Privacy Policy

1. Information We Collect

When you create an account we collect your email address, display name, and optionally your profile picture (via Google sign-in). When you watch episodes we record viewing progress, completion status, and timestamps so you can resume where you left off. When you make a purchase we collect billing details necessary to process the transaction (handled by Stripe / Lemon Squeezy — we never see your full card number).

2. Cookies & Local Storage

We use cookies and browser storage for: authentication (keeping you logged in), preferences (theme, dismissed banners), and basic analytics. We do not use third-party advertising cookies unless you are watching ad-supported content as a free user.

3. How We Use Your Data

Your data powers: account access, personalized continue-watching, coin balance management, recommendations, customer support, fraud prevention, and aggregate analytics about which series are popular. We do not sell your personal data to third parties.

4. Third-Party Services

We rely on the following sub-processors to operate the Service:

• ·Supabase (database, authentication, storage)
• ·Stripe and/or Lemon Squeezy (payment processing)
• ·Vercel (web hosting + CDN)
• ·Google (OAuth sign-in)
• ·Hostinger (additional video infrastructure)
• ·Google AdSense (advertising for free users)

5. Your Rights

You can: download your data (Settings → Export my data), request deletion (Settings → Delete account), update your display name and avatar at any time, and unsubscribe from marketing notifications. Account deletion is permanent and removes your watch history, favorites, and coin balance.

6. Data Retention

Account data is retained while your account is active and for up to 30 days after deletion (for accidental deletion recovery). Transaction records are kept for 7 years for accounting and tax compliance.

7. Security

We use industry-standard security practices: encrypted HTTPS connections, hashed credentials, server-side access controls, and Row Level Security on our database. No system is perfectly secure — please use a strong unique password and enable two-factor authentication where available.

8. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it.

9. International Transfers

Your data may be processed in countries other than where you live, including the United States and the European Union, depending on which of our sub-processors handles the request. We rely on standard contractual clauses where applicable.

10. Changes to This Policy

If we make material changes, we will notify you by email or in-app banner at least 14 days before the change takes effect.

11. Contact

Privacy questions or data requests: hello@humanskin.ai.