Privacy Policy

Account details. Your email address and password (stored as a secure hash — we can't read it), or, if you sign in with Google, the name and email address Google shares with us.

Viewing activity. Which series you watch, where you paused, what's in your list, and the genre interests you pick at signup — this powers resume, recommendations and your library.

Coins and purchases. Your coin balance and a ledger of coin movements (purchases, unlocks, bonuses, promo codes). If you buy something, payment is handled by Stripe — we receive confirmation of the payment and its amount, never your card number.

Technical basics. Standard logs (IP address, browser type, pages requested) that every website receives, used for security and keeping the Service running.

To run the Service: signing you in, playing episodes, remembering your place, keeping your wallet accurate, delivering what you paid for, applying promotions, preventing fraud and abuse, and sending service emails like the signup confirmation. We don't send marketing email unless you've opted in, and we don't sell or rent your personal information to anyone.

A small set of service providers process data on our behalf, each for a specific job:

• Supabase — account sign-in and our database (hosted in Singapore).
• Vercel — hosts the website.
• Stripe — processes payments and manages subscriptions.
• Resend — delivers account emails (like the confirmation link).
• Cloudflare — streams video and helps protect the Service.
• Google— only if you choose “Continue with Google” to sign in.

These providers may store data in other countries (for example the United States). Beyond them, we disclose personal information only if the law requires it or to protect the Service and its users.

We use cookies for one boring, essential purpose: keeping you signed in (and, briefly, remembering a promo code you clicked). No advertising cookies, no third-party trackers.

Your account data stays for as long as you have an account. Purchase and coin-ledger records are kept as long as needed for accounting and fraud prevention. If you delete your account, we remove or de-identify your personal information within a reasonable period, except records we're legally required to keep.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and its data — email support@nightbound.tv from the address on your account. Depending on where you live, privacy law may give you additional rights; we honour requests from any region as a matter of course.

Everything travels over encrypted connections (HTTPS). Passwords are hashed, payment details never touch our servers, and access to production data is limited. No system is perfectly secure, but we take the safety of your information seriously.

NightBound is for adults — you must be 18 or older to create an account. We don't knowingly collect information from anyone under 18; if we learn we have, we'll delete it.

If this policy changes in a meaningful way, we'll take reasonable steps to let you know. Questions about privacy: support@nightbound.tv. See also our Terms of Service.