We collect the minimum data needed to run the service. We never sell it. You can request a full export or full deletion at any time.
What we collect
- Account info: email address, hashed password, phone number (optional, only if you supply it for support).
- Billing info: handled by our payment processors (Stripe, PayPal, Coinbase Commerce). We store the last 4 digits and brand of your card for reference; the full PAN never touches our servers.
- Service telemetry: stream start time, device type (TV / phone / etc.), region, channel ID. Used to size capacity and improve quality. Never linked to your name in dashboards.
- Support transcripts: kept for 24 months from the date of last contact, then auto-deleted.
Cookies & tracking
We use first-party cookies for session, language and theme preference. Analytics (Microsoft Clarity, Google Analytics 4 via GTM) and marketing trackers are off by default — you opt in via the cookie banner. You can change your choices any time using the “Cookie preferences” button in the footer.
What we share
Only with the processors we strictly need to run the service:
- Payment processors (Stripe, PayPal, Coinbase Commerce) — for checkout only.
- Email infrastructure (Postmark) — for transactional mail (receipts, activation codes).
- Customer-support tooling — only when you message us through it.
We never sell or rent your data to anyone, ever.
Your rights
Under GDPR (EEA / UK) and CCPA (California) you have the right to:
- Access — request a full copy of everything we hold about you.
- Rectify — correct any inaccurate data.
- Erase — request full deletion (“right to be forgotten”).
- Port — receive your data in a portable JSON format.
- Object — to processing for marketing purposes.
Email [email protected] from your account email and we'll action your request within 30 days (usually within 48 hours).
Data retention
- Active subscriptions: held for the lifetime of the account.
- Cancelled subscriptions: account record retained for 7 years for tax / accounting purposes; PII (name, address) anonymised after 12 months on request.
- Support transcripts: 24 months.
- Server logs: 90 days.
International transfers
Our servers are located in the US, EU and Singapore. Where we transfer data out of the EEA / UK, we rely on Standard Contractual Clauses.
Children
Our service is intended for adults (18+). We do not knowingly collect data from minors. If you believe a minor has registered, email [email protected] and we'll delete the account within 24 hours.
Contact our DPO
Data Protection Officer: [email protected].