ViewTalkCreate a roomInformation in your browser
The language preference is saved in localStorage. A random participant ID, nickname, avatar color and profile-confirmation flag are stored in sessionStorage separately for each room. The creator's authorization token is also kept in that tab. A room password submitted to join is held in page memory for reconnection, not intentionally saved in browser storage.
Room profiles and creator tokens survive a reload in the same tab. Closing the tab normally ends that session, but browser session restoration may restore them. Clear this site's data to remove browser copies; an old global profile from earlier releases may remain until you clear it.
Realtime processing and deletion
Browsers send messages and playback commands over HTTPS/WSS to Cloudflare Workers and a room-specific Durable Object. The service processes participant IDs, names, colors and join order, video IDs and titles, playback timestamps, queue entries, permissions, password salt/hash and a creator-token verification hash. This is not end-to-end encrypted messaging: the service processes the messages and other participants receive them.
At most 30 recent chat messages are retained in the room's SQLite storage. The queue holds up to 50 entries. Video titles and validation timestamps are cached for reuse for up to 24 hours; the cache and all room storage are deleted when an empty room expires. The scheduled grace period is 30 seconds after a detected departure with no participants left; disconnect detection or runtime scheduling may delay deletion. Never-joined rooms expire after at least five minutes.
There is no account history, chat backup or individual-message deletion interface. Leaving alone does not remove data while other participants remain. Participants may keep their own copies. Contact the operator about privacy concerns; expired room data cannot be recovered by the application.
YouTube and external content
Each browser loads the official IFrame Player API and a youtube-nocookie.com player when a room has a video. YouTube/Google receive network and playback information and may use cookies or similar storage, including after playback starts. Privacy-enhanced embedding does not mean no data reaches Google. YouTube may display its own advertising.
The Worker sends the video ID to Google's YouTube Data API v3 using a server-side key to retrieve the title, embedding permission and made-for-kids status. Successful validation can be reused from the room cache for up to 24 hours; it is not a fresh Google request on every selection. The server key is not sent to participants' browsers. ViewTalk does not request a Google sign-in, access your YouTube account or download video/audio files. See Google's Privacy Policy and YouTube's Terms below.
Infrastructure, analytics and advertising
Cloudflare receives IP addresses and request metadata to serve the site, maintain WebSockets and limit abusive requests. The deployed site may include Cloudflare security checks. Infrastructure data retention is controlled by Cloudflare's applicable policies and settings, not the room's 30-second timer.
ViewTalk has no Google Analytics, independent analytics beacon, session recording or AdSense ad loader in its application code. Worker observability logging is disabled in the deployment configuration. The application does not intentionally log chat text or passwords. Cloudflare may still process operational/security data. The AdSense ownership meta tag and ads.txt record identify the publisher but do not load advertisements.
Cloudflare Web Analytics/RUM measures visits and loading performance on public pages. It may process page addresses, referrers, browser/device information and timing measurements; Cloudflare states it uses no cookies or local storage for this analytics service. Private room and error documents block the beacon script and request no HTML transformation. Entering a room loads a new document with that stricter policy. ViewTalk does not send chat, passwords, participant profiles or video choices to this analytics service. Cloudflare's delivery/security logs and network-error reports (NEL) are separate; their processing and retention follow Cloudflare's settings and policy, not the room-deletion timer.
Contact and changes
For privacy, deletion or security questions, email the operator using Contact. An email report is handled through Gmail and is separate from ephemeral room data; do not include passwords, creator tokens or other people's private chats. ViewTalk does not control the mailbox's retention or deletion; ask the operator about retention or to delete correspondence. This policy will be updated when actual processing changes.