Privacy policy

retide stores what it needs to run your streams, and nothing for advertising. No analytics, no tracking, no ad networks — and no cookie banner, because every cookie retide sets is required for the service to work.

Who is responsible

Controller under Art. 4(7) GDPR:

Paul Galow
Bielastr. 38
04178 Leipzig
Germany

Email: hello@retide.net

Requests about your data go to the same address.

Where your data lives

retide runs on Amazon Web Services in Frankfurt, Germany (region eu-central-1). Streams and pages are delivered through Amazon CloudFront, a content delivery network with servers worldwide, so video reaches viewers with low delay. AWS acts as a processor under a data processing agreement; transfers outside the EU are covered by the EU–US Data Privacy Framework and EU standard contractual clauses. (Processor: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.)

What retide processes

If you broadcast (account holders). Your email address and sign-in credentials, managed through AWS Cognito; your sessions, invites, and settings; and the video you stream. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

If you watch. Viewers need no account. When you open an invite link, retide processes the invite token and your IP address to deliver the stream to you — the IP is used transiently for delivery and is not stored in access logs. Legal basis: performance of the contract with the broadcaster and retide's legitimate interest in delivering the stream you were invited to (Art. 6(1)(b) and (f) GDPR).

If you email retide. retide processes your email address, your name if you give it, the content of your message and any attachments, and the technical message headers, which can include your IP address. Legal basis: retide's legitimate interest in answering your message (Art. 6(1)(f) GDPR); if it concerns your account or contract, performance of the contract (Art. 6(1)(b) GDPR); if it is a request to exercise your data-protection rights, retide's legal obligation to answer it (Art. 6(1)(c) together with Art. 12 GDPR). Filtering incoming mail for spam and viruses, and keeping messages that aren't forwarded, is based on retide's legitimate interest in mail security and in handling abuse reports (Art. 6(1)(f) GDPR). Mail is received and stored by AWS in Frankfurt and forwarded to retide's mailbox at Proton AG in Switzerland. Proton acts as a processor under a data processing agreement; Switzerland is covered by an EU adequacy decision. (Processor: Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland.) The copy at AWS is deleted automatically after 30 days, whether it was forwarded or not. The forwarded copy is kept until your matter is resolved, and longer only where statutory retention obligations apply, for example 6 years for business correspondence (§ 147 AO).

Recordings. If a broadcaster records a session, the recording is stored encrypted in Frankfurt and deleted automatically 45 days after the stream. Live stream segments are deleted within one day.

Technical logs. Servers write operational logs (what happened, when, and whether it worked) to diagnose faults. Streaming logs are kept for 30 days, other service logs for 90 days, then deleted automatically. These logs do not record viewers' IP addresses.

Cookies

Every cookie retide sets is strictly necessary to provide the service you requested (§ 25 Abs. 2 TDDDG), which is why there is no consent banner:

No cookies are set for analytics, advertising, or tracking. The public landing page sets no cookies at all.

Your rights

Under the GDPR you can request access to your data (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), a portable copy (Art. 20), and you can object to processing based on legitimate interest (Art. 21). Write to hello@retide.net.

You can also complain to a supervisory authority. The one responsible for retide is the Sächsische Datenschutz- und Transparenzbeauftragte, Devrientstraße 5, 01067 Dresden, Germany.

What retide doesn't do

No automated decision-making or profiling. No sale or sharing of data for advertising. No processing beyond what this page describes.

Changes

When the service changes in a way that affects your data, this page changes with it. The current version always lives at this address.