Privacy

What Voxi holds, where it lives, and how long.

What is collected

What	Why	Where it lives	How long
Your account	Signing in, and owning a channel	Clerk, our login provider	Until you delete it
Your username	It is your channel name and your address on Voxi	Clerk, and in the link you share	Until you delete your account
Your video and audio, while you broadcast	Reaching the people watching	Passed through a relay to viewers	The length of the broadcast
Chat and reactions	Carrying them to the room	Held in memory while the room is open, and passed on	The moment they are delivered
A count of who is watching	The viewer number a broadcaster and a room both see	Derived from the open connections	While the room is open
Your network address, as a rate-limit bucket	Keeping one person from flooding a room	Attached to your connection: the IPv4 address, or the IPv6 /64	Until you disconnect
How long you have watched, if you are not signed in	Keeping the five minutes a stream and fifteen minutes a day that a signed-out visitor gets	Times and durations against the same network address as the row above. No channel, no stream, no name: it can say how long, never what	24 hours from each entry, then deleted
Your channel's listing, if you make it public	Showing it on the front page	Channel name and title	Until your broadcast ends or you make it private. If we deploy an update mid-broadcast the row outlives the disconnect, and the next read of the front page checks it against a live broadcast and drops it
A session cookie	Keeping you signed in, and proving the channel is yours when you broadcast	Your browser, first-party, named `__session`. It holds a signed token, not your password	About a minute; your browser replaces it while you are signed in
Your ambient setting	Remembering how much light you want around the video	Your own browser, under `voxi.ambient`	Until you clear your browser data
A sign-in loop guard	Keeping a bookmarked link from bouncing you back here more than once	Your own browser, under `voxi.resume`	Until you close the tab

Faces and avatars

The avatar is off until you turn it on. The control is Avatar overlay from the camera in the studio, and turning it on is where we set out what is read and ask you to agree to it. Nothing opens your camera for the avatar before that.

The reading happens on your own machine. What leaves it is movement — a set of numbers describing how much each expression is showing — and those numbers drive the avatar a viewer sees.

We treat those numbers as biometric data, because expression dynamics describe a person's face even after they have stopped being a picture.

Who else is involved

Clerk holds accounts and sessions.
Cloudflare runs the edge that serves these pages, the rooms, and the relay that carries video and audio between a broadcaster and the people watching.
Paddle takes the payment when you buy Vibes or a membership, as merchant of record. What you enter at their checkout goes to them. We send that checkout your account identifier and the email you signed in with, so what you bought reaches your channel.

Deleting your account

Account deletion is in your account settings, through the profile control in the header when you are signed in. Deleting the account removes the identity and the username, which releases the channel name.

If you would rather ask a person, write to privacy@voxi.live.

Asking us anything

privacy@voxi.live reaches a person. Tell us the account and what you want, and we will answer.