Privacy Policy

Effective 2026-08-26.

Rewound.gg operates Rewound. This policy covers the desktop app and the website, and it is written to be read rather than to be survived.

The short version

The app records to your own computer and sends us nothing until you choose to share a clip. We never see the recordings you don’t share. We don’t analyse clip content, we don’t train anything on it, and there’s no advertising here to sell you to.

What we collect

Those are the limits we hold ourselves to, and the sweep that enforces them is written. Until the service is properly launched, assume a row can outlive its date by a few days.

Why we’re allowed to hold it

Four reasons, and every row above is one of them.

• You asked for an account. Your email, your handle, your devices and your clips exist because you signed up and uploaded something. Without them there’s no service to give you.
• You said yes to something optional. Crash reports and email are off until you turn them on, and a profile is private until you make it public.
• The service can’t run otherwise. Quotas, abuse checks, hashed addresses, moderation records. Nobody gets a working clip host without them, and we’ve kept each one as thin as it can be and still work.
• The law requires it. Copyright notices and the child protection rules below.

If you’re in the EU or the UK, those four are contract, consent, legitimate interests and legal obligation, in that order. Named so you can match them up. The plain words are what we actually do.

Cookies

One cookie. When you sign in we set rwd_session, which holds a random value that points at your session on our side — no name, no email, nothing readable in it. Your browser sends it back so each page knows it’s you. It lasts 30 days, signing out deletes it, scripts in the page can’t read it, and other sites never receive it.

That’s the lot. No analytics cookie, no advertising cookie, no third-party tracker anywhere on the site. There’s no cookie banner here because the only cookie we set is the one that signs you in.

Two forms — reporting a clip and sending a copyright notice — run Cloudflare’s are-you-human check, which may set a short-lived cookie of its own to remember that you passed. It’s there to stop scripts, not to follow you around.

Your IP address

We never store it. Two things need to tell viewers apart — counting a view once per person, and counting distinct reporters — and neither needs to know who. So the address is combined with a secret only we hold and turned into a hash: it matches itself and nothing else, and a copy of our database contains no addresses.

For quota purposes we also use a coarse prefix of the address — the equivalent of a neighbourhood rather than a house — so that reinstalling the app doesn’t reset an anonymous quota.

Crash reports leave Canada, and that is a disclosure

Crash reporting is off unless you turn it on. If you do, the report is processed by a service outside Canada, which we’re required to tell you rather than imply. Before it’s sent, file paths, game names and your computer’s name are stripped out, and the app shows you exactly what would go.

Some decisions here are made by software

Most privacy policies say there’s no automated decision-making. Ours would be a lie, so here is what there is.

• A clip reported by three different people stops being served straight away, before anyone has looked at it. One reported as illegal stops on the first report.
• A person decides whether a report stands. If it does, the strike that follows is added by software, and what a total triggers is automatic too: three stop you uploading, five close the account.

None of it profiles you and none of it looks inside your clip — it runs on reports and on what the account has done before. A person reviews every hidden clip afterwards. If you think it went wrong, write to support@rewound.gg and a person will read it and answer. Every decision is logged with its reason, so there’s something to check against.

Connected accounts

Rewound doesn’t currently connect to any other service on your behalf.

A future version will offer to publish a clip to your own YouTube channel, at your explicit request each time. The design is already fixed and worth stating now: the credential Google issues is stored in your operating system’s keychain on your own computer and is never sent to us. We won’t know which channel you linked, what you published, or what it was called. What we will hold is that an account used part of its daily publishing allowance, because that allowance is shared across everyone and has to be rationed by us rather than by the app.

This section will name Google’s Privacy Policy and YouTube’s Terms of Service, and explain how to disconnect, before that feature ships.

Who else touches your data

We don’t sell anything. Data reaches other companies only here.

• Vercel runs the website and the API.
• Neon runs the database — accounts, clip records, reports.
• Cloudflare stores and delivers clip files, screens for known child sexual abuse material, and runs the human check on the report and notice forms.
• Sentry is where crash reports would go. Nothing sends any today — the app has no crash reporting in it yet — and when it does it will be off until you turn it on.
• Paddle will handle payment when paid plans open. As merchant of record they hold the payment details, and we never see a card.
• Law enforcement, where we’re legally required to, or where we report as described below.
• You, if a clip of yours is named in a copyright notice. The notice gets forwarded to you as it was written. That’s a legal duty, and it’s on the Copyright page.

Most of those companies are outside Canada, which we’re required to say plainly rather than let you assume. Each of them gets only what it needs to do its job, and none of them may use it for anything else. If we change one, this list changes with it.

There’s no email sender wired up yet, so today the service sends no email at all. Whoever we pick goes on this list before it does.

Child sexual abuse material

We report it to Cybertip.ca and, where there are reasonable grounds, to police, and we preserve the material and associated records for as long as the law requires. That preservation overrides every retention period on this page.

What you can ask for

• A copy of what we hold about you, in a form you can take elsewhere.
• A correction, if something is wrong.
• Your account and everything in it deleted.

There’s no button for any of that yet. Email privacy@rewound.gg and we’ll do it by hand, within 30 days. Deleting your account deletes your clips and your personal information, except records we’re required to keep — copyright notices for their statutory period, and anything preserved under the section above.

Changing your mind

Anything you switched on, you can switch off, whenever you like and without giving a reason. Email is a toggle in your account settings, and every message we send will carry an unsubscribe link. A public profile goes back to private from the same page. When crash reporting exists it will get a switch in the app, off to begin with.

Turning something off stops it from then on. It doesn’t erase what was already collected — ask us to delete that and we will.

Our privacy officer

Our Privacy Officer, reachable at privacy@rewound.gg. Law 25 asks us to publish the title and the contact details, which is what that is.

If you’re not satisfied with our answer you can complain to the Office of the Privacy Commissioner of Canada, or to the Commission d’accès à l’information du Québec if you’re in Quebec.

Breaches

We keep a register of every security breach involving personal information, including the ones that don’t meet the reporting threshold, for 24 months. Where a breach creates a real risk of significant harm we report it to the Privacy Commissioner and tell the people affected.

Age

Rewound isn’t for people under 16. We don’t knowingly collect information from anyone younger, and we delete it when we find it.

Changes

We’ll post changes here with a new effective date, and for a significant one we’ll email you where we have an address.