Privacy Policy

Controller and contact

Accounts and essential messages

We process your email, display name, language, password hash, verification and session records to provide requested account services and protect access. Account and billing messages are separate from marketing. Verification links expire after 24 hours by default; password-reset links after 30 minutes. Session cookies expire after up to 12 hours.

Commerce and customer service

Orders, memberships, entitlements and transaction references support the requested contract and legal/accounting obligations when billing is connected. Support and complaint forms collect contact details, page references and messages for handling the request, rights protection and applicable obligations. Do not send identity documents, passwords, card details or intimate media through these forms.

Community

We store viewing progress, watchlists, comments, reactions, reports, notifications and read states to provide those features. Display names and visible comments are public; email and payment details are not. Complaint evidence and moderation notes are restricted to authorized staff.

Marketing preferences

Marketing requires a separate optional choice, initially unchecked. We record its source, date, language and version per brand. You may withdraw it in your account or through marketing unsubscribe links. Withdrawal does not stop essential account, security or billing messages. The studio database remains the source of truth for consent.

Delivery, security and statistics

Hosting and Bunny video delivery process connection information to deliver and secure the requested service. Public trailers and hover previews may contact Bunny. The application records aggregate events without advertising pixels or cross-site identifiers. When trusted server metadata is available, country statistics use a two-letter estimated country code, not a stored full IP, city or precise location. Registration country and last signed-in country may be retained for audience localization; language is not used to infer location. This is not verified nationality or residence. Legitimate interests in service security and limited audience measurement apply, subject to your rights.

Providers and transfers

The provider inventory and contractual transfer details are pending operator confirmation. The service currently uses hosting infrastructure and Bunny for video delivery. Contact us for the current details; no unverified provider assurance is claimed.

Retention

Account data is retained to provide the account and handle applicable obligations; support and complaints for case handling and applicable obligations. The operator is finalizing category-specific retention periods before commercial launch.

Country-data controls

Country aggregates expire after 395 days and last-access country after 90 days. Registration country remains until account deletion or opt-out. Account → Profile allows opt-out and erases stored account country codes. Do Not Track and Global Privacy Control suppress this collection for the request. Previously aggregated counts cannot be traced back to remove an individual contribution.

Your rights

Where applicable, request access, correction, deletion, restriction, portability or objection through Contact. You can withdraw consent without affecting prior lawful processing and complain to the AEPD. This application does not make solely automated decisions with legal or similarly significant effects.