Privacy Policy
Draft v0.1. These documents are awaiting legal review. Details in square brackets will be completed before launch.
Effective date: [EFFECTIVE DATE] · Version: 0.1
This Privacy Policy explains how [COMPANY LEGAL NAME] ("we", "us") collects, uses and shares personal information when you use [PLATFORM NAME] (the "Service"), whether you have an account or watch as a guest. It is part of our Terms of Service.
1. Summary
- We collect what we need to run the Service: your email, your viewing activity, what you post, and technical data such as your device ID and IP address.
- We use it to run and secure the Service, to show you where you left off, to review content for safety, and to understand how the Service is used.
- We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- You can see, correct, download or delete your information. Write to [PRIVACY EMAIL].
2. What we collect
2.1 Information you give us
| Information | When |
|---|---|
| Email address | Sign-up, sign-in, password reset |
| Password (we store only a one-way hash) | Sign-up, password reset |
| Username, display name, bio, profile photo | Account setup and profile edits |
| Confirmation that you are 13 or older and agree to our terms | Sign-up |
| Videos, covers, titles, descriptions, tags and upload declarations | When you upload |
| Comments, likes, follows and shares | When you use those features |
| Reports and rights claims, including contact details and identity documents you provide | When you file them |
| Messages to us | When you contact support |
2.2 Information we collect automatically
| Information | Why |
|---|---|
| A random device ID stored in your browser's local storage | To remember guests' progress, likes and unlocks, and to limit abuse |
| IP address, browser and device type, language | Security, fraud prevention, rate limits, choosing your language |
| Viewing activity: episodes watched, progress, time watched, whether you finished, where you came from (for example a share link) | To resume where you left off, to count views, and to show creators how their work performs |
| Advertising activity: which ads were shown to unlock an episode and whether you finished them | To grant unlocks and prevent fraud |
| Log data: pages and features used, errors, times | To operate and fix the Service |
2.3 Cookies and local storage. We use a cookie that keeps you signed in and local storage that holds your device ID and whether you are signed in. These are necessary for the Service to work. We do not use third-party advertising or analytics cookies today. If we add them, we will update this policy and ask for consent where the law requires it.
2.4 Information from others. Other users may mention you in comments or reports. Rights holders may send us information about you in a copyright or likeness claim.
3. How we use information
- Provide the Service: create and secure your account, send sign-in and security codes, play videos, remember your progress, grant unlocks, show your public page.
- Safety and moderation: scan uploads and text for prohibited content, review reports and rights claims, enforce our rules, detect fraud and manipulated views, and meet legal obligations such as reporting child sexual exploitation to NCMEC.
- Creators: show creators aggregated information about their content, such as unique viewers and completion rates. Creators do not see who you are unless you interact publicly, for example by commenting or following.
- Improve the Service: understand which features are used and fix problems.
- Communicate with you: service notices, changes to our terms, replies to your requests. We do not send marketing email unless you opt in.
- Legal: comply with law, respond to lawful requests, and protect our rights and the safety of users.
4. What is public
Your username, display name, bio, profile photo, uploads, comments, follower counts and likes counts are public. Anyone with a link can see your public page and your published content. Your email address is never shown publicly.
5. Who we share information with
- Service providers that process information for us under contracts that limit its use: Amazon Web Services (hosting, storage, video delivery, email delivery, automated content review) and a child-safety hash-matching provider.
- The National Center for Missing & Exploited Children (NCMEC) and law enforcement, when the law requires it or to prevent serious harm.
- Rights holders and the people who filed a claim, in the limited ways our Copyright & DMCA Policy and Likeness & Voice Rights Policy describe. For example, a DMCA counter-notice is sent to the person who filed the original notice.
- Legal and safety: in response to a valid subpoena, court order or other legal process, or to protect the rights, property or safety of users, the public or us.
- Business transfers: if we are involved in a merger, acquisition or sale of assets, subject to this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months.
6. Your choices and rights
6.1 Everyone. You can view and edit your profile in the Service, delete your content, and delete your account. Clearing your browser storage resets your device ID.
6.2 California residents. Under the California Consumer Privacy Act (as amended), you have the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- correct inaccurate personal information;
- delete personal information, subject to legal exceptions;
- opt out of the sale or sharing of personal information (we do neither);
- limit the use of sensitive personal information (we use it only as allowed without that right, such as your account password to sign you in);
- not be treated differently for using these rights.
To make a request, email [PRIVACY EMAIL] from the address on your account. We will verify your request, usually by confirming a code sent to that address, and respond within 45 days. You may use an authorized agent, who must show us your signed permission. We honor Global Privacy Control signals as a request to opt out of sale and sharing.
6.3 Categories under California law. In the past 12 months we collected: identifiers (email, username, device ID, IP address); customer records (email, account details); internet and network activity (viewing and usage data); general location inferred from IP address; audio and visual information you upload; account login credentials (sensitive personal information); and inferences limited to fraud and safety signals. Sources and purposes are described in Sections 2 and 3. We disclosed these categories to the service providers listed in Section 5, for business purposes only.
7. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Sign-up requires confirming you are 13 or older. If you believe a child under 13 has given us information, write to [PRIVACY EMAIL] and we will delete it. Users aged 13 to 17 need a parent's or guardian's permission to use the Service.
8. How long we keep information
[RETENTION PERIODS TO BE CONFIRMED]
| Information | Kept |
|---|---|
| Account information and uploads | While the account exists; deleted within 30 days after deletion, and from backups within 90 days |
| Watch history and viewing activity | While the account exists; guest data 24 months after the device was last seen |
| Sign-in sessions | 30 days after last use |
| Email codes | 10 minutes |
| Reports, rights claims, moderation decisions and audit logs | 7 years, or longer while a dispute is open |
| Child-safety evidence | As long as the law requires |
| Server logs | 90 days |
9. Security
We protect information with encryption in transit, hashed passwords, access controls and monitoring. No system is perfectly secure, so we cannot promise that information will never be accessed without permission. If a breach affects you, we will notify you as the law requires.
10. Where information is processed
We store and process information in the United States.
11. Users outside the United States
The Service is designed for users in the United States. [RESERVED: EU/UK GDPR SECTION — legal bases, data transfers, supervisory authority, representative — to be added before launch in those regions.]
12. Changes
We may update this policy. For material changes, we will notify you by email or in the Service before they take effect, and ask for your acceptance where required.
13. Contact
Privacy requests and questions: [PRIVACY EMAIL] · [COMPANY LEGAL NAME], [COMPANY ADDRESS]