DARKO

Privacy Policy

Last updated: 2026

1. Minimum data collection

DARKO is guest-first. You can create and join rooms without an account. We do not require your email, phone number, or any personal information to use the core product.

2. What we collect

  • Guest sessions: A display name (you choose) and a random session ID. No email, no DB row. Session expires in 24 hours.
  • Google OAuth users: Your name, email, and profile picture — only if you explicitly choose "Continue with Google." Used to persist your rooms and preferences across devices.
  • Room metadata: Room title, theme, settings, and chat messages you send. Persisted only for room functionality.
  • Usage analytics: We do not run third-party analytics. No Google Analytics, no Mixpanel, no tracking pixels.

3. Voice, video, and files

Voice, video, screen share, and file transfers use direct peer-to-peer WebRTC connections. Your media and files never touch our servers. We do not record voice or video. We do not store your files.

4. Realtime signaling

WebRTC signaling (the connection setup) is relayed through our Socket.IO server. Signaling events are transient — they are not persisted to the database. Once a peer connection is established, media flows directly between participants.

5. Cookies

We use HTTP-only cookies for session management. No tracking cookies, no third-party advertising cookies.

6. Data deletion

Room owners can delete their rooms at any time — this cascades to all messages, playlists, and members. Google OAuth users can request full account deletion by contacting us.

7. Children's privacy

DARKO is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us for deletion.

8. Contact

For privacy questions or data deletion requests, open an issue on our GitHub repository.