← Back to ScreenTinker
Privacy Policy
Last updated: October 15, 2026
1. Overview
ScreenTinker ("we", "us", "our") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.
2. Information We Collect
2.1 Account Information
| Data | Purpose | Retention |
|---|
| Email address | Authentication, notifications | Until account deletion |
| Name | Display in dashboard | Until account deletion |
| Password hash | Authentication (bcrypt, never stored in plain text) | Until account deletion |
| OAuth provider ID | Google/Microsoft sign-in | Until account deletion |
2.2 Device Information
| Data | Purpose | Retention |
|---|
| Device ID | Unique device identification | Until device removal |
| IP address | Network connectivity, security | Overwritten each connection |
| Android version, screen resolution | Compatibility, display optimization | Until device removal |
| Battery, storage, RAM, CPU, WiFi | Device health monitoring | 90 days (rolling) |
| Device fingerprint (hardware hash) | Prevent trial abuse | Until device removal |
2.3 Usage Data
| Data | Purpose | Retention |
|---|
| Content play logs | Proof-of-play reporting | 90 days |
| Activity log (API actions) | Audit trail, security | 90 days |
| Screenshots (on-demand) | Remote monitoring | Latest only per device |
2.4 Content
Media files (images, videos) you upload are stored on our servers solely to deliver them to your devices. We do not analyze, sell, or share your content.
2.5 Error and Diagnostic Telemetry
Player clients submit error reports automatically so we can fix issues on devices we cannot directly access (smart TVs, embedded signage browsers). Reports may be submitted before a device has paired; in that case only the network IP and user-agent are present, with no device ID.
| Data | Purpose | Retention |
|---|
| Browser user-agent string | Identifying which player platforms encounter errors | Rolling buffer (10,000 entries) |
| Error messages, stack traces, and source-file references | Diagnosing player issues we cannot reproduce in development | Rolling buffer (10,000 entries) |
| Recent player log entries (up to 50, including filenames of content being played) | Context for the error so we understand what the player was doing | Rolling buffer (10,000 entries) |
| Screen and viewport dimensions | Diagnosing layout and rendering issues at the device's actual size | Rolling buffer (10,000 entries) |
| Coarse player state (idle, playing, waiting) | Distinguishing errors during playback vs setup | Rolling buffer (10,000 entries) |
This telemetry can be disabled by self-hosters via the PLAYER_DEBUG_REPORTING=off environment variable. On screentinker.com it is on by default.
3. How We Use Your Information
- Provide the Service: Deliver content to devices, enable remote management, process subscriptions
- Security: Detect unauthorized access, prevent abuse, protect accounts
- Communications: Send device offline alerts, subscription notifications, service updates
- Improvement: Analyze aggregate usage patterns to improve the Service (no individual tracking)
4. Data Sharing
We do not sell your personal information. We share data only in these limited circumstances:
- Service providers: Payment processing (Stripe), email delivery, hosting infrastructure
- Team members: If you belong to a team, other team members can see shared devices and content
- Legal requirements: When required by law, subpoena, or court order
- Business transfers: In the event of a merger, acquisition, or sale of assets
5. Self-Hosted Deployments
If you self-host ScreenTinker on your own infrastructure:
- All data stays on your servers. We have no access to it.
- You are the data controller and responsible for compliance with applicable privacy laws.
- No telemetry or usage data is sent to us from self-hosted instances. The error and diagnostic telemetry described in Section 2.5 is collected by the self-hosted server itself, not transmitted externally, and can be disabled entirely with
PLAYER_DEBUG_REPORTING=off.
6. Data Security
- Passwords are hashed with bcrypt (never stored in plain text)
- API authentication uses JWT tokens with auto-expiry
- All connections use HTTPS/TLS encryption
- Android app uses encrypted storage for credentials
- Rate limiting protects against brute force attacks
- Regular security audits of the codebase
7. Your Rights
You have the right to:
- Access: View all data associated with your account from the Settings page
- Correction: Update your account information at any time
- Deletion: Delete your account yourself, at any time: in the dashboard under Settings → Delete my account, or in the ScreenTinker Manager app from the menu under your name. This deletes your account and, if you are its only member, your organization with its workspaces, screens, uploaded files and playlists, and cancels an active subscription first. An organization you own that has other members must be handed over first. Deleted data stays in backups until they expire (14 days for database backups on screentinker.com). Details, and what to do if you cannot sign in: /delete-account
- Export: Download your data via the database backup feature (admin) or API
- Portability: Export content and reports in standard formats (CSV, PNG, MP4)
8. Cookies and Local Storage
- We use localStorage to store your authentication token and preferences (language, theme)
- The web player uses a Service Worker for offline content caching
- We do not use third-party tracking cookies
- Google/Microsoft OAuth may set cookies as part of their authentication flow
9. Children's Privacy
The Service is not intended for use by children under 13. We do not knowingly collect information from children under 13.
10. International Data Transfers
If you access the Service from outside the United States, your data may be transferred to and processed in the United States. By using the Service, you consent to this transfer.
11. Data Retention
- Account data: retained until you delete your account
- Device telemetry: 90 days (automatically pruned)
- Play logs: 90 days (automatically pruned)
- Activity logs: 90 days (automatically pruned)
- Error and diagnostic telemetry: rolling buffer of the 10,000 most recent entries (oldest pruned on insert)
- Content: retained until you delete it or your account
- After account deletion: removed from the live service immediately; on screentinker.com, database backups holding it expire within 14 days, and uploaded files can remain in monthly archive backups for up to 12 months, which are never used to restore a deleted account (on a self-hosted server, as long as its operator keeps backups). See /delete-account
12. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email. The "Last updated" date will be revised accordingly.
13. Contact Us
For privacy-related questions or data requests, contact us at:
Email: support@screentinker.com