Privacy policy

Draft — to be reviewed (DPO / lawyer) before going live.

Last updated: [date]

Controller

[Company name], [address] — contact: [privacy e-mail].

Data we process

• Account: public ID (UID), e-mail, password (hashed, never stored in clear), display name, language, preferences.
• Usage: list, watch history and progress, likes, unlocked episodes, coin balance and ledger.
• Payments: orders, amounts, status. Card data is processed only by our payment provider (Stripe).
• Technical: session and security cookies, IP address and technical logs (kept [duration] at most), internal playback analytics.
• Support: messages sent through the contact form.

Purposes and legal bases

• providing the service, account, playback and resume: performance of contract;
• selling coins and subscriptions, invoicing: contract and legal obligation;
• security and fraud prevention: legitimate interest;
• audience measurement: legitimate interest (internal) or consent (third-party tools);
• personalised advertising: consent.

Retention

Account: while active; inactive guest accounts deleted after [12] months. Billing data: 10 years. Technical logs: [6] months max. Consent cookie: 6 months.

Recipients

Our processors under data processing agreements: host [name], video storage/CDN [name], Stripe, e-mail provider [Brevo], and — only with your consent — analytics or advertising tools. Transfers outside the EU rely on standard contractual clauses.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. From Profile › Settings you can export your data and delete your account. Contact: [contact]. You may lodge a complaint with your data protection authority (CNIL in France).