Your privacy

I'm one person building SecretPear, and keeping your data safe is my highest priority.

I don't put ads on the site or in your videos.

I don't sell your data, and I have no plans to. I don't follow you from site to site or build a profile of you.

I keep your account, your Pears and rooms, and your messages, because SecretPear can't work without them. The rest of this page is the details.

Your account. Your email, your name and your password. Your password is scrambled before it's saved, so I can't read it, and neither could anyone who stole the database.

Your Pears and rooms. Their names, who's in them, and the picture and song you picked. What you watch isn't saved. It only exists while the room is open.

Your messages. Kept so the conversation is still there next time. Photos, videos and files you send are stored privately, and only the people in that chat can open them.

Your background. If you pick your own background picture, I keep it so it's there when you come back. Only you can see it. Reset it and it's gone.

Guests. If you use SecretPear without an account, you get a temporary guest name. It's deleted after seven days without a visit, along with any room you started that nobody else is using. Make an account and everything stays.

What you buy. If you buy something in the Shop, I keep the order and what it unlocked. Stripe handles the payment, so I never see your card.

Reports. If you report someone, I keep the report so I can look into it.

Nothing is ever recorded.

With two people in a room, your camera and voice go straight to the other person, encrypted. If your two connections can't reach each other directly, they pass through a relay that only forwards them.

With three people, and in Pear calls, they go through Cloudflare's servers so everyone gets a smooth call. They're still encrypted on the way, and nothing is kept.

I count how many people get through each step. Things like opening the front page, pressing Start room, or two people watching together for ten minutes. Each count is the step, the site you came from (like Reddit or Discord), whether you're on a phone or a computer, and the time. There's no name, no account and nothing that could link two counts to the same person. It's how I find out whether SecretPear actually works for people.

One exception. If you joined through someone's invite and later start a room that somebody new joins, I note that once on your account, with the time and nothing else. It's deleted with your account.

Like every website, my servers see your IP address. While you are signed in I keep that address, and the name of the browser, on the sign-in. Signing out deletes that record. A sign-in that simply expires stops working. I have not confirmed a separate sweep that deletes the leftover row, and signing out does not delete a backup or the logs Vercel and Supabase keep. I use the address to stop spam and to notice a different device. I don't follow you from site to site with it. If something breaks, a log can name the room and the account so I can see what failed. It does not keep what you watched or what you wrote.

One cookie keeps you signed in. It lasts thirty days from your last visit, and other scripts on the page can't read it.

If you came from a link someone shared, a second one remembers which site the link came from, like Reddit, for thirty days. Everyone who came from the same link gets the exact same one, so it can't tell you apart.

That's all of them, which is why there's no cookie banner.

The people you invite. Anyone with your invite link can come in and see the room, the chat and who's there. So only send it to people you trust. You can remove someone whenever you want.

The video sites. When you watch YouTube, Twitch or Netflix here, you're using their player, so they see it the same way they would on their own site. YouTube can still show its own ads inside its videos. I don't add them and I don't get paid for them.

The Netflix extension. It only works on the tab you're watching in. It sees play, pause and the time, so it can keep you in sync. It doesn't read your history, your other tabs, your cookies or your Netflix account.

The companies SecretPear runs on. The site runs on Vercel and the database on Supabase. Calls, rooms and the files you send run on Cloudflare. Emails are sent by Resend, payments go through Stripe, and GIF searches go to Klipy without your name or account on them. Phone notifications are delivered by your phone's own notification service. Each of them only holds what it needs to do its part. Vercel and Supabase also keep their own request logs, which can include an address. How long those logs last is their setting. I don't use them to build a profile of you.

Delete a room or a Pear and its chat and invites go with it, for everyone. Leaving only removes you.

You can download everything on your account, or delete your account, under You, then Account & Security. Guests are deleted on their own after seven days.

SecretPear is early, and it's just me. I test everything seriously, but I'm not a company with a security team. Please don't share anything in a room that would really hurt you if it got out.

If this page changes, the date at the top changes too. If you're unsure about anything, email me at hello@secretpear.com.