Privacy

Who is responsible

Gosem decides how the data described here is used. Questions, access requests and deletion requests go to pr@gosem.pl.

There are two kinds of people on this page

Account holders sign in and make recordings. Viewers open a share link someone sent them. Viewers never agreed to anything, so what is collected about them is listed separately and deliberately kept small.

What the browser extension captures

Only while you are recording, and only what you pick from the sharing dialog your browser shows you — a screen, a window, or a tab. Nothing is captured before you choose, and your browser, not this extension, draws that dialog.

• Video of the surface you selected.
• Microphone audio, only if you switch it on. It is off by default.

The extension does not read the pages you visit, your browsing history, your bookmarks, or anything you type. It asks for four permissions and no more:

• desktopCapture — to open your browser's own "share your screen" dialog.
• storage — to keep your access token and an unfinished upload on your own machine.
• alarms — to retry an upload that was interrupted.
• Access to this site and to Bunny Stream, the two addresses it talks to — and no others.

Where the video goes

The recording is uploaded directly from your browser to Bunny Stream. It does not pass through this server. This site issues a short-lived upload credential and is told when encoding finishes; the video itself never travels through it.

Bunny Stream is operated by BunnyWay d.o.o. and stores and delivers the video. The library used by this installation is hosted in the European Union. Bunny is the only third party in the path — nothing here loads analytics, advertising, or fonts from anyone else.

What this site stores about account holders

• Your name, email address and a one-way hash of your password. The password itself is never stored.
• For each recording: its title, length, status, share link and an identifier for the video at Bunny.
• Access tokens for the extension, stored only as hashes. They expire 180 days after they are created, and you can revoke one at any time.
• A sign-in session, which records your IP address and browser user-agent string for as long as the session lasts.

What this site stores about viewers

Anyone who opens a share link is measured, so the person who sent it can see how far people watched. This is the part most worth reading:

• A random session identifier for that visit. It is not linked to a name, an account, or any other site.
• How much of the video was watched — furthest point reached, whether it was completed, and the times at which it was played, paused or seeked.
• A one-way hash of the IP address. The address itself is never stored, and the hash cannot be reversed back into it.
• The browser user-agent string.
• Loading the page also creates a short-lived session record containing the IP address and user-agent, as any page on this site does.

The person who shared the recording sees aggregate figures — view counts, a drop-off curve, completion rates. They are not shown your IP address, because it is not kept.

Cookies and what the player keeps on your device

One cookie, used to keep you signed in and to protect forms against cross-site submission. There is no advertising or tracking cookie, and nothing is shared with anyone for advertising.

The video player also remembers your volume, speed and caption preferences in your own browser's local storage, so a recording does not start at full volume every time. It stays on your device, is never sent anywhere, and clearing your browser data removes it.

How long it is kept

Recordings and their statistics are kept until someone deletes them. There is no automatic deletion. Deleting a recording removes the video from Bunny Stream as well as its statistics from this site, and the share link stops working immediately. That cannot be undone.

Asking for your data, or its removal

Write to pr@gosem.pl. Account holders can also delete any recording themselves from their dashboard, which is immediate.

Viewers: because visits are recorded under a random session identifier and a hashed IP address, there is usually nothing that can be traced back to you — but if you know which recording you watched and roughly when, write to the same address and the entry can be found and removed.

Access

Accounts are created by invitation only; there is no public sign-up. A share link is a long random string that is not listed or indexed anywhere, but anyone holding it can watch the recording — so treat it as you would the recording itself.