Privacy notice

Scope

Tail.surf is operated by Bandar Systems Inc. This notice describes processing specific to tail.surf.

Data we process

• Stream content. The records and headers you submit.
• Service metadata. Stream settings and timestamps, access-link permissions and state, and credential hashes.
• Operational data. Request timing and outcomes, errors, service pressure, and network data such as IP address and user agent.

We do not store raw access-link secrets in service metadata. Application logs do not include stream content or access-link credentials.

Browser storage

Tail.surf does not require an account and does not use advertising cookies.

The browser temporarily uses session storage during stream creation and credential handoff.

How we use and share data

We use data to provide the service, authorize access, enforce limits, investigate failures and abuse, secure the service, and comply with law.

Service providers process data only as needed to host and operate tail.surf. Tail.surf does not run third-party advertising or client-side product analytics.

Tail.surf runs on Vercel and Amazon Web Services in the United States. Stream records are stored in S2, our own storage service, which also runs on AWS. We do not sell personal data.

International transfers and legal basis

Data is processed in the United States. Where GDPR applies, we process data to provide the service you request and for our legitimate interests in securing and operating it.

Retention and deletion

Stream content remains until the stream expires or an owner deletes it. Streams expire after 10 days by default. Removal after expiry or deletion is asynchronous.

Inactive access metadata remains for 30 days. Limited records of deleted streams remain for 90 days. Operational data is kept only as long as needed to run and protect the service.

Your choices and rights

Use private streams and narrow, expiring links. Revoke links that are no longer needed. An owner can delete the complete stream. Individual append-only records cannot be edited or deleted separately.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict processing. Tail.surf has no accounts, so we can act only on data we can associate with your request, such as a stream you control.

To exercise a right or ask a privacy question, contact privacy@s2.dev. You may also complain to your local data protection authority. See Trust for the access model and other contacts.