Privacy Policy

This Privacy Policy explains how Tunumi (“Videoror,” “we,” “us,” or “our”) collects, uses, and shares information when you use Videoror (the “Service”). It should be read together with our Terms of Service.

Videoror is built to be privacy-respecting: we are ad-free, we do not sell your personal data, we do not run third-party advertising trackers, and we use self-hosted, cookie-less analytics. We aim to collect only what we need to run the Service.

Information we collect

Information you provide

Account information: your email address and display name, created when you register (registration is invite-only).
Profile information: an optional profile photo (avatar).
Channel and content: if you create a channel, your channel name, username, and description; and any videos, thumbnails, captions, comments, reactions, playlists, and subscriptions you create or make.
Messages to us: if you use our contact form, the name, email, message, and topic you submit (we also record the IP address of the submission to help prevent spam and abuse).
Payment information: if you purchase a membership, your payment is processed by our payment processor (currently Stripe). We do not receive or store your full payment card number. We store limited billing references (such as a customer or subscription identifier) needed to manage your membership.

Information we collect automatically

Log and device data: IP address, browser/user-agent, and request metadata, including sign-in timestamps and IP addresses associated with your account, used for security, debugging, and abuse prevention.
Cookies: a small number of first-party cookies needed to run the Service (see Cookies and similar technologies). We do not use advertising cookies.
Viewing and engagement data: playback progress and watch history, video views, reactions, and aggregated watch-time statistics (per viewer, per creator channel, per month). This supports resume-watching, recommendations, membership watch limits, and — where offered — attributing creator-pool revenue to the creators you watch.

Analytics. We use Umami, a self-hosted, privacy-focused analytics tool. It is cookie-less and does not perform cross-site tracking or build advertising profiles. Analytics data is aggregated and used to understand overall usage of the Service.

How we use information

We use the information above to:

Provide, operate, maintain, and secure the Service;
Authenticate you and keep your account secure;
Personalize your experience, including content recommendations based on what you watch;
Process memberships and payments and manage your billing;
Attribute and calculate creator-pool allocations from viewing data, where such features are offered;
Prevent, detect, and respond to fraud, abuse, spam, and security incidents (including rate limiting);
Communicate with you — for example, account confirmation, password resets, and Service notifications;
Enforce our Terms and moderate content (including handling reports); and
Comply with legal obligations and enforce our legal rights.

Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to provide the Service and your membership); legitimate interests (to secure and improve the Service, prevent abuse, and understand aggregate usage); consent (where we ask for it); and compliance with legal obligations. Where we rely on legitimate interests, you may object as described in Your rights and choices.

Cookies and similar technologies

We use only first-party cookies that are necessary to run the Service, including:

a session cookie to keep you signed in and secure requests;
a “remember me” cookie if you choose to stay signed in;
a viewer token cookie used to de-duplicate video views (including for signed-out visitors) so a view isn’t counted repeatedly;
a theme cookie that remembers your light/dark/system display preference.

We do not use advertising or cross-site tracking cookies, and our analytics (Umami) is cookie-less. Because we do not use non-essential tracking cookies, we do not display a tracking-consent banner. You can control cookies through your browser settings, though blocking essential cookies may break parts of the Service.

We do not sell your personal data, and we do not share it with advertising networks. We share information only in these limited ways:

Service providers. With vendors who process data on our behalf under contract, such as our payment processor (Stripe), transactional email provider, and object-storage/content-delivery providers. They may only use the data to provide services to us.
Other users / public content. Content you make public — such as your channel, videos, comments, and display name — is visible to others by design.
Legal and safety. When we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Videoror, our users, or the public.
Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or a successor policy.

Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then retain and delete it according to our retention practices. We may retain certain information longer where required for legal, tax, accounting, security, or fraud-prevention purposes, or to resolve disputes. [Insert specific retention periods where you can, e.g. how long logs, contact messages, and billing records are kept.] Residual copies may persist briefly in backups and caches after deletion.

Your rights and choices

You can exercise several controls directly in the Service:

Access and update your account and profile information in your settings.
Clear your watch history, individually or all at once, from the History page.
Delete your account, which removes your account and associated personal content, subject to the retention exceptions above.
Manage or cancel your membership from your membership settings.

Depending on where you live, you may also have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing (for example, under the GDPR or the CCPA/CPRA). We do not sell or “share” personal information for cross-context behavioral advertising. To make a request, contact us through our contact page or at privacy@videoror.com; we may need to verify your identity. If you are in the EEA/UK, you may also lodge a complaint with your local supervisory authority.

Security

We take reasonable measures to protect personal data. Video content is stored encrypted (AES-128 for HLS segments) and served over authorized, session-checked endpoints; traffic is protected with TLS; and account passwords are stored hashed, never in plain text. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

International data transfers

We may process and store information in countries other than where you live, which may have different data-protection laws. Where required, we use appropriate safeguards for such transfers.

Third-party links

The Service may link to third-party sites or services we do not control. This Policy does not apply to them; review their privacy policies before providing information.

Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Effective date” above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated Policy.

Contact

Questions or requests about your privacy? Reach us through our contact page or at support@videoror.com.