Privacy Policy

This Privacy Policy ("Policy") explains how D&M Collective LLC ("React Sync," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the React Sync website and web application at www.react-sync.com, the React Sync Chrome Extension (the "Extension"), and all related services (collectively, the "Services"). It is designed to comply with applicable United States privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the California Online Privacy Protection Act, the Children’s Online Privacy Protection Act ("COPPA"), and the CAN-SPAM Act, and it also serves as our cookie policy (Section 5). It does not cover third-party services you use with React Sync, which have their own privacy policies. By using the Services, you agree to this Policy. If you do not agree, do not use the Services.

Account information. When you register, we collect your display name, first and last name, email address, date of birth, email and login credential. Your date of birth is used solely to verify that you meet our minimum age requirement and is not used for marketing or profiling. With your permission, we may also record your consent if you opt-in to receive notification emails from the platform.

Patreon sign-in. If you sign in through Patreon or a similar platform, we receive your account identifier, name, email address, and membership or tier status to authenticate you and verify access to gated content. We do not receive your Patreon password or payment details.

Payments. Purchases made directly on React Sync are processed by third-party payment processors. We do not collect or store full payment card numbers. We receive limited transaction records (item, amount, date, and transaction identifier) for fulfillment, receipts, and fraud prevention.

Content you submit. Comments, profile information, participation in interactive features, and messages you send us.

Automatic data. IP address, browser and device type, pages viewed, timestamps, session identifiers, and your activity within the platform, used to operate, secure, and improve the Services.

We do not knowingly collect sensitive personal information as defined by the CPRA.

We use this information to create and manage your account and to verify your age. We use it to provide the Services, including synchronized playback, gated content, personalized feeds, and viewing history, and to verify membership entitlements and process purchases. We also use it to send service and transactional emails and, with your consent, notification emails (Section 6). In addition, we use this information to secure the Services, prevent fraud and abuse, enforce our Terms of Service, improve the Services, and comply with legal obligations. We do not sell your personal information and do not use it for cross-context behavioral advertising.

We disclose personal information in limited circumstances. We share it with service providers under contracts limiting their use of the information to providing those services, and with Patreon or a similar platform as needed to authenticate you and verify membership. Creators may see your public profile (such as a display name) where you interact publicly, and aggregate content metrics for their own posts. If you are a member or subscriber of a creator (via React Sync native membership or a linked Patreon entitlement), that creator may also see limited account contact fields—display name, first and last name, and email—solely to manage membership access and provide support (for example, resolving access issues). Creators do not receive your date of birth. We may disclose information to authorities or other parties where required by law or reasonably necessary to protect the rights, property, or safety of React Sync, our users, or the public. We may also disclose information to a successor entity in a merger, acquisition, or sale of assets, subject to protections at least comparable to this Policy. We do not sell, rent, or trade personal information.

The website and web application use only strictly necessary cookies and browser local storage: session and authentication tokens that keep you signed in, security tokens, and stored preferences. These are required for the Services to function. You can clear them through your browser settings, which will sign you out and reset your preferences, and blocking them may prevent parts of the Services from working. We do not currently use analytics cookies or third-party analytics. If we introduce them, we will update this Policy to identify the tools and provide any legally required notice, consent, or opt-out mechanisms. We do not use advertising or tracking cookies and do not permit third parties to collect information across the Services for their own purposes.

The Extension operates within your browser and does not collect, store, or transmit personal information, browsing history, playback activity, device identifiers, or IP addresses to us or any third party. It uses Chrome’s extension storage API only to save non-personal, on-device configuration state, which remains on your device and can be cleared by uninstalling the Extension or clearing its data in your browser settings. The Extension requests only the permissions needed for synchronization: Tabs, Active Tab, Host Permissions limited to the React Sync domain and supported streaming platforms, Storage, Scripting, Web Navigation, and Windows/System Display. These permissions are used to operate the Extension and are not used to monitor your activity or transmit your data. To synchronize playback, it temporarily reads video playback state (timestamps and player controls) on supported streaming sites. That data is processed locally in real time and is not stored, uploaded, or shared.

Service and transactional emails (account verification, security alerts, receipts, material policy changes) are part of operating the Services and cannot be opted out of while you maintain an account. Notification and promotional emails are sent only with your permission, and you may withdraw consent at any time via the unsubscribe link in every such email or your account settings. We honor opt-outs promptly, consistent with the CAN-SPAM Act.

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. We collect date of birth at registration to enforce this requirement and block signups by users under 13. Users under 18 may use the Services only with a parent’s or guardian’s permission. If we learn we have collected personal information from a child under 13, we will delete it and terminate the account promptly, consistent with COPPA. Parents or guardians may contact us at deeandmeesh@gmail.com.

We retain personal information while your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. Information no longer needed is deleted or de-identified. You may delete your account at any time through your settings or by contacting us, and upon a verified request we will delete your personal information except where retention is permitted or required by applicable law, with residual encrypted backup copies purged on our normal cycle. We use commercially reasonable safeguards, including encryption in transit, access controls, hashed credentials, and least-privilege permissions, though no method of transmission or storage is completely secure. In the event of a security incident affecting personal information, we will investigate and notify affected users and regulators as required by applicable law.

If you are a California resident, the CCPA/CPRA gives you certain rights, subject to certain exceptions. You have the right to know and access the personal information we have collected about you, including its sources, purposes, and recipients, and the right to request that we delete or correct that information. You also have the right to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of, and if that ever changes, we will update this Policy and provide the required mechanisms. You have the right to limit the use of sensitive personal information. We use your date of birth only for age verification, which is a permitted purpose. You will not be discriminated against for exercising any of these rights. Residents of other states with comprehensive privacy laws have similar rights, and we do not engage in targeted advertising, data sales, or profiling with legal effects.

To exercise these rights, email deeandmeesh@gmail.com with the subject "Privacy Request." We will verify your identity and respond within the timeframes required by law. You may use an authorized agent with proof of authorization. Under California’s Shine the Light law, we do not disclose personal information to third parties for their direct marketing purposes. Since we do not sell or share personal information or track users across third-party sites, Global Privacy Control and Do Not Track signals do not change how we process your information. If our practices change, we will honor GPC as required by law.

The Services are operated from the United States, and information is stored and processed in the United States, where privacy laws may differ from those of your jurisdiction. If you use the Services from outside the United States, you consent to this transfer and processing and are responsible for compliance with the laws applicable to you.

We may update this Policy from time to time. We will revise the Effective Date above and, for material changes, provide prominent notice through the Services or by email before they take effect. Continued use after changes take effect constitutes acceptance. This Policy is governed by California law and remains in effect until replaced by a version with a later Effective Date. If any provision is found unenforceable, the remainder stays in effect.

Your use of the Services is also governed by our Terms of Service, including its disclaimers and limitation of liability.

D&M Collective LLC. Email: deeandmeesh@gmail.com