Privacy policy
Last updated 30 October 2026
This policy covers the software and services run by VODLABS LLC ("VodLabs",
"we"): the vodlabs.io website, the VodLabs Recorder app and its vod
command-line tool, the VodLabs service the recorder connects to, VodLabs
accounts (auth.vodlabs.io), the hosted dashboard (dashboard.vodlabs.io), and
any other VodLabs app, site or service that links to it. Where a product
handles data in a way this policy doesn't yet describe, we add a section for
it here before it launches.
The short version
- Recording with VodLabs Recorder happens on your computer. Video goes straight from the platform to your disk, and we never receive it.
- Your platform logins stay on your computer, encrypted. We never receive them.
- The VodLabs service tells your recorder when the streamers you follow go live. To do that, it knows which streamers you follow.
- The service is free. In return, your recorder runs some live checks for other users, from your IP address.
- A VodLabs account is optional. If you make one, with an email address or by signing in with Google or Apple, we keep your email address and name, and use them only to run your account.
- We don't sell your data, and we don't use it for advertising.
VodLabs Recorder and the VodLabs service
The recorder's own documentation, What the recorder sends to VodLabs, describes all of this in detail, with links to the code that does each part, so you can check it for yourself. In summary:
What stays on your device
- Your recordings, and the names and paths of your folders. If you link your recorder to an account, the dashboard shows you your recording list and settings (see Linking your recorder), but the recordings themselves stay on your computer.
- Your platform logins, encrypted with a key kept in your system's keychain.
- Your settings, disk usage and logs. The logs stay on your computer until you send them yourself, by email or with a bug report.
What the recorder sends to the service
| What | Why |
|---|---|
| A client ID: the public half of a key your recorder generates for itself. Unless you link the recorder to an account, it isn't linked to your name or email. | To tell recorders apart, and to verify that requests are really from yours. |
| The streamers you follow, as platform and username, and any link you paste to add one. | To tell you when they go live, and to work out which streamer a link names. |
Your app version, operating system and CPU type, and whether the app or vod started the recorder. |
To tell you about updates, and to stop serving versions that no longer work. |
| Your IP address. | To limit how much one address can use the free service, and for shared checks (below). |
| That a recording of a streamer stalled. | So the service can check the stream again and give your recorder a fresh link. |
Whether a streamer is live, and their profile picture, are shared with everyone who follows that streamer: that is public information on the platform.
The recorder also connects to the streaming platforms, to record; to GitHub, to download updates; to VodLabs' image server, for streamers' profile pictures; and to Sentry, only for the error reports you turn on and the bug reports you send.
Checks your recorder makes for the service
Some live checks only work from your computer: stream links are often tied to the address that asks for them, and signed-in checks need your platform login, which only your computer has. For these, the service sends your recorder a request to make, and your recorder sends back the result. The recorder itself enforces strict limits on these requests: only the platforms' own sites, never your local network, a fixed rate, and only the parts of a reply the check needs. Your login is only ever attached to requests for its own platform, and the results of checks made with it go only to you.
Shared checks: what the free plan asks in return
So that the free service stays affordable, your recorder also checks whether some streamers other users follow are live, from your IP address. Platforms see those requests coming from your address. They follow the same limits as your own checks, and your logins are never used for them. While your recorder is connected, the service keeps your IP address on the list of addresses it can run checks from, and removes it when you disconnect.
VodLabs accounts
You don't need an account to use the recorder. An account lets you link your recorder and control it from a web browser at dashboard.vodlabs.io. You can create one at auth.vodlabs.io with an emailed code, an email address and password, Google, or Apple.
For your account, we keep:
- your email address, and whether you have confirmed it;
- your name and profile picture, if you give them or your Google or Apple account provides them;
- a hash of your password, if you set one (never the password itself);
- which sign-in methods you use, and the ID Google or Apple gives your account there;
- your signed-in sessions, each with the IP address and browser it was started from;
- when the account was created and last changed.
We use this to sign you in, keep your account secure, show which account you're signed in as, and send you emails about your account, such as sign-in codes. We don't send marketing email.
To protect accounts, the sign-up and sign-in forms use Cloudflare Turnstile to tell people from bots. When you set a password, we check it against Have I Been Pwned's list of leaked passwords: only the first five characters of the password's hash leave our service, so the password itself is never sent.
Signing in with Google
When you sign in with Google, we ask Google only for your basic profile: your
name, email address, and profile picture (the openid, email and profile
scopes). We don't ask for access to your Gmail, Drive, contacts, calendar, or
any other Google data.
We use what Google provides only to create your account, sign you in, and show who you're signed in as. The tokens Google issues at sign-in are stored encrypted and used for nothing else. We don't sell this data, share it with anyone except the service providers listed below that help us run VodLabs, use it for advertising, or use it to train AI models. People at VodLabs read it only when you ask us to, to keep VodLabs secure, or when the law requires.
VodLabs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove VodLabs' access at any time from your Google Account's third-party connections page. That stops Google sign-in for VodLabs; to delete the account itself, see Deleting your data.
Signing in with Apple
When you sign in with Apple, Apple gives us your email address and, the first time, the name you choose to share. If you choose Hide My Email, we receive an address at privaterelay.appleid.com, and emails we send you go through Apple's relay; we never see your real address. We use what Apple provides the same way as Google's above, and nothing else.
You can stop using Sign in with Apple for VodLabs in your Apple Account settings, under Sign in with Apple. To delete the account itself, see Deleting your data.
Linking your recorder
To link, your recorder shows a code, and you confirm it on the dashboard while signed in. For the few minutes the code is valid, the service holds it with your recorder's client ID, computer name and app version, so the dashboard can show you which recorder you are linking. Once linked, the service keeps:
- the link between your account and your recorder's client ID;
- your account's email address, to show in the recorder which account it is linked to;
- if you have the service record streamers in the cloud for you, the list of those streamers.
While you use the dashboard, it shows what the recorder's own screens show: your streamers, your recording list, your settings and the recorder's status. That passes from your recorder through the service to your browser as you use it, and the service doesn't keep it. Your recordings and platform logins are never sent: the dashboard lists recordings but can't play or download them.
You can unlink at any time, from the recorder or the dashboard.
This website, the dashboard and sign-in pages
vodlabs.io sets no cookies and runs no analytics. auth.vodlabs.io and dashboard.vodlabs.io set only the cookies and browser storage needed to keep you signed in. All three are served through Cloudflare, which processes your IP address and browser details to deliver them and protect them from attacks. If you email us, we keep your message and address to reply.
Error reports
When something goes wrong in the VodLabs service or the dashboard, it sends an error report to Sentry so we can find and fix the problem. A report says what failed and where in our code, which version was running, and, from the dashboard, the page you were on and your browser and operating system. It can include what was on that page or in the request, such as streamer names, client IDs and your IP address. Reports leave out cookies and sign-in tokens.
From the recorder
The recorder sends error reports only if you turn them on. It asks once, and
you can change your answer at any time in its settings, or with
vod config error-reports. While they are on, the recorder sends a report
when it logs an error or crashes. A report says what failed and where in our
code, with the log lines just before it, the recorder's version, your
operating system and CPU type, and your IP address. It can include what the
error names, such as a streamer or a folder. Before a report leaves your
computer, the recorder removes your user name from folder paths, your
computer's name, email addresses, sign-in tokens and the query part of web
addresses. Your platform logins are never in a report.
Bug reports
When you send a bug report from the recorder, it holds what you write, your recorder's client ID, its version, your operating system and CPU type, and your IP address. If you choose, it also holds the end of the recorder's logs, which can include the streamers you follow, your folder names and the addresses the recorder connected to, with the same things removed as above. Bug reports are sent only when you send one, whether or not error reports are on.
How long we keep it
- Your recorder's client record and streamer list: until your recorder has been out of touch for 90 days. If it is linked to an account, until you unlink it, or a year after it was last in touch.
- IP addresses the service sees from your recorder: 30 days after your recorder was last connected.
- If we block a recorder or an IP address for abuse: its client ID or that address, with our reason, for as long as the block lasts, then 30 days more.
- Your account: until you delete it.
- Signed-in sessions, with their IP address and browser: until you sign out, or 30 days after you last used them.
- Sign-in and link codes: until used, or a few minutes at most.
- Service logs, which can include IP addresses and streamer names: overwritten as they fill up.
- Error reports and bug reports: up to 90 days.
- Backups: the account database's for 30 days, and encrypted backups of the service's database for up to three months.
Who else handles it
We use these providers to run VodLabs. They process data only to provide their services to us:
- Cloudflare, for our network, the website, the dashboard, the account service and its database, the emails we send, and Turnstile.
- Hosting and backup storage providers, for the VodLabs service.
- Sentry, for error reports from the VodLabs service, the dashboard and, if you turn them on, the recorder, and for bug reports.
- Google and Apple, if you sign in with them. Their own privacy policies cover what they do when you use them to sign in.
We don't sell or rent personal data, and we disclose it only when the law requires.
Legal bases
Where data protection law such as the GDPR applies, we process this data to provide the service and account you ask for, and for our legitimate interest in keeping them secure, fair and free of abuse.
Your choices and rights
You can stop using the recorder at any time; its data is then deleted on the schedule above. You may also ask us to access, correct or delete your data, or object to how we use it, by emailing [email protected]. Without an account, the service doesn't know who you are, so we may ask for details, such as the streamers you follow, to find your data. You may also complain to your local data protection authority.
Deleting your data
- Without an account: when you stop using the recorder, the service deletes your client record, and the streamer list that goes with it, once your recorder has been out of touch for 90 days. IP addresses go after 30, except in error reports and bug reports, which go within 90.
- With an account: email [email protected] from the account's address, and we will delete the account, its sign-in methods and sessions, and unlink your recorder. Deleted data leaves our backups within the times above.
A button to delete it all at once, in the recorder and on the dashboard, is planned.
Age requirement
You must be at least 18 to use VodLabs Recorder, VodLabs accounts, or any other VodLabs software or service. We don't knowingly collect data from anyone under 18, and we delete it if we learn we have.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll say so in the app or on this site.
Contact
VODLABS LLC, [email protected].