Privacy Policy
Last updated: 22 July 2026 · Applies to babyphone.online
The short version: your baby's video and audio stream directly between your own two devices (peer-to-peer, via WebRTC). The stream is never stored, never recorded by us, and never passes through or is seen by our servers. There are no accounts, no ads, and no tracking.
1. Who we are
BabyPhone.online is operated by Arcana Synthetica, Harlingen, The Netherlands, registered with the Dutch Chamber of Commerce under number 42115786 ("we"). We are the data controller for the limited processing described below. Contact: info@babyphone.online.
2. What BabyPhone.online does
BabyPhone.online turns two of your own devices into a baby monitor inside the browser. One device (the baby unit) captures camera and microphone; the other (the parent unit) shows the live stream. The connection between the two devices is made with WebRTC and is encrypted end-to-end in transit (DTLS-SRTP).
3. What data is processed — and what is not
- Video and audio: streamed directly from your baby unit to your parent unit. We do not receive, store, record, or have any access to this stream. If you use the local recording feature, recordings are saved only on your own device.
- Room code: a random 6-character code used to pair your two devices. It identifies a session, not a person, and expires when you close the app.
- Language preference: stored in your browser's localStorage on your own device. It never leaves your device.
- No accounts, no profiles: we do not ask for your name, email address, or any registration to use the monitor.
- No analytics, no advertising, no tracking cookies.
4. Connection helpers (third parties)
To let your two devices find each other, the app uses a small set of connection helpers. These services help establish the connection but do not receive your video or audio:
- Pairing broker (PeerJS): exchanges the technical connection details ("signaling") between your two devices when you enter the room code. It processes your IP address and the room code for the duration of pairing.
- STUN/TURN servers: help your devices connect across different networks (e.g. wifi to 4G/5G). STUN only sees your IP address. If a direct connection is impossible, an encrypted TURN relay may forward the encrypted stream — the relay cannot decrypt or view it.
Legal basis for this processing: performance of the service you request (Art. 6(1)(b) GDPR) and our legitimate interest in providing a reliable connection (Art. 6(1)(f) GDPR).
5. Children
BabyPhone.online is a tool for parents and legal guardians to monitor their own child. It is operated by the parent/guardian and is not directed at children as users. We do not knowingly collect any personal data from children — the video/audio of your child streams only between your own devices and is never received by us.
6. Payments (Plus subscription)
If you purchase a Plus subscription, payment is handled by our payment provider (Stripe). Stripe processes your email address and payment details under its own privacy policy; we receive only a confirmation of your subscription status linked to your email address, which we use solely to activate your Plus features. We never link payment data to your monitoring sessions.
7. Retention
We store nothing about your monitoring sessions, so there is nothing to retain or delete. Subscription records (if you purchase Plus) are kept as long as legally required for tax and bookkeeping purposes (7 years in the Netherlands).
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. Because we hold no data about your monitoring sessions, these rights mainly apply to subscription data. To exercise them, contact info@babyphone.online. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
9. Changes
We will post any changes to this policy on this page with an updated date. Material changes will be announced in the app.