# Privacy Policy - ScreenTinker

> How ScreenTinker handles your data: what a display sends, what the dashboard stores, and what changes when you self-host rather than use the cloud.

Source: https://screentinker.com/legal/privacy

[← Back to ScreenTinker](https://screentinker.com/)

## Privacy Policy

Last updated: May 15, 2026

### 1. Overview

ScreenTinker ("we", "us", "our") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.

### 2. Information We Collect

#### 2.1 Account Information

| Data | Purpose | Retention |
| --- | --- | --- |
| Email address | Authentication, notifications | Until account deletion |
| Name | Display in dashboard | Until account deletion |
| Password hash | Authentication (bcrypt, never stored in plain text) | Until account deletion |
| OAuth provider ID | Google/Microsoft sign-in | Until account deletion |

#### 2.2 Device Information

| Data | Purpose | Retention |
| --- | --- | --- |
| Device ID | Unique device identification | Until device removal |
| IP address | Network connectivity, security | Overwritten each connection |
| Android version, screen resolution | Compatibility, display optimization | Until device removal |
| Battery, storage, RAM, CPU, WiFi | Device health monitoring | 90 days (rolling) |
| Device fingerprint (hardware hash) | Prevent trial abuse | Until device removal |

#### 2.3 Usage Data

| Data | Purpose | Retention |
| --- | --- | --- |
| Content play logs | Proof-of-play reporting | 90 days |
| Activity log (API actions) | Audit trail, security | 90 days |
| Screenshots (on-demand) | Remote monitoring | Latest only per device |

#### 2.4 Content

Media files (images, videos) you upload are stored on our servers solely to deliver them to your devices. We do not analyze, sell, or share your content.

#### 2.5 Error and Diagnostic Telemetry

Player clients submit error reports automatically so we can fix issues on devices we cannot directly access (smart TVs, embedded signage browsers). Reports may be submitted before a device has paired; in that case only the network IP and user-agent are present, with no device ID.

| Data | Purpose | Retention |
| --- | --- | --- |
| Browser user-agent string | Identifying which player platforms encounter errors | Rolling buffer (10,000 entries) |
| Error messages, stack traces, and source-file references | Diagnosing player issues we cannot reproduce in development | Rolling buffer (10,000 entries) |
| Recent player log entries (up to 50, including filenames of content being played) | Context for the error so we understand what the player was doing | Rolling buffer (10,000 entries) |
| Screen and viewport dimensions | Diagnosing layout and rendering issues at the device's actual size | Rolling buffer (10,000 entries) |
| Coarse player state (idle, playing, waiting) | Distinguishing errors during playback vs setup | Rolling buffer (10,000 entries) |

This telemetry can be disabled by self-hosters via the `PLAYER_DEBUG_REPORTING=off` environment variable. On screentinker.com it is on by default.

### 3. How We Use Your Information

- **Provide the Service:** Deliver content to devices, enable remote management, process subscriptions

- **Security:** Detect unauthorized access, prevent abuse, protect accounts

- **Communications:** Send device offline alerts, subscription notifications, service updates

- **Improvement:** Analyze aggregate usage patterns to improve the Service (no individual tracking)

### 4. Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

- **Service providers:** Payment processing (Stripe), email delivery, hosting infrastructure

- **Team members:** If you belong to a team, other team members can see shared devices and content

- **Legal requirements:** When required by law, subpoena, or court order

- **Business transfers:** In the event of a merger, acquisition, or sale of assets

### 5. Self-Hosted Deployments

If you self-host ScreenTinker on your own infrastructure:

- All data stays on your servers. We have no access to it.

- You are the data controller and responsible for compliance with applicable privacy laws.

- No telemetry or usage data is sent to us from self-hosted instances. The error and diagnostic telemetry described in Section 2.5 is collected by the self-hosted server itself, not transmitted externally, and can be disabled entirely with `PLAYER_DEBUG_REPORTING=off`.

### 6. Data Security

- Passwords are hashed with bcrypt (never stored in plain text)

- API authentication uses JWT tokens with auto-expiry

- All connections use HTTPS/TLS encryption

- Android app uses encrypted storage for credentials

- Rate limiting protects against brute force attacks

- Regular security audits of the codebase

### 7. Your Rights

You have the right to:

- **Access:** View all data associated with your account from the Settings page

- **Correction:** Update your account information at any time

- **Deletion:** Delete your account and all associated data from Settings

- **Export:** Download your data via the database backup feature (admin) or API

- **Portability:** Export content and reports in standard formats (CSV, PNG, MP4)

### 8. Cookies and Local Storage

- We use localStorage to store your authentication token and preferences (language, theme)

- The web player uses a Service Worker for offline content caching

- We do not use third-party tracking cookies

- Google/Microsoft OAuth may set cookies as part of their authentication flow

### 9. Children's Privacy

The Service is not intended for use by children under 13. We do not knowingly collect information from children under 13.

### 10. International Data Transfers

If you access the Service from outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

### 11. Data Retention

- Account data: retained until you delete your account

- Device telemetry: 90 days (automatically pruned)

- Play logs: 90 days (automatically pruned)

- Activity logs: 90 days (automatically pruned)

- Error and diagnostic telemetry: rolling buffer of the 10,000 most recent entries (oldest pruned on insert)

- Content: retained until you delete it or your account

- After account deletion: all data removed within 30 days

### 12. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. The "Last updated" date will be revised accordingly.

### 13. Contact Us

For privacy-related questions or data requests, contact us at:

Email: support@screentinker.com