Privacy
DRAFT_ — written from what the code actually does, still to be reviewed by a lawyer before public launch
Who is responsible
[ADMINISTRATOR_TBD] decides how and why your data is used, and is the controller under the GDPR. Reach us at [CONTACT_EMAIL_TBD].
Your conversation is not recorded
No copy of your video or audio is kept. There is no text chat to store. The video is relayed between the two of you and then it is gone.
Still frames, when something goes wrong
Two things send a few still frames of your camera to our moderators: someone reporting you, or the automatic check running on their device flagging your video. They are JPEG stills from the surrounding seconds, at most 480 pixels wide — never a recording. They are stored privately; only moderators can open them, never other users.
Your account, if you make one
Your email address, and a password we never see in readable form. If you have Premium, the date it runs until. You can use stund as a guest without any of this.
A device identifier
Your browser calculates an identifier for your device. It exists for one reason: bans. Without it, a banned person clears their cookies and is back in seconds. It is not used for advertising, and not to follow you around other websites.
Moderation records
Reports made about you, flags raised automatically with the score that triggered them, and bans with their reason and expiry. Under the Digital Services Act you are owed the reason for a ban, which means we have to keep it.
Traffic counting
Cloudflare Web Analytics counts page views and visits. It is cookieless, sets nothing on your device and does not build a profile of you.
Why we are allowed to
Running the service you asked for (a contract with you). Keeping people safe from nudity, harassment and minors on camera, and enforcing bans (our legitimate interest, and obligations under the Digital Services Act). Payments, when Premium arrives (contract). Counting traffic (legitimate interest, cookieless).
Where it lives
Your account, reports and evidence frames sit in the European Union (Ireland). We use Supabase for the database, accounts and storage; Cloudflare to serve the site and count traffic; LiveKit to relay the video, which it does not store. Each is a US company bound by a data processing agreement and standard contractual clauses.
How long we keep it
[RETENTION_TBD] — honest answer: right now nothing expires automatically, and defining these periods is an open item before public launch. Your account and everything tied to it disappear when you delete it.
What you can do
Ask what we hold about you, have it corrected, have it deleted, or object to how we use it. You can delete your account yourself, in the profile panel — it takes one click and your current password. If you think we are handling your data wrongly, you can complain to the Polish data protection authority (UODO).
Under 18
stund is for adults. We do not knowingly keep data about anyone under 18 — showing a minor on camera is a permanent ban, and the account goes with it.