Privacy & Data Policy

This policy applies to After Dark Dramas websites, accounts, streaming, payments, coins, rewards, advertising, support, and related services that link to it. Before public launch, this section must name the operating legal entity, its address, and its monitored privacy contact.

• Identifiers and account data: email address, internal user ID, authentication status, profile settings, and account timestamps.
• Viewing and preference data: searches, shows and episodes selected, playback activity and progress, saved titles, genre choices, and other interactions.
• Commercial and entitlement data: products considered or purchased, price, currency, transaction ID, subscription status, renewal and cancellation dates, coin balance and history, unlocked episodes, ad completions, and rewards.
• Payment-related data: Stripe customer and payment references, billing status, and limited payment-method details such as brand and last digits when provided by Stripe. Stripe processes complete card numbers; we do not store them.
• Device, network, and usage data: IP address, approximate location derived from IP, browser, device and operating-system characteristics, referral URLs, page and button activity, timestamps, cookies or similar identifiers, playback quality, errors, logs, and security events.
• Communications: support, privacy, billing, survey, or other messages and our responses.

We collect information directly from you; automatically from your browser or device; from payment, authentication, hosting, video-delivery, security, and advertising providers; and from other users when they contact us about an account or transaction. We do not purchase consumer profiles from data brokers.

We use information to create and authenticate accounts; stream and organize content; remember progress and preferences; maintain lists and wallets; process payments; provide subscriptions, coins, ads, and rewards; send transactional notices; answer requests; detect fraud, duplicate-account abuse, chargebacks, and security threats; troubleshoot and measure performance; comply with law; enforce agreements; and protect users, content rights, and systems.

We may use aggregated or de-identified information that cannot reasonably identify a person, and we maintain it in that form rather than attempting to re-identify it.

Viewing choices can be sensitive. We disclose identifiable viewing information only to provide the service, follow your direction, prevent fraud, comply with law, or as otherwise permitted by applicable video-privacy law. We will not give an advertiser your identifiable title-by-title viewing history for its independent marketing without separate, legally valid permission. Ad measurement should use the minimum information reasonably necessary.

Essential cookies and similar technology support sign-in, security, checkout status, playback, and preferences. Device and network signals may help identify suspicious repeated signups, automated ad viewing, or reward abuse. A device signal is not treated as conclusive proof of identity; significant enforcement decisions should use multiple relevant signals. See the Cookie Policy.

We disclose information to vendors acting for us, including Supabase for accounts and data, Stripe for payments and subscriptions, Bunny.net for video storage and delivery, and providers that host, secure, analyze, communicate for, or support the service. They receive information needed for their work and may have their own legally required notices.

We may also disclose information when reasonably necessary to comply with valid legal process, protect rights or safety, investigate fraud, enforce agreements, or complete a financing, merger, reorganization, acquisition, or sale of assets. If advertising partners are enabled, we will identify relevant practices and activate required choices before their collection begins.

We do not sell personal information for money. Certain advertising or analytics disclosures can nevertheless be considered a “sale,” “sharing,” or targeted advertising under some state laws. Before enabling such activity, we will provide required notice, a clear opt-out method, and support recognized browser-based opt-out signals such as Global Privacy Control where legally required.

Retention depends on purpose. Account and viewing information is generally retained while an account is active and for a reasonable period afterward; transaction, tax, fraud, and dispute records may be kept longer to meet legal and operational obligations. Security logs are kept only as long as reasonably needed for detection and investigation. We delete or de-identify information when it is no longer needed unless retention is required or permitted by law.

We use administrative, technical, and organizational safeguards appropriate to the nature of the information. No system can guarantee absolute security. Use a unique password, control devices signed into your account, and notify support promptly about suspected unauthorized access. We will provide legally required breach notices.

You can manage account information, communication choices, saved content, and subscription billing through available account controls. Depending on your state, you may have rights to know, access, correct, delete, or obtain a copy of personal information; opt out of qualifying sales, sharing, targeted advertising, or profiling; limit certain sensitive-information uses; and appeal a denied request.

We may verify requests using account or contact information and may allow an authorized agent where required. We will not discriminate against you for exercising applicable rights. Details are in the U.S. State Privacy Notice. A monitored request method and identity-verification workflow must be active before public launch.

We may send service messages about verification, security, purchases, renewals, cancellations, and material policy changes. These are not marketing messages. Promotional email, if introduced, will include an unsubscribe method. We may retain opt-out records so we can honor your choice.

The service is not directed to children under 13, and we do not knowingly collect their personal information. If we learn that we collected such information without legally sufficient authorization, we will take appropriate steps to delete it. Parents or guardians may contact the privacy address published at launch.

The initial service is intended for the United States and its territories. Information may be processed in the United States and other locations where our providers operate. We will add required international notices, legal bases, and transfer safeguards before intentionally offering the service in additional countries.

We may update this policy when features, providers, advertising practices, or law change. We will update the effective date and provide additional notice for material changes when required. Before launch, this section must contain the legal entity name, mailing address, privacy email, and any legally required toll-free or web request method.