VideoBro Privacy Policy

This Privacy Policy describes how VideoBro ("we", "our", or "the App") collects, uses, and shares information when you use the VideoBro iOS application, our website at watchvideobro.com, and related services. We try to keep this short and concrete. If anything below is unclear, email us — we will answer.

1. Who we are

VideoBro is operated by Storming The Castle LLC. The contact for privacy matters is support@watchvideobro.com.

2. Information we collect

2.1 Information you provide

• Account information: email address, username, password (stored only as a bcrypt hash), and optional profile photo.
• Apple Sign-In: if you sign in with Apple, we receive a stable Apple identifier (sub) and your email (which may be Apple's relay address).
• Google Sign-In: if you sign in with Google, we receive a stable Google identifier (sub), your email address (only when Google reports it as verified), and your profile name, which we use only to suggest a username. We do not receive your Google password and do not access anything else in your Google account.
• Age confirmation: a self-attested statement that you are at least 13 years old.
• User-generated content: the video clips you record, tape titles, and the names of collaborators you invite.

2.2 Information collected automatically

• Device identifiers: Apple's identifierForVendor UUID, used for guest-mode continuity and abuse detection. VideoBro does not currently offer a free trial, so this identifier is not used for trial-eligibility purposes.
• Push notification tokens: APNs tokens, used only to deliver notifications you have opted into.
• Infrastructure request logs: IP address, timestamp, request path, and the user ID making the request. These are generated by our hosting providers (Render and Fly.io) as part of running the Service, and are retained under those providers' own operational log schedules rather than a fixed window VideoBro sets directly.
• Product analytics events: coarse-grained events such as upload, develop, share, how a film you open plays, and the steps of signing in, used to understand product usage. Server-side usage events are kept for up to 180 days; app and website usage events for up to 400 days.
• Install analytics: a random identifier the app creates the first time it opens, kept only on your device and deleted with the app. We store only a one-way hash of it, never linked to your account, to count how many first opens of the app reach the sign-in screen and sign in. Kept for up to 400 days.

2.3 Information we do not collect

• The VideoBro iOS app contains no third-party advertising, analytics, or attribution SDKs (no Facebook SDK, no Google Analytics for Firebase, no AppsFlyer, no Branch). Our website uses Google Analytics and the Reddit pixel for some visitors, as described in Sections 2.4 and 2.5.
• We do not sell your personal information.
• The VideoBro iOS app does not perform cross-app or cross-website tracking. NSPrivacyTracking is set to false in our iOS Privacy Manifest. On our website, the Reddit pixel described in Section 2.5 tells Reddit about your visit so we can measure our ads on Reddit; nothing else on the website or in the app does that.

2.4 Our website

When you visit watchvideobro.com, two things record that visit:

• Our own visit count: the page you viewed (as a pattern, never a share or invite link's token), the site that referred you (its address without any query string), campaign tags in the link you followed (for an ad's click identifier, only its name, never its value), your country (from our network provider), a rough device type and operating system, your browser's language and window size, and a one-way hash of your IP address and browser, made with a key that changes every day, so your hash is different from one day to the next. It does not store your IP address itself and sets no cookie. Kept for up to 400 days.
• Google Analytics, if you are in the United States, or anywhere else only after you choose Allow on our cookie banner: Google Analytics 4 sets first-party cookies (_ga and _ga_*, kept for up to 13 months) and receives the pages you view, how long you stay and how far you scroll, links you click, the referring site, campaign tags, and your approximate location and device as Google derives them. Google processes this to provide analytics services to us. We keep Google Analytics data for 14 months, we turn off Google signals and every advertising feature, and we never use it for advertising or to track you on other websites. Google Analytics never loads on share links, invite links, password-reset links, sign-in, or your Cabinet, and never inside the iOS app.

When you create an account, we note whether you signed up in the app or on the website, and for the website, the referring site and campaign tags of that visit. That note is kept with your account and deleted with it.

Your choice outside the United States: Google Analytics does not load until you choose Allow, and nothing is sent to Google before then. We remember your answer for six months in a cookie named vb_consent, which holds only that answer. You can change it at any time with Cookie settings at the bottom of every page; choosing No thanks stops Google Analytics and deletes its cookies.

Wherever you are, Google Analytics does not load if your browser sends a Global Privacy Control signal. You can also block it with Google's opt-out add-on (tools.google.com/dlpage/gaoptout) or any content blocker; the site works the same either way.

2.5 Measuring our ads on Reddit

We advertise VideoBro on Reddit. To see which of those ads bring people to our website, the website uses the Reddit pixel, a small piece of code from Reddit, Inc. It is separate from Google Analytics, and you can say yes to one and no to the other.

• Who it runs for: visitors in the United States, unless they turn it off (below), and visitors anywhere else only after they choose to allow it on our cookie banner.
• What Reddit receives: that you viewed a page on our website, that page's address and title (including any campaign tags and the click identifier Reddit adds to its own ad links), your IP address, browser and screen size as your browser sends them, and an identifier kept in first-party cookies on your device (_rdt_uuid, and _rdt_cid when you arrive from a Reddit ad), each kept for up to 90 days. Reddit uses this to tell us how our ads perform, may connect it with your Reddit account if you have one, and may use it to show you ads, under Reddit's own privacy policy.
• What we never give Reddit: your email address, phone number, name, account details, or any advertising identifier from your phone. We do not use Reddit's "advanced matching".
• Where it never runs: share links, invite links, password-reset links, sign-in, your Cabinet, and the iOS app.

Your choice: outside the United States, the Reddit pixel does not load until you choose to allow it, and nothing is sent to Reddit before then. In the United States, it runs unless you turn it off. Wherever you are, you can change your answer at any time with Cookie settings at the bottom of every page; we remember it for six months in a cookie named vb_consent_ads, which holds only that answer, and turning the Reddit pixel off deletes its cookies on our website. The Reddit pixel does not load if your browser sends a Global Privacy Control signal, and any content blocker stops it; the site works the same either way.

3. How we use your information

4. Sub-processors and third parties

We share data with the following sub-processors, each only for the operational purpose stated:

Each provider operates under their own privacy policy and data-processing agreement, and may independently retain certain operational data (such as infrastructure logs) for its own security and reliability purposes, under its own retention schedule — not one VideoBro sets or controls. For most of these providers that's a short operational window. Two are materially longer, because they're required to keep financial records, not just logs: Apple retains App Store purchase and subscription records under its own financial-reporting obligations (Apple's policy states at least 10 years for most customers), and RevenueCat retains subscriber and subscription-event data for as long as your account is active, plus 6 years afterward, for its own legal and audit purposes. Deleting your VideoBro account does not reach those records — they belong to Apple and RevenueCat as the parties to your purchase, not to VideoBro. We do not sell or rent your personal information to anyone.

A new account may also receive a short series of onboarding emails with getting-started tips. Each one carries its own unsubscribe link, and turning that series off is separate from your account: password-reset, verification, and other account-related emails keep coming regardless of whether you unsubscribe from onboarding tips.

5. Sharing with the people you invite

VideoBro is built around sharing a tape with people you choose. This section explains what that means for your content — separately from Section 4 above, which covers our own vendors.

• When you invite someone to a tape, or accept an invitation to one, you are directing VideoBro to show that tape's clips to the people on it. Once someone is a member of a tape, they can view every clip on it and add their own. Anyone on the tape with a VideoBro account can also develop it into a finished film; someone who joined by invite without creating an account can film into the tape and watch the finished film, but cannot develop it.
• When a tape is developed, members with a VideoBro account can share the resulting film further using an unlisted web link (a guest who joined by invite cannot). Anyone with that link can watch the film; VideoBro does not require them to have an account or sign in to do so.
• Once a person can view content — as a tape member or through a shared link — what they do with it next is generally outside VideoBro's control. If they download it, screen-record it, or forward the link to someone else, deleting the content from VideoBro's systems will not reach copies they've already made. We can remove content and revoke your own access to it; we cannot reach into someone else's device or inbox.
• If you leave a tape, or are removed from one, you keep any film that was already developed while you were a member, even after you leave, and, if you have an account, can keep sharing a link to it. If you are still on the tape, anyone on it with a VideoBro account can reopen it for more editing within 30 days of developing it, which takes the finished film out of the Cabinet of everyone still on the tape; a new film replaces it when the tape is developed again. See "Reopening a developed tape" in Section 8.

If you're deciding whether to invite someone to a tape or share a film's link, treat it the way you'd treat sharing any video directly: once they can see it, you're relying on them, not on VideoBro, to handle it the way you'd want.

6. Where VideoBro is offered

VideoBro may be available in a number of countries and regions. Wherever you use it from, the Service itself runs in one place: our servers and the sub-processors listed in Section 4 are located primarily in the United States. That means the information described in this policy is transferred to, stored in, and processed in the United States, and is subject to United States law, regardless of where you are when you use the app. By using VideoBro, you are asking us to handle your data that way.

Privacy law differs from country to country, and the law where you live may give you rights beyond the ones in Section 7 below. The rights in Section 7 are available to everyone who uses VideoBro, wherever they are; where local law gives you additional rights that apply to us, we will honor those as well — email support@watchvideobro.com and tell us what you are asking for. You can also complain to the privacy regulator with jurisdiction over your complaint, as described in Section 7.

7. Your rights

You can exercise the following rights at any time:

• Access & export: request a machine-readable copy of your data by emailing support@watchvideobro.com.
• Correction: change your username, email, and profile photo from inside the app.
• Deletion: request permanent deletion of your account and its content from the in-app Profile screen ("Delete Account"). We hold everything for 30 days before removing anything — signing back in at any point during that window cancels the deletion and restores your account exactly as it was, with nothing lost. After 30 days, deletion is permanent and cannot be undone: we remove your account and your access to the Service, the tapes you own and the raw clips behind them, your push tokens and analytics records, and every developed film that no other participant still holds. One thing does not disappear: a finished film you already shared with other people on a tape remains available to those participants, because it is their copy too and deleting your account does not reach into theirs. Once no participant holds a film any longer, it is erased in full.
• Withdraw consent: stop using the app and delete your account at any time.
• Complain to a regulator: if you believe we have mishandled your data, you may complain to the California Privacy Protection Agency or another regulator with jurisdiction over your complaint.

For California residents, you have additional rights under the CCPA, including the right to know what categories of personal information we collect, the right to deletion (covered above), the right to opt out of the sale or sharing of your personal information, and the right to non-discrimination. We do not sell personal information. Using the Reddit pixel on our website (Section 2.5) may count as "sharing" personal information for cross-context behavioral advertising as the CCPA defines it. You can opt out at any time with Cookie settings at the bottom of any page of our website, or by sending a Global Privacy Control signal, which we honor as that opt-out. Nothing in the iOS app is shared this way.

Do Not Track and Global Privacy Control: the VideoBro iOS app does not engage in cross-site or cross-app behavioral tracking. If your browser sends a Global Privacy Control signal, neither Google Analytics nor the Reddit pixel loads on our website, and we treat the signal as your request to opt out of the sale or sharing of your personal information. Our website does not change its behavior for Do Not Track signals, which have no agreed meaning; it follows Global Privacy Control as described here.

8. Data retention

• Account & content, active use: retained for as long as your account is active.
• Account deletion: a 30-day grace period after you request deletion. Signing back in during that window cancels the deletion and restores everything; after it, your account and content are permanently removed.
• Lapsed Pro subscriptions: if your Pro subscription is cancelled or expires, we keep your full library intact for up to 12 months, and email you a few reminders along the way to re-subscribe or download your videos first. After that period, your account is trimmed down to what the Free plan includes (your most recent tapes and developed films, up to the Free plan's limits). A finished film that other members still hold is never removed by this process — it stays for everyone. A tape you share with other people is protected for as long as anyone on it has a paid plan; if nobody on the tape does, it can be trimmed like the rest of your library, and we email your collaborators several times first so nothing disappears on them unannounced.
• Developed tapes that go quiet: after you develop a tape, we keep the working tape and its raw clips around so you can keep filming into it. If that tape then goes 30 days with no clips added, removed, or edited, we delete the working tape and the raw footage behind it. The finished film stays in your Cabinet — this process never removes a developed film, and it never touches a tape whose clips aren't already in a finished film. We email you twice first: about ten days out, and again about three days out. This one is about the tape going quiet rather than about your plan, so it applies to shared tapes too — the film your crew made together stays; the raw clips behind it don't. This 30-day rule applies the same way to every account, free or paid.
• Reopening a developed tape (Continue Editing): anyone on a tape with a VideoBro account can reopen it for more editing within 30 days of developing it. Doing so takes the finished film out of the Cabinet of everyone still on the tape and stops any share links to it working. If nobody still holds that film, the file is deleted. Anyone who had already left the tape keeps their own copy. This cannot be undone.
• Content made without an account: if you join a tape by invite without creating an account, you cannot start a tape of your own, so there is no guest-owned content for VideoBro to clear. The clips you add belong to the tape you joined and stay with it, subject to the retention rules elsewhere on this list. Creating a free account does not change any of this — it just lets you start and own tapes of your own.
• Infrastructure request logs: generated and retained by our hosting providers (Render, Fly.io) under their own schedules as part of running the Service — see Section 2.2.
• Payment and subscription records held by Apple and RevenueCat: kept under their own policies, for years longer than anything else on this list, and unaffected by deleting your VideoBro account — see Section 4.
• Product analytics events: up to 180 days for server-side usage events, and up to 400 days for app and website usage events.
• Website analytics (Google Analytics): 14 months, under the settings described in Section 2.4.
• The Reddit pixel: its cookies on your device last up to 90 days, and your Cookie settings answer six months. What Reddit receives is kept under Reddit's own privacy policy, on a schedule VideoBro does not set or control (Section 2.5).
• Notification log: up to 90 days.
• Tape activity feed: up to 30 days from each event.
• Backups: we do not maintain a separate rolling archive of deleted content. Our database provider keeps point-in-time recovery for up to 7 days, plus daily snapshots kept for up to 30 days, used only to recover from incidents like a bad deploy, not to keep deleted data around. Our video storage provider does not keep version history, so once a video file is deleted from it, it is generally not recoverable. A deleted item may still exist in one of these database backups until it expires on its own schedule, but the retention periods described above are the real protection your content has; there is no separate backup copy outlasting them.

9. Children

VideoBro is not directed to children under 13. We require all account holders to confirm they are at least 13 years old at signup. If we learn we have collected information from a user under 13 without verifiable parental consent, we will delete it. If you are a parent or guardian and believe your child has provided us with information, contact support@watchvideobro.com.

10. Security

We use Apple Transport Security (TLS) for all network traffic, store passwords as bcrypt hashes, store auth tokens in the iOS Keychain, and run regular security reviews. No system is perfectly secure, and we cannot guarantee that personal information will never be accessed or disclosed in a way inconsistent with this policy. If you believe your account has been compromised, contact us at support@watchvideobro.com.

11. Push notifications

If you opt into notifications, payloads delivered via Apple Push Notification service may include the username of a collaborator who joined a tape or added a clip. These payloads transit Apple's infrastructure as part of the standard APNs flow. You can disable notifications at any time in iOS Settings.

12. Changes to this policy

We may update this policy. The current version is always at /privacy. Material changes will be announced in-app or via email; continued use after the effective date constitutes acceptance.

13. Contact

Email: support@watchvideobro.com

Terms of Service · Support