Privacy Policy

Lobby is the Windows app and this site, lobby-voice.online. The data controller is [OWNER NAME], Tallinn, Estonia. [ПРОВЕРИТЬ: полное имя или название, адрес и регистрационный код владельца]

Questions about your data: [email protected].

• Email and password. Used to log in and to send you codes. The password is stored only as a hash by Supabase Auth; we cannot read it.
• Nickname. Visible to your friends, to people you exchanged a friend request with and to members of chats you share.
• Date of birth. Used only to check that you are 13 or older. Only you can see it; friends never do.
• Friends and friend requests. Visible only to the two people involved.
• Chats and messages. Direct messages and group chats (up to 12 people) are kept on the server so that your history is there on every computer. Only members of a chat can read it. Messages are stored in readable form; they are not end-to-end encrypted.
• Calls and notices. Who called which chat and when, whether the call was answered or missed, and notices such as a friend request or a missed call.
• Status. The status you choose (online, away, do not disturb, invisible) and your own status message of up to 60 characters.
• Login protection. A failed login by nickname is logged with the IP address for one hour, to stop password guessing. Requests for call tokens are counted for one hour for the same reason.

• Online and activity. While the app is running, your friends see that you are online and what you are doing: in a call, playing a game, listening to music in Lobby. This is sent live and is not written to the database; close the app and it is gone.
• "Playing…". To recognise a game, the app looks at the names of running programs on your PC every 15 seconds and compares them with a list built into the app. The list of your programs never leaves your computer; friends see only the name of the game. You can turn this off in Settings ("Show what I am playing").
• Voice, video and screen sharing. They pass through our call server live and are not recorded or stored.

You can join a call by a link without an account. A guest gets a temporary anonymous session; the nickname you type lives only in that call. A guest has no profile, friends or chats.

• No advertising and no analytics or tracking scripts, and no cookies of our own.
• Your browser keeps two small things on your device: whether you paused animations, and the latest version details until you close the tab.
• The download and news pages ask GitHub for the latest version straight from your browser, so GitHub sees your IP address.
• Bug reports. A report sent by email goes through your mail provider and ours. When the form on the site sends reports itself, we keep the kind of problem, the app version, your description, the reply email if you gave one, the screenshot if you attached one and your browser name; your IP address is kept only as an irreversible hash, to limit how many reports one address can send. [ПРОВЕРИТЬ: срок хранения отчётов и скриншотов, например 12 месяцев]
• Account page. If you log in on the site, the browser keeps your login session on your device until you log out.

• Supabase — accounts, database, live updates and server functions. [ПРОВЕРИТЬ: регион проекта Supabase и наличие договора об обработке данных (DPA)]
• HexCore — our call server in Tallinn, Estonia. Voice, video and screen sharing pass through it; it sees your IP address during a call.
• Cloudflare — hosting of this site and mail for our address.
• GitHub — the installer and automatic updates of the app.
• Audius — music search and streaming. The app connects to Audius from your computer, so Audius sees your IP address and what you search for and play.
• Brevo — sends our emails: confirmation codes and bug report notices. [ПРОВЕРИТЬ: оставить этот пункт только после подключения Brevo]

Some of these companies are based outside the European Union. [ПРОВЕРИТЬ: основание передачи данных за пределы ЕС: стандартные договорные условия у Supabase, Cloudflare, GitHub, Brevo; статус Audius]

• To provide Lobby to you (contract): account, friends, messages, calls.
• Our legitimate interest in keeping Lobby safe and working: login protection, limits, bug reports.

Lobby is for people aged 13 and older. [ПРОВЕРИТЬ: пользователи из стран ЕС, где возраст самостоятельного согласия выше 13 лет]

• Account data, friends, chats and messages: until you delete your account.
• Failed login log and call token counter: one hour.
• Online status and activity: not kept.

[ПРОВЕРИТЬ: резервные копии базы в Supabase: есть ли и сколько хранятся]

Under the GDPR you can ask us for a copy of your data, ask to correct or delete it, ask to limit or object to its use, and take your data with you. Write to [email protected] from the email of your account; we answer within one month.

If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Write to [email protected] from the email of your account, or use the Account page on this site once it is open. [ПРОВЕРИТЬ: срок, за который удаляется аккаунт по письму, например 30 дней]

Deleted together with the account: your profile (nickname, date of birth, status), friends and requests, your membership in chats, your own messages, call records and notices. Messages that other people wrote stay in their chats. [ПРОВЕРИТЬ: удаление своих сообщений заложено в SQL-функции сайта; подтвердить, что так и нужно]

When this policy changes, we update the date at the top and write about important changes in News.