Back to Home

Privacy Policy

Last updated: February 16, 2026

Your Data Belongs to You

Cheesebox is built on a fundamental principle: your data belongs to you. Unlike traditional video platforms, we don't store your videos on our servers. Instead, you maintain complete control by hosting your content in your own AWS account.

What We Store

We only store the minimal information necessary to operate the platform:

  • Your account information (email, name, authentication credentials)
  • Video metadata (titles, descriptions, sharing permissions)
  • References to your videos stored in your AWS S3 bucket
  • Team and share group configurations
  • Access logs for security purposes

All video files and processed transcoded content remain in your AWS account, under your control.

Data Encryption

We take security seriously. All sensitive data is encrypted:

  • AWS credentials are encrypted using AES-256-GCM encryption at rest
  • All data transmitted between your browser and our servers uses TLS encryption
  • Database connections are encrypted in transit
  • Video content remains in your AWS account with your chosen security settings

Third-Party Services

Cheesebox integrates with the following third-party services:

  • Amazon Web Services (AWS) - For video storage and transcoding in your account
  • Resend - For sending email notifications and sharing links
  • Google OAuth - For optional Google sign-in authentication

Each of these services has their own privacy policies. We recommend reviewing them to understand how they handle your data.

Cookies and Tracking

We use essential cookies for:

  • Session management and authentication
  • CSRF protection
  • Remembering your theme preference

We do not use advertising cookies or sell your data to third parties. We do not track you across other websites.

Data Retention

Your account data is retained for as long as your account is active. If you delete your account:

  • Your account information and metadata will be permanently deleted within 30 days
  • Video files in your AWS account remain under your control - you must delete them manually if desired
  • Anonymized usage logs may be retained for security and analytics purposes

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Opt out of email communications

Open Source

Cheesebox is open source (MIT License). You can review our code, security practices, and data handling on GitHub. Transparency is core to our mission.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by email and by updating the "Last updated" date at the top of this policy.

Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us: