This policy covers Berryporch browser calls. The native Berrynook app’s App Store / Play listing Privacy Policy URL remains the Privacy Policy.

Berryporch — Privacy Policy

Last updated: August 12, 2026

How Berrynook products differ

Product	What it is	Policy
Berrynook VPN	Encrypted tunnel in the Berrynook app, plus the auth-server account	Privacy · AUP
Berrynook Cloud	Private browser workspace at berrynook.cc (VPN required in production)	Privacy · Terms
Berryporch	Short 1:1 browser calls at meet.berrynook.cc	Privacy · AUP

Berryporch is a Berrynook service on a separate host and data plane from private Cloud. Guests never get a Cloud login from a call or from watching a screen share (pixels only).

1. Overview

Berryporch provides short one-to-one browser calls between a Berrynook member (host) and an external guest invited by email. This policy describes how we process data for Berryporch. It does not replace the Privacy Policy or Cloud Privacy.

2. Controller

The controller is Gray Whale and Blue Heron Co., British Columbia, Canada.

Privacy and support: help@berrynook.cc. Abuse: abuse@berrynook.cc.

Members may request deletion of their auth-server / VPN account at gate.berrynook.cc/delete-account.

3. Data we process

Category	Examples	Purpose
Host Meet account	Meet userid (`bp-*`), display name, language, theme	Host login to Meet, settings, call UX — these settings persist across sessions
Guest contact	Guest email on the auth server; OTP challenge metadata	Invite delivery and mailbox proof to join
Guest Meet account	Short-lived Meet userid (`bg-*`)	Join the Talk room; removed after session cleanup
Session metadata	Session id, room token, display names, expiry, revoke/end times	Operate and end the call (not chat content)
Call content	Live chat and shared files in the Talk room during the call only	Real-time conversation — not archived; deleted when the session ends
Operational logs	Create, OTP send/verify, join, revoke events (redacted)	Security, abuse prevention, uptime

We do not use Berryporch data for advertising. Screen share sends pixels (and optional tab audio) to the other participant; it does not grant Cloud access.

4. Where data lives

Auth server (US) — session metadata rows, guest email, OTP/token hashes
Meet host (meet.berrynook.cc) — host Meet account and settings; Talk rooms and guest users only while the call is active
Email — invite and OTP messages via Proton

5. Retention and cleanup

When a session ends (host ends the call or TTL expires), we delete the Talk room (including chat), the guest Meet user, and call debris in the host’s Talk folder.
We do not save chat or shared files as a product archive for the host or the guest. Copy anything you need before you leave.
The host Meet account (bp-*) and hub settings (display name, language, theme) remain for the next invite.
Auth-server session metadata (guest email, session times, OTP/token hashes — not chat) is kept for security and abuse prevention. It is deleted when the host’s auth-server account is deleted, or earlier on request when feasible.

6. Subprocessors

Infrastructure hosting provider, Meet hosting, Proton Mail (email), Let's Encrypt / Caddy (TLS). No third-party advertising or analytics SDKs on Berryporch pages.

7. Your rights

Hosts and guests may request access, correction, or deletion related to Berryporch via help@berrynook.cc. Members can also use account deletion for auth-server / VPN accounts.

8. Security

Report abuse to abuse@berrynook.cc.