Privacy policy

• Account: email, name and photo if you sign in with Google or Apple, interface and content language. Guests have no email.
• Usage: episodes watched and where you stopped, series in your list, unlocks, coins (every movement), check-ins and invites.
• Purchases: what you bought, amount, date, status and the Stripe identifier. Card details stay with Stripe.
• Notifications: your preferences and, if you allow push notifications, your browser’s push service address.
• Support: the messages you exchange with us in the support chat, when each was sent and whether it has been read.
• Where you came from: the campaign parameters (UTM) of the link you arrived through, if you allow it in the cookie banner.
• Security: a pseudonymised keyed hash of the connection you signed up from (the IP; on IPv6, only the part that identifies the home or phone), which cannot be turned back into the IP, to cap the sign-up bonus per connection and detect invite abuse, an equally irreversible hash of your email so the welcome coins are given only once per person (kept after you delete your account, without the email) and short-lived technical logs.
• Access logs: when you create your account, on each sign-in and when you use the service from another network or device (at most once an hour) we keep the date and time, your IP address (encrypted; only the support team can see it, and every look is logged), a pseudonymised hash of the connection (as above), the network operator and approximate city that IP belongs to, and your device and browser type. They are used to detect fake and duplicate accounts (fraud prevention, legitimate interest) and to meet the access-log retention required in Brazil (Marco Civil da Internet, art. 15). They are kept for 6 months and deleted automatically. The operator comes from a local DB-IP database (nothing is sent to third parties).

• Providing the service (account, progress, unlocks, purchases, VIP). Basis: contract.
• Invoicing and tax obligations. Basis: legal obligation.
• Answering your support requests in the chat and letting you know we replied, by email, by a notification on your phone or computer (if you have them turned on) and on the site itself. These notices are only about your conversation and never carry advertising. Basis: contract.
• Preventing fraud and abuse (payments, invites, request limits). Basis: legitimate interest.
• Detecting and fixing technical errors (logs without personal data). Basis: legitimate interest.
• New-episode, “pick up where you left off” and reminder emails, and notifications on your phone or computer. Basis: your consent, which you can withdraw any time in your profile or from the email link.
• Usage statistics (PostHog) and visit origin. Basis: your consent in the cookie banner.

We use processors that handle data only to provide the service to us:

• Stripe (payments and invoicing).
• Cloudflare (network, abuse protection and storage of videos and images).
• OVHcloud (server and database hosting, in Canada; emails sent from a mailbox in the EU).
• Google and Apple, only if you choose to sign in with them.
• PostHog, in the EU region, only if you accept statistics.
• Sentry, in the EU region (technical error reporting): receives the error, the page and the account id, never cookies, emails or your IP address.
• Your browser’s push services (Google, Apple, Mozilla, Microsoft).

Some transfers leave the EU (for example to Canada, covered by a European Commission adequacy decision, or to the US under the EU-US Data Privacy Framework or standard contractual clauses). We do not sell data.

• Account and usage data: for as long as the account exists.
• Support chat messages: for as long as the account exists.
• Inactive guest accounts: deleted after a while.
• Purchase records: 10 years, for tax reasons. If you delete your account they are anonymised and no longer linked to you.
• Technical and security logs: 30 days at most.

You can access, correct and delete your data, restrict or object to processing, withdraw consent and ask for portability. In your profile you can export your data and delete your account; for anything else write to support@cliffshort.com.

You can also complain to a data protection authority; in Portugal, the CNPD (cnpd.pt).

Encrypted connections, revocable sessions, videos served through short-lived links, protected admin access and a log of admin actions. Cookies and local storage are described in the cookie policy.

The service is not meant for children under 16 to create an account or buy. If we learn that an account belongs to a child under that age without parental consent, we delete it.

If this policy changes in an important way, we announce it on the site and by email to account holders.