookies, and it does not track you across other sites. This policy lists everything the website and the app store on your device, and why.
In short
- The public website (playbakk.com) sets no cookies and stores nothing on your device.
- The app uses first-party sign-in and security cookies of its own. Google, Apple, Microsoft and WeChat set their own cookies on their own sites when you sign in there, not on playbakk.
- The contact form sets no cookies. If its optional anti-spam check (Cloudflare Turnstile) is switched on, it runs in a frame from challenges.cloudflare.com on the contact pages only.
- Your recordings are kept in your browser’s own storage on your device, not on our servers.
- Because everything listed is strictly necessary for a service you ask for, we do not show a cookie banner. If we ever add optional cookies, we will ask first. [Requires counsel review: confirm the strictly-necessary exemption under PECR and the ePrivacy Directive for each item below]
Cookies
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
__Host-playbakk-session | playbakk (first party) | Keeps you signed in and records whether this browser has completed your second step (passkey or authenticator). It holds a random token; our server stores only a hash of it, so the cookie alone cannot be reversed. HTTP-only (scripts cannot read it), sent only over HTTPS, and not sent with requests that other sites start in the background (SameSite=Lax). | 15 minutes until the second step is done; then up to 30 days, ending after 7 days without use, or when you sign out, revoke the session or delete your account | Strictly necessary |
__Host-playbakk-webauthn | playbakk (first party) | Ties one passkey request to this browser so it can be used once. | 5 minutes | Strictly necessary |
__Host-playbakk-email | playbakk (first party) | Ties an email sign-in to the browser that asked for it, so the link in the email signs in only this browser. | 10 minutes | Strictly necessary |
__Host-playbakk-flow | playbakk (first party) | Ties a sign-in with Google, Apple, Microsoft or WeChat to this browser while you are on the provider’s page, so a sign-in started elsewhere cannot be completed here. It holds a random value; the sign-in state itself stays on our server. Sent only over HTTPS; for Apple, which returns with a cross-site form, it is SameSite=None. | 10 minutes, deleted when the sign-in completes | Strictly necessary |
| ChatGPT sign-in cookies | ChatGPT sign-in provider | Only for accounts created earlier with ChatGPT, while they move to another sign-in method. Their names and lifetimes are controlled by the provider, and its own privacy terms apply. | Set by the provider | Strictly necessary |
Storage on your device
Browsers offer storage besides cookies. The app uses it so your media never has to leave your computer.
| What | Technology | Purpose | How long |
|---|---|---|---|
| Your local workspace | IndexedDB, one database per signed-in account | Holds your recordings, clips, edits, captions, markers and recovery chunks written while you record, so an interrupted recording can be recovered. The app also asks the browser to keep this storage persistent so it is less likely to be cleared automatically. | Until you delete the item, delete your account from this browser or clear site data. Browsers can still evict it — download anything you need to keep. |
| Your caption and branding style | localStorage | Saved only when you press “Remember my style”: layout, caption style and position, accent colour and creator name. Headlines are not saved. | Until you clear site data |
| Face-detection files | Browser cache | For auto-framing and call import, the app downloads a face-detection component that runs entirely on your device. Your browser may cache these files. No media is sent anywhere. See sub-processors. | Managed by your browser |
Portable archives (.playbakk files) and exported clips are ordinary files that you choose where to save. They are not browser storage and we cannot see them.
What we do not use
- No analytics or measurement tools, first or third party.
- No advertising, retargeting or social-media pixels.
- No fingerprinting.
- No open or click tracking in our emails.
Your choices
You can block or delete cookies and site data in your browser settings. If you block the sign-in or security cookies, you will not be able to sign in to the app. Clearing site data for the app will also delete the recordings stored in that browser, so export or download them first.
Questions about this policy: privacy@playbakk.com. More detail on how we handle personal data is in the privacy notice.
Changes
We will update this page before adding any new cookie or storage, and record the change in the changelog.
- — Added the sign-in cookies
__Host-playbakk-sessionand__Host-playbakk-flowfor the new sign-in methods; ChatGPT sign-in cookies now apply only to earlier accounts moving their sign-in; noted the optional anti-spam check on the contact form. - — First published.