Privacy Policy
Effective November 2026 · Last updated November 2, 2026
The short version
- Your camera and mic are off unless you turn them on, and they go straight to the friends in your room. We don't record them.
- We never collect your browsing history and never store the titles or links of what you watch on our servers.
- Every viewer plays the show from their own streaming account. We sync play and pause; we don't rebroadcast video.
- We don't sell or rent your data, and we don't use it for advertising.
- You can delete your account from inside the extension at any time.
1. Who we are
Hangz is a Chrome extension and online service run by 3C's Consulting LLC, doing business as Hangz ("Hangz", "we", "us"). Questions about this policy go to privacy@hangz.io.
Hangz is for people 18 and older. We don't knowingly collect information from anyone younger. If you think someone under 18 has an account, email us and we'll delete it.
2. What we collect
| What | Why | Where it lives |
|---|---|---|
| Account: email address and password (stored hashed by our login provider) | To sign you in, confirm your email and reset your password | Supabase |
| Profile: username, character shape and colour, what your character wears, Founder number if you have one | So friends see you in rooms | Supabase (visible to other signed-in players) |
| Age check: you enter your birth date at sign-up | To confirm you're 18+ | Checked on your device. The date itself is never stored or sent; we keep only a yes/no "18+" flag. |
| Friends and messages: your friend list, requests, and messages you send to friends | Friends, chat and "who's online" | Supabase. Messages are deleted automatically after 30 days. |
| Presence: whether you're online, which Hangz room you're in, the room's name, whether it's public, and which service it's using (for example "YouTube") | So friends can see where you are and join you | Supabase. Private room codes are never shown to friends. |
| Streaming services you have (optional checklist at sign-up) | To decide which services to support next | Supabase. Private to you; staff see only totals. |
| Tokens, items and Plus: your token balance and history, items you've unlocked, whether you have Plus | To run the in-app reward system and your subscription | Supabase |
| Purchases: what you bought, when, and a Stripe customer reference | To deliver what you paid for and handle refunds | Supabase and Stripe. We never see or store your card number. |
| Reports and blocks: if you report someone, the names, room, reason and a short note; your block list | Safety and moderation | Reports in Supabase; your block list stays in your browser |
| Room activity: while you're in a room, your character's position, seat, chat and game moves are relayed to the others in that room | That's what makes the room work | Passed through our room server in real time and not kept after the room empties |
| Waitlist: your email address, if you join the waitlist on hangz.io | To send you one email when Hangz opens | On our web host (Namecheap), in a file that isn't public. Deleted after launch, or sooner if you ask. |
| Anonymous usage counts: a random session ID, which room type, how many people, how long, whether you came from an invite | To see what's working and fix what isn't | Cloudflare Analytics. No names, chat, or anything about what you watch. |
| Network data: your IP address | To connect you, stop spam and abuse (rate limits), and make kicks stick | Cloudflare. When a room host kicks a guest, we keep a one-way scrambled tag derived from the IP address for 12 hours so the guest can't rejoin right away. |
What stays on your computer
Some things live only in your browser's storage and never reach us: your settings, your play-money chip balance, your mute and camera preferences, your block list, and the last room you were in. Your login session token is kept in Chrome's extension storage. Uninstalling the extension removes them.
What we never collect
- Your browsing history, or any page other than the streaming tab you open Hangz on.
- The titles or links of what you watch (they stay in your browser and your room).
- Recordings of your camera, microphone or the video.
- Your card number or bank details.
3. Camera, microphone and video
Camera and mic are opt-in. When you turn them on, audio and video go directly between the browsers in your room (peer to peer). When a direct connection isn't possible, they pass through an encrypted relay run by Cloudflare. Nothing is recorded or stored by us. In creator rooms, the room's moderators can choose who is allowed to speak or show a camera.
The show you watch plays from your own Netflix, Prime Video or YouTube account in your own tab. Hangz reads play, pause and time position so everyone stays in sync. To draw the video on the big screen in the 3D room, Hangz may copy frames inside your own browser only; those frames never leave your computer.
4. How the Chrome extension uses its permissions
- activeTab and scripting: to add the room to the streaming tab you click Hangz on, and only that tab.
- Site access (youtube.com, netflix.com, primevideo.com, amazon.com, amazon.co.uk): to control play and pause and sync time on those sites.
- storage: to save your settings and sign-in on your computer.
Hangz's use of information received through Chrome extension permissions follows the Chrome Web Store User Data Policy, including the Limited Use requirements. We use that data only to provide Hangz's features, we don't transfer it except as described here, we don't use it for ads, and humans don't read it except for security, legal compliance, or with your permission.
5. Who we share data with
We don't sell or rent personal information, and we don't share it for advertising. We use these service providers to run Hangz, under their own privacy and security terms:
- Supabase: accounts and the database.
- Cloudflare: room servers, the camera/mic relay, anonymous analytics, and abuse protection.
- Stripe: payments and subscriptions. Stripe's privacy policy covers the payment details you give them.
- Namecheap: hosts the hangz.io website, the waitlist and our email.
- Google, if you choose to sign in with Google: to confirm who you are.
Other players see your username, character, Founder number and Plus badge, and whatever you say or show in a room. We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of the business (this policy would still apply).
6. How long we keep it
- Friend messages: 30 days.
- Waitlist emails: deleted after the launch email goes out.
- Kick tags: 12 hours. Room state: until the room empties.
- Account, profile, friends, tokens, items: until you delete your account.
- Purchase records: kept with your name removed after you delete your account, because tax and accounting law requires us to keep sales records.
- Reports: as long as needed to handle them and keep the community safe.
7. Your choices and rights
- Delete your account in the extension on the Account screen (Delete my account). That deletes your profile, friends, messages, tokens and items, and cancels any Plus subscription.
- Change your username, email, password and streaming-service list on the Account screen.
- Get a copy of your data or ask us to correct it: email privacy@hangz.io.
- Turn your camera and mic off at any time; block or report anyone from the people menu.
Depending on where you live (for example California, or the EU and UK), you may have extra rights to access, correct, delete or move your data, and to complain to a data-protection authority. We honour these requests for everyone, wherever you live. We'll answer within 30 days and won't treat you differently for asking.
8. Security
Connections are encrypted (HTTPS and secure WebSockets). The database uses row-level security so each player can only read what they're allowed to. Passwords are hashed by our login provider. No system is perfect; if we learn of a breach that affects you, we'll tell you.
9. International users
Hangz is run from the United States and our providers may process data in the US and other countries. By using Hangz you understand your information will be handled there.
10. Changes
If we change this policy in a meaningful way, we'll update the date at the top and tell you in the extension before the change takes effect.
11. Contact
Privacy questions: privacy@hangz.io
Everything else: support@hangz.io
3C's Consulting LLC, doing business as Hangz