Privacy Policy
Last updated 17 September 2026.
Sofa is a browser extension that keeps a group of friends' video players in sync and adds chat, reactions and voice on top of the video. This policy explains exactly what data Sofa handles and what it never touches.
What Sofa sends through its relay
To keep a watch party working, the Sofa relay carries only:
- Playback events — play, pause, seek, position, playback rate — and buffering status.
- The URL and title of the video you are watching, so friends can follow you to it.
- Chat messages, emoji reactions and typing indicators for your room.
- Your chosen nickname and colour, and a random identifier generated by your browser.
- WebRTC signalling (connection descriptions and network candidates) used to set up peer-to-peer voice.
What Sofa never touches
Sofa does not transmit, record, download or store any video or its audio. It never accesses your screenshots, your streaming-service cookies or passwords, or any DRM keys. Your screen is never shared. Voice audio travels directly between participants over encrypted WebRTC (DTLS-SRTP); it does not pass through or get stored on the relay.
What the relay stores, and for how long
So that a room keeps working from one night to the next, the relay stores each room's code, name, settings, current video URL and title, and the last 200 chat messages. A room that nobody uses for 90 days is deleted automatically. Nothing is sold or shared with third parties. Sofa contains no analytics or advertising code.
What stays in your browser
Your nickname, colour and preferences are saved with Chrome's synced storage. A random client identifier and the code of the room you last joined are stored locally in your browser so Sofa can reconnect you if the extension restarts. You can clear all of it by removing the extension.
Your binge watch log
Searching for a TV show sends the search text through Sofa's server to TVmaze. Episode information is also requested from TVmaze when you select a show. Search responses are temporarily cached to reduce repeat requests. No watch log or room information is included. Show covers load from TVmaze's image service, which receives your IP address with those image requests.
The website's binge guide saves your watched checkmarks, skipped titles, preferred country, watch order, collection scope, layout and chapter locally in this browser. Without optional sign-in, this watch log stays on your device. It is never shared with room members. Downloading or importing a progress backup happens on your device. Clear the website's browser data to remove this log; uninstalling the extension does not remove website storage.
My watching also saves titles you add, your season and episode, your chosen service and video links. Connecting the extension is optional: it copies this personal shelf between the website and extension storage in the same Chrome profile. Only the Sofa binge guide (and the local development preview) can use this connection. Disconnecting stops future syncing but keeps existing copies. Remove titles from the shelf while connected to remove them from both views, or clear each copy separately. Choosing Watch together shares the room name and playing video through the existing room system; your watched checkmarks remain private.
Opening title details requests streaming availability from Sofa's server using the title and selected country. The server retrieves and caches provider information from TMDB, powered by JustWatch; it does not send your checkmarks or room information. Provider logos load from TMDB's image service, which receives your IP address as part of that request. Following an external watch link opens TMDB or JustWatch under that site's privacy policy.
Shared shortlists
Creating a shortlist stores its name, suggested titles and votes on Sofa's server. Anyone with its invitation link can view it, suggest titles and vote. Your personal episode progress, saved video links and service choices are not copied into the shortlist. An HTTP-only cookie remembers votes in this browser for 30 days; no sign-in or email is required. The creator can delete the shortlist from the browser that created it. Lists expire after 30 days without a suggestion or vote. Shortlist links and creator controls are remembered locally in your browser, separately from account sync.
Optional Binge accounts
When sign-in is available and you choose to use it, Sofa stores your email address, watch shelf (including titles, episode progress, saved services and video links), collection checkmarks, skips and viewing preferences on Sofa's server to sync your devices. Existing browser progress is merged when you sign in. You can use local tracking and join rooms without an account.
The configured email provider (SendGrid or Resend) receives your email address and a sign-in message, but not your watch log. Sign-in links and codes expire after 15 minutes and can be used once. Sofa stores hashes of these credentials and session tokens, and uses a secure, HTTP-only session cookie lasting up to 30 days. Temporary request limits help prevent abuse. Sofa does not add your email to a marketing list.
Account data remains until you delete the account. You can download your account data, sign out, or delete the account from the Account menu. Deletion removes the active server copy and invalidates all sessions. Signing out or deleting an account does not erase copies already saved in your browsers or extension; remove those separately if needed. Connecting the extension while signed in can bring its personal shelf into account sync through the website.
Aggregate counts
The relay keeps simple running totals — how many rooms and people are currently connected — to monitor that the service is healthy. These are counts only and are not tied to any identity.
Contact
Questions about this policy can go to espen.larsson@gmail.com.