Privacy policy
retide stores what it needs to run your streams, and nothing for advertising. No analytics, no tracking, no ad networks — and no cookie banner, because every cookie retide sets is required for the service to work.
Who is responsible
Controller under Art. 4(7) GDPR:
Paul Galow
Bielastr. 38
04178 Leipzig
Germany
Email: hello@retide.net
Requests about your data go to the same address.
Where your data lives
retide runs on Amazon Web Services in Frankfurt, Germany (region eu-central-1). Streams and pages are delivered through Amazon CloudFront, a content delivery network with servers worldwide, so video reaches viewers with low delay. AWS acts as a processor under a data processing agreement; transfers outside the EU are covered by the EU–US Data Privacy Framework and EU standard contractual clauses. (Processor: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.)
What retide processes
If you broadcast (account holders). Your email address and sign-in credentials, managed through AWS Cognito; your sessions, invites, and settings; and the video you stream. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
If you watch. Viewers need no account. When you open an invite link, retide processes the invite token and your IP address to deliver the stream to you — the IP is used transiently for delivery and is not stored in access logs. Legal basis: performance of the contract with the broadcaster and retide's legitimate interest in delivering the stream you were invited to (Art. 6(1)(b) and (f) GDPR).
Recordings. If a broadcaster records a session, the recording is stored encrypted in Frankfurt and deleted automatically 45 days after the stream. Live stream segments are deleted within one day.
Technical logs. Servers write operational logs (what happened, when, and whether it worked) to diagnose faults. Streaming logs are kept for 30 days, other service logs for 90 days, then deleted automatically. These logs do not record viewers' IP addresses.
Cookies
Every cookie retide sets is strictly necessary to provide the service you requested (§ 25 Abs. 2 TDDDG), which is why there is no consent banner:
| Cookie | Purpose | Lifetime |
|---|---|---|
| id-token, refresh-token | Keeps broadcasters signed in | Session / sign-in period |
| viewer-token, viewer-org, viewer-session | Lets an invited viewer reach their stream | Duration of the visit |
| CloudFront-Policy, CloudFront-Signature, CloudFront-Key-Pair-Id | Authorizes video delivery to invited viewers | Duration of the visit |
No cookies are set for analytics, advertising, or tracking. The public landing page sets no cookies at all.
Your rights
Under the GDPR you can request access to your data (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), a portable copy (Art. 20), and you can object to processing based on legitimate interest (Art. 21). Write to hello@retide.net.
You can also complain to a supervisory authority. The one responsible for retide is the Sächsische Datenschutz- und Transparenzbeauftragte, Devrientstraße 5, 01067 Dresden, Germany.
What retide doesn't do
No automated decision-making or profiling. No sale or sharing of data for advertising. No processing beyond what this page describes.
Changes
When the service changes in a way that affects your data, this page changes with it. The current version always lives at this address.