Privacy
Last updated 5 November 2026.
DUO is a private video-call space for two people, and DUO Control is its optional Chrome extension. This page covers both. The short version: we keep what's needed for your room to work, nothing is sold or used for ads, there are no analytics or trackers, and calls are never recorded.
The DUO Control extension
The extension does one thing: it lets the person you're on a DUO call with see and, if you approve, control one browser tab you choose to share.
- It only acts on the tab you pick. Nothing happens until you click “Share this tab with DUO” in its popup. It has no access to other tabs, your browsing history, bookmarks, passwords or cookies, and it has no permission to read websites in general.
- Tab video. While you share, it captures that tab's picture and sound and hands it to the DUO call you have open. From there it travels like the rest of the call (end-to-end encrypted unless the room's host turned that off). It is not recorded or stored.
- Remote control. When your person asks for control and you approve, their clicks, scrolling and typing are applied to that one tab using Chrome's debugger interface. Pasting and browser shortcuts are blocked. Control ends when you revoke it, when the time limit runs out, when you stop sharing, or when you press the emergency-stop shortcut. Chrome shows its own “debugging this browser” bar the whole time.
- Tab title and address. The extension reads the shared tab's title to show you what you're sharing, and checks its address on your computer to refuse pages that shouldn't be controlled (such as browser settings or DUO itself). Neither is sent to your person or to us.
- Notifications. It shows a notification when your person asks for control.
- It stores nothing, makes no network requests of its own, talks only to DUO's own site, and runs no code downloaded from elsewhere.
What DUO stores
- Your account: email address, password (handled by our sign-in provider and stored hashed), display name and avatar colour.
- Your rooms: who's in each room, chat messages, reactions, read receipts, photos, files, voice and video notes, saved Moments and shared lists. Only the two members of a room can see them. They are not end-to-end encrypted, so they are protected by access rules in our database rather than by your own keys.
- A remote-control log: who asked whom for control, when, and how it ended. It never contains what was clicked or typed.
- Short-lived counters used to rate-limit requests and stop abuse.
Calls themselves (video, audio, screen shares) are not stored anywhere. They pass through our call provider, end-to-end encrypted by default, and are never recorded.
Who handles it
- Supabase (database, sign-in, file storage and realtime messages), hosted in Ireland.
- LiveKit Cloud relays calls. With end-to-end encryption on, it only ever sees encrypted media.
- Vercel hosts the website.
- YouTube plays videos you watch together, through its privacy-enhanced player (youtube-nocookie.com). YouTube's own privacy policy applies to that player.
- GIPHY receives the words you search for when picking a GIF. Searches go through our server, so GIPHY doesn't learn who you are.
Cookies and local storage
DUO sets one sign-in cookie so you stay signed in. Your browser also keeps a few preferences, like chat size, alert settings and your chosen camera, in local storage on your device. There are no advertising or tracking cookies.
Deleting your data
In Settings you can delete your account. That removes your account, the rooms you host with everything in them, and the files you uploaded elsewhere. Deleting a single room removes its messages and files too. Uninstalling the extension removes it completely; it keeps nothing.
Contact
Questions or requests: ruwalamihir@gmail.com.