WhumbleZone
HomeDiscoverBlogAbout
WhumbleZone/Privacy Policy

Privacy Policy

Last updated: May 29, 2025

This policy explains what data WhumbleZone collects, why we collect it, how we use it, and what rights you have over your information.

1. Information We Collect

We collect the following categories of information:

Account InformationWhen you create an account or sign in via Google, Facebook, or TikTok through Clerk, we receive your name, email address, and profile picture. This data is stored and managed by Clerk (our authentication provider).
Room & Session DataRoom names, room types (video/audio/game/mood), participant counts, and session timestamps are stored temporarily on our servers to enable the live experience. Public room metadata may be visible to other users.
Chat MessagesChat messages sent inside rooms are transmitted in real-time via WebSocket. Messages are not permanently stored after the session ends.
Usage DataWe may collect standard server logs including IP addresses, browser type, referring pages, and pages visited. This information is used for security, abuse prevention, and service improvement.
Guest UsageIf you join a room without an account, we do not collect personally identifiable information. A temporary session identifier is used only for the duration of the room session.

2. How We Use Your Information

We use collected information to:

  • Provide and operate the WhumbleZone platform
  • Authenticate your identity and manage your account via Clerk
  • Enable real-time room sessions, chat, and media synchronization
  • Display your username and avatar to other room participants
  • Send transactional emails (account-related notifications only)
  • Detect and prevent abuse, spam, or unauthorized access
  • Improve platform performance and fix bugs
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

3. Third-Party Services

WhumbleZone uses the following third-party services that may process your data:

Clerk

Authentication provider. Handles sign-in with Google, Facebook, and TikTok. Stores account credentials and session tokens. Clerk's privacy policy governs how authentication data is handled.

Google (via YouTube & Sign-In)

YouTube videos are embedded and played in rooms. If you sign in with Google, Clerk receives your Google profile data per Google's OAuth policies.

Meta / Facebook (Sign-In)

If you sign in with Facebook, Clerk receives your Facebook profile data (name, email, profile picture) per Facebook's data policy.

TikTok (Sign-In)

If you sign in with TikTok, Clerk receives your TikTok profile data per TikTok's privacy policy.

Spotify

Spotify content is embedded via Spotify's web player in rooms. Spotify's own privacy policy governs data handled by their player.

Twitch

Twitch streams are embedded via Twitch's embed player. Twitch's privacy policy governs data handled by their player.

4. Cookies & Local Storage

We use minimal cookies and browser storage:

  • Session cookiesSet by Clerk to maintain your authenticated session. Essential for login functionality.
  • Theme preferenceStored in localStorage to remember your light/dark mode choice. Not transmitted to our servers.
  • Room settingsMicrophone and camera preferences stored locally for convenience. Not transmitted.

We do not use tracking cookies, advertising cookies, or cross-site tracking pixels.

5. Data Retention

Account data is retained for as long as your account is active. You may delete your account at any time from your account settings, which will remove your profile data from Clerk's systems.

Room session data (participant lists, room metadata) is removed within 24 hours after a room session ends. Chat messages are not permanently stored.

Server logs may be retained for up to 90 days for security and abuse prevention purposes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Object to or restrict certain processing
  • Data portability (receive a copy of your data)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Children's Privacy

WhumbleZone is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us at [email protected] and we will delete it promptly.

8. Security

We use HTTPS for all data transmission, industry-standard authentication via Clerk, and follow security best practices for our infrastructure. However, no system is completely secure. If you discover a security vulnerability, please disclose it responsibly by emailing [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of WhumbleZone after changes constitutes acceptance of the revised policy. We encourage you to review this page periodically.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

Email: [email protected]

Website: https://whumblezone.com