Privacy Policy
Effective Date: January 1, 2026
Last Updated: October 18, 2025
TL;DR
- ✅ Your footage stays on your hardware, not our servers
- ✅ We never sell your data
- ✅ No cloud uploads unless you explicitly choose them
- ✅ Optional relay service is zero-knowledge encrypted
- ✅ We collect minimal analytics—only what is needed to improve the software
1. Data We Collect
1.1 Self-Hosted Users (Free Tier)
If you self-host the Webcam.org Hub, we collect:
- Nothing. Your Hub runs entirely on your hardware. We have no access to your footage, camera credentials, or network.
- Optional: Anonymous crash reports (if you opt in during setup).
1.2 Relay Service Users ($5/mo tier)
If you use our optional relay service for remote access:
- Account email (for billing and support)
- Payment info (processed by Stripe—we never see your card number)
- Relay connection metadata: IP address, connection timestamps, bandwidth usage (for abuse prevention)
- Video streams are end-to-end encrypted. We cannot decrypt or view your footage.
2. How We Use Your Data
- Account management: Send invoices, password resets, and service updates
- Abuse prevention: Block malicious IPs, detect unauthorized relay usage
- Service improvement: Anonymous analytics on feature usage (no personally identifiable info)
We will NEVER:
- Sell your data to advertisers or data brokers
- Share your footage with law enforcement without a valid warrant
- Train AI models on your camera data
- Use your data for any purpose not listed here
3. Data Storage & Security
- Self-hosted users: All footage is stored on your local disk/NAS. We have zero access.
- Relay users: We store only minimal metadata (connection logs, billing info). Encrypted video streams pass through our relay but are never recorded or decrypted.
- Backups: If you enable optional cloud backup, footage is encrypted client-side before upload. We cannot decrypt it.
4. Third-Party Services
We use the following third-party services:
- Stripe: Payment processing (relay subscriptions)
- Cloudflare: DDoS protection and CDN for our website
- Plausible Analytics: Privacy-friendly website analytics (no cookies, no tracking)
We do not use Google Analytics, Facebook Pixel, or any invasive tracking scripts.
5. Law Enforcement Requests
We are not in the business of helping law enforcement access your cameras. However, we are legally required to comply with valid court orders.
- If we receive a subpoena or warrant, we will notify you before complying (unless prohibited by law).
- We will only provide metadata we actually have (e.g., relay connection logs, billing email).
- We cannot provide footage from self-hosted users because we do not have it.
- For relay users, video is end-to-end encrypted—we cannot decrypt it even if ordered to.
We publish a transparency report annually.
6. Your Rights
Under GDPR and CCPA, you have the right to:
- Access your data: Email us at privacy@webcam.org for a copy of what we have.
- Delete your data: Cancel your relay subscription and request account deletion.
- Opt out of analytics: Disable crash reports in Hub settings.
- Port your data: Export your settings and camera configs anytime (self-hosted users already have this).
7. Data Retention
- Relay connection logs: 90 days, then automatically deleted
- Billing records: 7 years (required by law for tax purposes)
- Support tickets: 2 years, then archived
- Your footage: Never stored by us (except optional encrypted backups, which you control)
8. Children's Privacy
Webcam.org is not intended for use by anyone under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us immediately.
9. Changes to This Policy
We may update this policy occasionally. Changes will be posted here with a new “Last Updated” date. Material changes will be emailed to relay subscribers.
View the full history of this policy on GitHub.
10. Contact Us
Questions about this policy?
- 📧 Email: privacy@webcam.org
- 📬 Mail: Webcam.org Privacy, 123 Open Source Way, San Francisco, CA 94103