Data & privacy

What playbakk keeps.

Last updated 26 September 2026. This notice is a working draft pending legal review; sections marked for counsel review are not yet final.

Who is responsible

The controller of personal data processed by the playbakk service is:

Sign-in is provided by ChatGPT. OpenAI acts as an independent controller for your ChatGPT identity and account; its own privacy terms apply to that sign-in.

Your account

We use the identity and email supplied by ChatGPT sign-in to recognise you. playbakk stores your account identifier, display name, creation date, encrypted authenticator configuration, hashed recovery codes and hashed security-session tokens. Recent security actions are retained for up to 30 days as subsequent account activity clears older entries.

Your media

Recordings, edits and recovery chunks stay in browser storage or on your computer. They are not automatically uploaded. Browser data may be cleared or evicted. Account deletion removes server-side account information and attempts to delete this browser’s account workspace; it does not remove downloaded files or media on other devices. Close other playbakk tabs before deletion.

Recording other people

playbakk records your own camera and microphone by default. When you capture a call, playbakk works from the browser or operating-system window you choose to share and your own camera and microphone; it does not connect to, or read data from, the calling app itself.

The other person is excluded by default. Their face, window and speaking turns are removed from your clips unless they give explicit consent through a consent link you send them. They choose what is included and can withdraw consent later; withdrawal stops future exports but cannot recall copies already shared. If you send a consent request by email, we process their email address only to deliver that request and record their answer.

You are responsible for complying with recording laws where you and the other participants are, and with our acceptable use policy. Some US states and some countries require every participant’s consent before a conversation is recorded, not just yours. When in doubt, tell everyone and ask before you record. [Requires counsel review: jurisdiction-specific recording and publication rules.]

Cloud processing

Cloud transcription and AI editing are currently disabled. If enabled later, these tools require a separate, explicit choice before sending selected content for processing. No automatic posting takes place.

Why we process data

Under UK and EU data-protection law we rely on:

• Contract — to create and secure your account, keep you signed in and provide the workspace you ask for.
• Legitimate interests — to protect accounts and the service: security logs, abuse prevention, and security alerts such as a new sign-in or a change to your authenticator.
• Consent — to include another participant in your clips, and for any optional cloud processing you switch on. Consent can be withdrawn at any time.
• Legal obligation — to keep billing and tax records, if paid plans are introduced.

[Requires counsel review: lawful-basis mapping and any special-category data in recordings.]

Service providers

We use these processors to run playbakk. Each receives only what it needs for its task. The sub-processor list shows purpose, location and whether each is enabled yet; business customers can request our Data Processing Addendum.

• Cloudflare — hosts the web workspace and the account database; processes request data such as IP address and browser details.
• Vercel — hosts the public website; processes request data for delivery and security.
• Resend — sends transactional email (security alerts and consent requests) when email is enabled, and marketing email only to people who opted in. Open and click tracking are off.
• Stripe — payments and subscription records, only when paid plans are enabled. Card details go directly to Stripe and are never stored by playbakk.
• Supabase — account database, only if and when the account store moves there.
• jsDelivr and Google Cloud Storage — deliver the face-detection component that runs on your device for auto-framing and call imports. They receive request data such as your IP address, never your media.

Some providers process data outside the UK and EEA, including in the United States, under appropriate safeguards such as standard contractual clauses or the UK International Data Transfer Agreement. [Requires counsel review: transfer mechanisms and processor agreements.]

Marketing email

We only send marketing email if you ask for it. You choose the topics (product updates, tips and guides, offers); every box starts unticked, and nothing is sent until you confirm your address from the link we email you. We keep a record of what you chose, where and when you signed up, and when you confirmed, so we can show that you agreed. Every marketing email has a one-click unsubscribe link and a link to your email preferences, and you can withdraw at any time. Account, security, consent-request and billing emails are not marketing and are not affected. If you unsubscribe, or if email to your address bounces or is reported as spam, we keep only your address and the reason so that we never email it again. Deleting your playbakk account deletes your marketing choices too. [Requires counsel review: lawful basis and retention wording for marketing consent records.]

How long we keep it

• Account profile, authenticator configuration and hashed recovery codes — until you delete your account.
• Security sessions — expire after 12 hours or when revoked.
• Security activity — up to 30 days.
• Consent records — while the consent is active, and afterwards only as long as needed to show that a clip was made with permission. [Retention period to be confirmed by counsel.]
• Email delivery logs — held by Resend for its standard log period.
• Billing records — for the period tax law requires, if paid plans are introduced.
• Media — never held on our servers; it stays on your device until you or your browser remove it.

Cookies and local storage

Authentication uses provider-managed sign-in and a secure, HTTP-only playbakk verification cookie. The latter expires after 12 hours. Local storage is used for device preferences and your local media workspace. The website does not include advertising or analytics trackers. The cookie policy lists everything stored on your device.

Your rights

You can ask to access, correct, delete, restrict or object to processing of your personal data, to receive a copy in a portable format, and to withdraw consent at any time. Many of these are self-service: change your display name, replace your authenticator, revoke sessions or delete your playbakk account in account settings. Your primary identity and email remain under your ChatGPT account controls. For anything else, email privacy@playbakk.com; other addresses are on the contact page. You can also complain to your data-protection authority; in the UK, that is the Information Commissioner’s Office.