UPDATED SEPTEMBER 10, 2026
Your family's data.
Watch Cub is a parent-operated family watchlist with an optional Chrome companion. This notice covers parent account creation, verification and recovery emails, the website and companion.
What Watch Cub uses
The website uses the parent's email and account authentication, a hashed parent PIN, child nicknames and chosen symbols, approved titles and public links, selected services and country, shelf schedules, connected computers, and minimal playback events. Children do not create accounts. We do not ask for their birthdates, contact details, location, camera, microphone, or advertising identifiers.
What the companion can access
The companion communicates with Watch Cub to follow the selected family profile and check that a timed pick is still allowed. It uses short-lived authorization tokens, the selected profile's label, the approved destination, and its return address. It does not read parent passwords, PINs, account cookies, provider logins, page contents, or video streams.
Chrome local storage remembers selected sites, browser setup, the selected profile, and its server-checked authorization token. Profile state can survive a restart, but expired or revoked permission cannot unlock sites. Playback tokens and temporary parent browsing exceptions use session storage, which clears when Chrome exits. The companion also keeps only the numeric IDs of currently open protected-site tabs in session storage, without their URLs, so a tab opened as Parent can be returned to the shelf when a child is selected. The ID is removed when that tab leaves the site or closes. Alarms recheck permission and end timed windows. Required YouTube host access lets Chrome redirect direct top-level visits to the shelf and gives only the signed managed tab its temporary exception. Optional access to additional sites does the same for those exact domains. No provider content scripts are installed.
Companion 0.6.0 uses Chrome's navigation permission for exact-pick protection and profile-transition relocking. It discards unrelated top-level events immediately. When a configured provider tab navigates or is selected, it keeps only the temporary tab ID described above; for the one managed pick it also evaluates the destination. For an approved channel or playlist it may send only a candidate public YouTube video ID to Watch Cub so the server can verify membership. It saves no browsing history, reads no page contents and does not inspect which provider account is signed in.
Services that process data
Vercel hosts the website and Supabase provides account authentication and database storage. Requests to these services necessarily include network information such as an IP address. Watch Cub uses bounded request keys for abuse prevention. Parent catalog searches send search text and country to the official catalog sources, without child nicknames or household IDs.
Resend delivers parent verification and password-recovery emails on our behalf. It processes the recipient email address, authentication message and delivery information. Child nicknames and viewing activity are not included in these emails. Email link tracking is disabled.
Selecting an approved YouTube video loads YouTube's embedded player. Google then handles that connection under its own privacy policy and YouTube terms. External streaming services handle their own playback, accounts, recommendations, and advertising. Watch Cub does not sell family data or use it for advertising, credit decisions, or behavioral analytics.
Retention and removal
Playback activity expires after 30 days. Profiles, shelves, approvals, and saved picks remain until the parent removes them. YouTube titles and images refresh on parent access or are removed before 30 days; approved public links remain. The family account can be remembered for up to 30 days. A verified Parent selection lasts until that family session expires, unless you switch profiles, sign out, reset your PIN, or the session is revoked.
In Parent controls, use Child settings to disconnect computers or delete a child and their associated data. Parent account → Delete all family data removes shelves, picks, approvals, connections, and activity. This leaves the parent sign-in available to start again. Use Download family data in Family settings to export your stored family records without passwords, PINs or session secrets. Removing the Chrome companion clears its local setup; it does not delete the website's family data. For account access or data questions contact support@watchcub.com.