Rowhouse

Privacy ยท updated 2026-10-08

We listen for ten seconds. We keep none of it.

Rowhouse needs your microphone to find your place in a film, and an account if you want to chat, follow creators, or publish commentary. This page lists everything we store, why, and who else touches it. No ads, no tracking pixels, no selling data.

01. Your microphone

Audio never leaves your device.

When you sync, the browser captures about ten seconds of room audio. It's turned into a fingerprint, a set of hashes of spectral peaks, right there on your device, matched against the film's map, and discarded. We don't record it, upload it, or store it. That rule is enforced in the code and guarded by an automated test in the open-source sync engine.

02. Your account

The minimum to know it's you.

You can browse and listen without signing in. If you sign in with Google, we store your email address, display name, profile picture URL, a public handle, and the Google account ID that links them. A sign-in session is a random token kept in an HttpOnly cookie for up to 30 days; we store only a hash of it. Two short-lived cookies protect the sign-in handshake and expire after ten minutes.

03. What you do here

The things you choose to share.

We store the creators you follow, watchlist votes, reports you file, and, if you're a creator, your bio, the commentary audio you upload, and the fingerprint maps built from it. Live chat messages are stored with your display name so late arrivals can scroll back; each room keeps only its most recent 500. Reactions are stored as anonymous timestamps on the track. If you turn on notifications, we keep your browser's push subscription so we can tell you when a creator goes live.

04. Who else is involved

A short list of processors.

Rowhouse runs on Cloudflare, which hosts the site, database, and audio storage and processes standard request data such as IP addresses to serve and protect it. Google handles sign-in. Film posters load from TMDB's image servers, so your browser contacts them directly. Push notifications are delivered by your browser vendor's push service. We don't use analytics or advertising services.

05. Your choices

Ask, and it's gone.

You can sign out at any time, which deletes your session. To get a copy of your data or have your account and everything attached to it deleted, reach us through the contact page. Rowhouse isn't directed at children under 13. If this policy changes, we'll update the date at the top of this page.