Privacy Policy

Account and profile

When you create a profile we store your account id, email address, handle, display name, bio, and avatar if you add one. We also store the time you confirmed you are 18 or older and the time and version of the Terms you accepted. We do not collect your date of birth.

Sign-in

You can sign in with email and a password, or with Google. Passwords are handled by our auth provider; Popcast does not keep a copy it can read. If you use Google, Google authenticates you and we receive the identity Google shares for that sign-in, including your email. We never receive your Google password. Confirmation and password-reset emails are sent from accounts@popcast.cc.

Livestreams

If you host or watch a livestream, we store the stream's Popcast record (title, category, public or members-only, and whether it is live or ended). Live audio and video are transmitted by our video provider using an opaque Popcast id, not your email. Streams are not recorded, and there are no replays.

Chat, posts, and photo drops

Chat messages, posts, and photo drops you create are stored so they can be shown to people allowed to see them. Private photo drops are shown to that creator's fan club through short-lived links.

Follows, Request Live, and Activity

We store who you follow, live requests you send or receive, and in-app Activity notices. Open live requests last about 24 hours. Activity notices are deleted after about 90 days.

Fan clubs and payments

Fan clubs are billed by Stripe at $10 per month per creator. Popcast stores Stripe customer and subscription ids, status, the amount, whether a cancellation is scheduled, the period you have access through, and the version of the billing terms shown when you joined. Popcast does not store your card number. Stripe stores the payment method.

Reports and moderation

If you report something, or something of yours is reported, we store the report and how it was handled. Staff actions such as stopping a stream are written to an audit log. Room mutes and bans are stored with the stream.

Sessions and logs

A sign-in keeps a session cookie so you stay signed in. Popcast does not keep a separate device-history profile. The companies that host the site, the database, and auth keep ordinary operational logs of requests, which can include IP address, time, and browser, to run and protect the service.

Who processes this

• Supabase stores accounts, the database, and photos.
• Vercel hosts the website.
• GetStream carries live audio and video.
• Stripe processes fan-club payments.
• Google signs you in if you choose Continue with Google.
• ZeptoMail (Zoho) delivers confirmation and password-reset email.

Deletion

You can delete your account in Settings. That removes your profile, posts, follows, and live requests, and deletes the auth user after billing and the live stream are closed. Chat messages can remain in their streams labeled [deleted]. Reports, moderation records, ended streams without the host, the audit log, and Stripe's billing history can remain in anonymized or limited form. The video provider's user, which is an opaque Popcast id, is not deleted.