Last updated: October 14, 2026
This policy explains what information we collect, why we collect it, and how we use it when you use our short-drama streaming platform (the “Service”).
Account information: your email address and password (stored only as a salted hash). If you sign in with Google, we receive your Google account identifier, email address and display name.
Usage information: viewing history and playback positions, so you can resume episodes where you left off.
Transaction information: purchases of coin packs and VIP passes, including order identifiers returned by our payment provider. We never see or store your full card number.
Technical information: standard server logs such as IP address, browser type and request time, used for security and troubleshooting.
To operate the Service: authenticate you, deliver video content, sync playback progress, and maintain your coin balance and VIP status.
To process payments and prevent fraud, abuse and unauthorized access.
To send service-related communications (e.g., payment receipts). We do not send marketing emails unless you opt in.
To measure advertising performance and improve our campaigns. We use the Meta (Facebook) Pixel and Conversions API; device signals such as IP address, browser details and cookie identifiers (fbp/fbc) may be shared with Meta Platforms, Inc. for cross-context behavioral advertising. You can stop this sharing at any time — see section 8.
Payment processing: card payments are processed by our payment provider (veseksolutions), which acts as an independent controller of your payment data under its own privacy policy.
Video delivery: content is delivered through our CDN/storage providers strictly to stream the videos you request.
Advertising and measurement: Meta Platforms, Inc. (Facebook) receives the device signals described in section 2 through its Pixel and Conversions API, under its own privacy policy. You can opt out of this sharing via our Do Not Sell or Share page.
Legal requirements: we may disclose information where required by law, court order or to protect our rights and the safety of users.
We do not sell your personal information to anyone.
Account and transaction records are retained while your account is active, and as long as required for tax, accounting and dispute-resolution purposes.
You may request deletion of your account; we will remove or anonymize personal data, except records we must legally retain.
Server logs are rotated weekly and retained for up to 8 weeks. Database backups are rotated within 7 days.
Depending on your jurisdiction (including the EU/EEA under GDPR), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing.
California residents (CCPA/CPRA): you have the right to know, delete and correct your personal information, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. Opt out directly on our Do Not Sell or Share page.
To exercise any right, contact us via the Contact page. We respond within 30 days.
Passwords are stored as salted hashes and never in plain text. Card payments are handled entirely by our payment provider over TLS. We apply least-privilege access to production systems.
The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.
We do not sell personal information for money. We do share device signals with Meta for cross-context behavioral advertising, which California law treats as "sharing".
You can stop this at any time on our /do-not-sell page; the choice is stored per browser for one year and takes effect immediately. We also honor Global Privacy Control (GPC) browser signals.
We will post any changes to this policy on this page with an updated revision date. Continued use of the Service after changes means acceptance.
Questions: reach us through the Contact page.