Privacy Policy

This Privacy Policy explains what personal data BlaTube processes, why it is needed, how long it is kept and what rights users have. It applies to the BlaTube website, shared viewing rooms, guest and registered accounts, external video search and playback, chat, audio and video calls, browser storage, cookies and analytics.

1. Operator and contacts

The operator and administrator of BlaTube is an individual person located in the Russian Federation. For privacy requests, contact: admin@blatube.com.

The operator's full name and address for legally significant correspondence are provided upon a lawful request from the data subject, their representative or a competent authority sent to admin@blatube.com. The operator's home address is not published openly to protect privacy and personal safety.

2. Data we process

• Account and profile: email, nickname or display name, handle, name color, avatar_url or uploaded avatar, password hash, OAuth provider and provider_id, guest identity, API token, email verification events and account deletion events. BlaTube does not intentionally request users' legal full names.
• Sessions and security: IP address, user-agent, session identifiers, cookies, technical logs, rate-limit events, anti-spam data and suspected abuse signals.
• Rooms and viewing: room id or slug, room members, host/viewer role, room settings, current video metadata, video provider, video id, title, thumbnail, source and playback synchronization events.
• Chat and calls: chat messages, room system events, WebRTC signaling metadata and information about joining an audio or video call. Audio and video call data may be stored in the cases described below in “Communication data and service safety”.
• Device and browser: cookies, localStorage/sessionStorage, language, theme, guest/auth token, room state, interface preferences and technical identifiers.
• Analytics: technical and pseudonymous visit events, page views, referrer, clicks, browser and device parameters, errors and product events. BlaTube does not use Google Analytics/GA4. Yandex Metrica and Webvisor are enabled only after analytics consent, while the internal counter runs on BlaTube infrastructure.

3. Purposes and legal bases

• Account creation, login and guest access.
  Data: email, profile, password hash, OAuth, guest identity, token, session data.
  Legal basis: user terms, user consent and legitimate interest in secure service operation; for EU/UK - contract or legitimate interest where applicable.
• Rooms and synchronized viewing.
  Data: room membership, role, current video metadata, playback sync events.
  Legal basis: performance of user terms; legitimate interest in stable service operation.
• Chat and calls.
  Data: chat messages, WebRTC signaling metadata, connection events.
  Legal basis: performance of user terms; consent where required by law or browser settings.
• Security and anti-spam.
  Data: IP, user-agent, logs, rate-limit events, abuse signals.
  Legal basis: legitimate interest; legal obligation; protection of users and the service.
• Support and user requests.
  Data: email, request content, account and room data where needed to respond.
  Legal basis: responding to the user request; legal obligation; legitimate interest.
• Analytics and product improvement.
  Data: pseudonymous events, page views, clicks, referrer, device/browser data.
  Legal basis: consent where required; legitimate interest for basic technical analytics where applicable.
• Legal requirements.
  Data: data needed to respond to lawful requests or protect rights.
  Legal basis: legal obligation; protection of rights and legitimate interests.

4. External platforms

BlaTube does not host third-party videos and does not own external videos, movies, streams or channels. When you paste or start a video, the external player may contact its own platform and set its own cookies, localStorage or similar technologies. This may apply to YouTube, VK Video, Rutube, Twitch, Vimeo, Dailymotion, PeerTube, OK.ru Video, Dzen, Kodik and other supported sources. Their own privacy policies apply to their processing.

5. Providers and transfers

BlaTube may use Yandex as email provider, VPS/server providers, hosting/CDN, Redis or similar infrastructure, logging, monitoring, and Yandex Metrica/Webvisor only when analytics consent is granted. Google Analytics/GA4 is not used. Google/VK OAuth is used only when the user selects that sign-in method; BlaTube receives only the data needed to sign in or create an account from the selected provider.

For personal data of Russian citizens, BlaTube must consider Russian localization requirements for initial collection, recording, systematization, accumulation, storage, updating and retrieval where those requirements apply. BlaTube does not transfer its account and profile database to foreign analytics or marketing services. When a user selects Google/VK OAuth or starts an external video player, the user's browser may interact directly with the selected external platform, and that platform processes data under its own rules. If BlaTube starts a direct cross-border transfer of personal data as an operator, the documents and regulator notices will be updated before that processing starts.

6. Retention

• Registered account and profile: while the account exists; after deletion, for a limited period where needed for security, legal obligations, dispute handling.
• Guest identity and session/auth token: while needed for the guest session and room operation; exact cleanup depends on technical session settings.
• Room data: up to 24 hours after room end or inactivity; the actual period may be shorter.
• Chat messages: up to 24 hours; the actual period may be shorter. Longer retention is possible only if needed for security, moderation or a lawful request.
• Current/last room video metadata: only the last video of the room is stored; it is cleared within 24 hours after room end or inactivity, and the actual period may be shorter.
• WebRTC signaling metadata: temporarily, while needed to establish and maintain the connection.
• Technical logs and security: for a limited period needed for diagnostics, security, anti-spam and incident investigation.
• Technical copies: as of this policy update, BlaTube does not declare a separate permanent backup cycle; if backup procedures are introduced, retention terms will be reflected in this policy.
• Analytics: according to consent settings, Yandex Metrica/Webvisor and internal analytics settings where used.

7. User rights

You may request access, correction, account deletion, restriction, withdrawal of consent, objection and information about data transfers. Users in the EEA and the UK may have additional GDPR/UK GDPR rights, including portability and the right to complain to a supervisory authority. Rights of users in other regions apply where mandatory local law requires them.

To make a request, contact admin@blatube.com. To protect data, BlaTube may ask you to verify your account, email or other information showing that the request is made by the data owner.

8. Children

BlaTube is not directed to children. The recommended minimum age is 16+. Users under 16 may use the service only with parent or legal representative consent where applicable law requires such consent.

9. Security

BlaTube uses technical and organizational measures such as HTTPS, access controls, password hashing, tokens, rate limiting, monitoring and technical event logging. No online service can guarantee absolute security, but BlaTube limits processing to data needed to operate the service, protect it and meet obligations.

10. Changes

This policy may be updated when the product, law, analytics, external platforms or providers change. Last updated: May 19, 2026.

The standalone personal data consent is available on the Consent to Personal Data Processing page.

Internal first-party visit statistics

BlaTube may use a minimal internal counter for daily visitors and pageviews without sending data to Yandex Metrika, GA4 or other external analytics systems. The counter is used for aggregated product, operational and SEO analytics.

To estimate a unique visitor, the server briefly processes the IP address, User-Agent, date and a server-side salt to produce a daily HMAC key. Raw IP, raw User-Agent, raw referrer, room slug, video URL, email, nickname and message text are not stored in this counter. Daily HMAC keys are retained for a limited period; long-term storage keeps only aggregates by date, locale, safe path group and source group.

Cookie notice and Yandex Metrika

BlaTube uses cookies and analytics services, including Yandex Metrika and Webvisor, to improve the site, analyze traffic, detect technical issues and develop the product. Metrika may start on the first site visit before the user clicks “Got it” in the notice.

The user can limit or delete cookies in browser settings. Some features, including sign-in, language, theme, rooms, chat and playback synchronization, may work less reliably without necessary cookies and localStorage.

Communication data and service safety

When rooms are used, BlaTube may process and store communication data: chat messages, audio and video call data, call recordings, and technical room and call events.

This storage is used for service safety, technical incident investigation, dispute resolution, access audit and compliance with applicable Russian legal requirements.

The legal basis for such storage may include applicable Russian law, including Article 10.1 of Federal Law No. 149-FZ “On Information, Information Technologies and Information Protection” and applicable secondary acts, if those requirements apply to the service.

The retention period is determined by BlaTube policy and applicable legal requirements. Access to such data is restricted by internal procedures, granted only to authorized persons with a valid basis, and logged.