privacy

TuckPlay lets you sign in with X, load native X bookmark videos, and watch them later. This policy explains which data we process to provide that service.

You create a TuckPlay session by signing in with X (OAuth). We receive the X user id, handle, and display name that X returns, plus OAuth access and refresh tokens needed to call the X API on your behalf.

We store those OAuth tokens server-side, encrypted at rest, so we can sync bookmarks when you ask us to. We do not use your X account to post, follow, or message.

When you tap Load bookmarks, we read your bookmarks via the X API and keep native X videos in your library. We store video watch progress so a title can be marked watched at 90% playback, leave Watch Later, and remain under All saved.

The free tier may show ads. If you later subscribe to optional Stripe ad-free, we process the X user id, a Stripe customer id, and subscription status so we can hide ads. Stripe processes payment details under its own terms. No live charges are taken until that feature is turned on.

Necessary cookies and local storage keep your session, language, and cookie choice on this device so the app can remember that you are signed in. These are required for TuckPlay to work.

Analytics cookies are off unless you opt in. TuckPlay does not load an analytics product today; if we add measurement later, it will respect this choice.

Advertising cookies (Google AdSense) load only after you accept advertising in the cookie banner and, for users in the EU, UK, and Switzerland, after Google’s Consent Management Platform (Funding Choices) records TCF consent. Ad-free accounts do not load ads.

The free tier may show Google AdSense ads. Google is an independent controller/processor for ad serving. Personalized ads in the EEA, UK, and Switzerland require a Google-certified CMP; TuckPlay uses Google Funding Choices / Privacy & messaging for that TCF consent.

You can change cookie settings or reopen Google ad privacy from Settings. See also Google’s privacy policy at https://policies.google.com/privacy.

We do not sell personal data. We do not share your X bookmarks, tokens, or watch progress with advertisers or data brokers.

You can disconnect X from Settings (sign out / remove the connected account). To request deletion of your TuckPlay account and stored tokens, email David_Kogan@hotmail.de. We will delete server-side OAuth tokens, library rows, and watch progress tied to your X user id, unless a short legal retention duty applies.

We process this data to perform the service you request (Art. 6(1)(b) GDPR) and, where required, our legitimate interest in running a stable, secure app (Art. 6(1)(f) GDPR). Tokens and library data are kept while your account stays connected and removed when you disconnect or we complete a deletion request.