Privacy Policy

1.Who is responsible

The data controller is Nordlicht Media OÜ, Vana-Lõuna 39/1, 10134 Tallinn, Estonia. Questions and requests about personal data: [email protected].

2.What we collect

• Server logs: IP address, user agent, requested URL and timestamp, kept for security and abuse prevention.
• Account data: email address, username and a salted password hash, when you register.
• Activity: the videos you like, comment on or add to playlists, and the channels you subscribe to, so the Service can show them back to you.
• Preferences: your language and your age-confirmation, stored in cookies.
• Taste profile: a small, anonymous list of category weights derived from what you watch, stored in a cookie on your device and used only to order the home page. It is not linked to your identity unless you sign in, and it is never shared.

3.Why we process it and on what basis

To provide the Service you asked for (performance of a contract); to keep the Service secure and prevent abuse (legitimate interest); to remember your choices (consent, expressed by the choice itself); and to comply with legal obligations such as record-keeping and responding to lawful requests.

4.Cookies

We set first-party cookies only: `age_ok` (age confirmation, 30 days), `locale` (language, 90 days), `taste` (category weights, 60 days) and a session cookie when you sign in. We do not use third-party tracking cookies. Advertising banners are displayed in an isolated frame that cannot read our cookies.

5.Advertising

Banners are selected on our servers using the anonymous taste profile described above. Advertisers receive impression counts only; they never receive your profile, your IP address or your identity from us.

6.Sharing

We share personal data only with processors that host and operate the Service under contract (hosting, email delivery), with authorities when legally compelled, and with a successor in the event of a merger or acquisition. We do not sell personal data.

7.Retention

Server logs: 30 days. Account and activity data: until you delete your account, then removed within 30 days except where retention is required by law. Cookies: as listed above.

8.Your rights

Depending on where you live you may have the right to access, correct, delete or export your personal data, to restrict or object to processing, and to withdraw consent. Write to [email protected]; we respond within 30 days. You may also lodge a complaint with your local supervisory authority.

9.Security

Data is transmitted over TLS and stored on access-controlled systems. Passwords are stored as salted hashes. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

10.Children

The Service is for adults only. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data to us, contact [email protected] and we will delete it.

11.Changes

We may update this Policy. The date at the top indicates the last revision; material changes will be announced on the Service.