Consent to Personal Data Processing
Revision date: May 19, 2026
Consent version: pd-consent-2026-05-13
1. What this document is
This consent explains what personal data a user provides to BlaTube and what processing the user agrees to when registering, signing in with Google or VK, creating or joining a room as a guest, using chat, calls, profile features and related service functions.
This consent is separate from the Privacy Policy, Terms of Use and Cookie Policy. Those documents remain available here: Privacy Policy, Terms of Use, Cookie Policy.
By ticking the consent checkbox, continuing registration or signing in through the selected OAuth provider, the user confirms that the consent is given freely and intentionally. For guest scenarios, necessary technical data is processed only to the extent required to create rooms, maintain sync, chat, calls and service security.
2. Personal data operator
Personal data operator: the individual operating the BlaTube service. Contact for data subject requests: admin@blatube.com.
If additional operator details are required to respond to a user request or comply with applicable law, they may be provided to the user or competent authority through the contact above to the extent required by law.
3. Purposes of processing
The user consents to personal data processing for the following purposes:
- creating and maintaining an account or guest session;
- signing in with email/password, Google or VK;
- creating, restoring and joining shared viewing rooms;
- synchronizing external video playback between room participants;
- operating chat, participant lists, master/viewer roles and invites;
- operating voice and video calls, including technical WebRTC/signaling exchange, LiveKit track recording and call recording storage for compliance, security and audit;
- saving and updating profile, nickname, display name, name color and avatar;
- security, anti-spam, abuse prevention, rate limiting and error diagnostics;
- user support and responses to requests;
- sending service emails if the user uses email features;
- product analytics and BlaTube improvement, including cookies and Yandex Metrika under the cookie notice banner;
- legal compliance and protection of the operator, users and third parties.
4. Data that may be processed
- email address if the user registers or uses email features;
- nickname, display name, handle, name color, avatar or avatar URL;
- password hash if email/password sign-in is used;
- OAuth provider, provider id and basic profile data received from Google or VK when the user chooses that sign-in method;
- guest token, session id, auth/API token and related technical identifiers;
- IP address, user-agent, technical logs, security and diagnostic events;
- room data: room slug/code, user role, participant list, activity time, selected or latest video;
- external video metadata: platform, external id, title, thumbnail and source URL when needed for room operation;
- chat messages and technical room events;
- WebRTC/signaling metadata, LiveKit track metadata and audio/video call recordings when the call feature is used in a room;
- cookies, localStorage, language, theme and cookie/analytics preferences;
- analytics events such as page views, room creation, video actions, errors, clicks and similar events if analytics is allowed by the user.
BlaTube does not request passport data, payment data, special categories of personal data or biometric data. If a user sends such information in chat, name, avatar or support requests, the user does so on their own initiative and BlaTube may delete or restrict that content.
5. Processing actions
The user consents to collection, recording, systematization, accumulation, storage, clarification, updating, modification, retrieval, use, transfer or access provision within the service and its infrastructure, pseudonymization or aggregation of technical events where needed, blocking, deletion and destruction of personal data.
Processing may be automated or non-automated and may use databases, Redis, server logs, browser localStorage/cookies and infrastructure services.
6. Consent term and retention
This consent is valid from the moment it is given until the user withdraws it or until the relevant processing ends, unless longer processing is required by law, security, dispute resolution or protection of rights.
- registered account data is stored while the account exists, until user deletion or service termination, with limited retention in logs and security records;
- guest accounts are stored until deleted by the user or automatically deleted after 90 days without activity;
- active room state, participants, recent chat, calls and synchronization are stored in temporary Redis and deleted after the inactivity period configured in the infrastructure;
- lightweight room and selected video records in the database are used only to restore a room after Redis expiry and are deleted after 7 days without updates;
- chat is not stored in the database as permanent room content;
- audio/video call recordings are stored in the protected RTC archive for up to 183 days, used only for compliance, security, dispute resolution and access audit, and archive access is logged;
- analytics/cookie events are stored according to BlaTube rules, relevant analytics service retention periods and the user’s browser settings.
7. Analytics
We may process technical and product events to operate the service, prevent abuse, understand feature usage, and improve BlaTube.
Yandex Metrika is used under a notice-only cookie pattern and may start on the first site visit. Internal product analytics may be used for aggregated and technical product events if that processing is described in the Privacy Policy and Cookie Policy.
8. OAuth providers
If the user chooses to sign in with Google or VK, the user is redirected to the selected OAuth provider and confirms sign-in with that provider. BlaTube receives from the selected provider only the data needed to sign in or create an account: account identifier, name or nickname, avatar and other data shown on the provider authorization screen. Google and VK are used only as BlaTube sign-in providers.
9. Transfers and third-party services
Data may be transferred to or made available to a limited set of providers necessary to operate BlaTube: hosting and infrastructure providers, email service provider, OAuth providers selected by the user, Yandex Metrica/Webvisor when analytics consent is granted, and internal product analytics if implemented and described. External video platforms process data when the user selects and starts their player; BlaTube does not transfer its account or profile database to them for independent marketing.
BlaTube is not a video hosting service and does not copy external videos to its servers. External video platforms operate under their own rules and privacy policies.
BlaTube does not transfer its account and profile database to foreign analytics or marketing services. When a user selects Google/VK OAuth or starts an external video player, the user’s browser may interact directly with the selected external platform, and that platform processes data under its own rules. If BlaTube starts a direct cross-border transfer of personal data as an operator, the documents and regulator notices will be updated before that processing starts.
10. Withdrawal of consent
The user may withdraw consent by deleting the account or guest session if that function is available, contacting admin@blatube.com with enough data to identify the request, or limiting cookies and analytics in browser settings.
Withdrawal does not affect processing that happened before withdrawal. After withdrawal, BlaTube may continue limited processing if required by law, security, contract performance, protection of rights or handling an already started user request.
11. User rights
The user may request access to their data, correction, deletion, restriction of processing, information about processing, as well as object to processing or withdraw consent. Requests should be sent to admin@blatube.com.
If the user does not consent to necessary data processing, BlaTube will not be able to provide account, guest session, room, chat, call or other functions where such data is technically required.
First-party aggregate visit analytics
For service operation, load assessment and SEO reporting, BlaTube may process minimal technical data about a public page visit to create a daily visitor HMAC key and aggregate daily visitors/pageviews counters. Raw IP, User-Agent and referrer are not stored in this analytics, and daily HMAC keys are deleted under the retention policy.
Cookies and analytics within this consent
As part of personal data processing, BlaTube may use cookies, localStorage, server logs, internal product analytics and Yandex Metrika for service operation, security, traffic analysis and product improvement. The user can limit cookies in browser settings.