Privacy policy

1. Information we process

• Uploaded works: videos, covers, title, description, public author name, language, rights confirmation, check results and publication status are stored in the server database and private media storage. Published works and author names are public; account email addresses are not. Before publication, only the author and administrators can access media. Text, sampled video frames and audio excerpts are sent through OpenRouter to a multimodal model for automated checks, using routes that disallow training data collection; account emails and passwords are not sent.
• Account details: email, a random account ID, a salted one-way password hash and creation time, stored in the server database.
• Login status: a signed session token containing account ID, email and expiry, valid for up to 30 days, in an HttpOnly, Secure, SameSite=Lax cookie.
• Security data: IP address and basic request information used for login/registration rate limiting, troubleshooting and infrastructure security logs. These reside in short-lived application memory and hosting logs.
• Activity: age confirmation, watch history and playback progress, search history, likes, favorites, follows and local comments use your browser's localStorage. While signed out, this activity stays in the browser. When you sign in, watch history, playback progress, likes, favorites and follows, including existing local records, are automatically synchronized with your account in our server database across devices. Age confirmation, search history and local comments remain in the browser.
• Related ranking: the ID of the title you are watching; catalog IDs from locally stored watches and likes; the page language and browser Accept-Language; and a country/region code derived from the request IP (the IP itself is not sent). Search queries, comments and account details are not included. The server sends public titles, tags and these signals to TypeSafe Jev via OpenRouter for that one ranking and does not keep a personal recommendation profile.
• Analytics: an anonymous visitor ID, site domain, page path, referring page and basic device/browser information; episode start, completion and playback errors; and character/placement labels for chat entry links. Query strings and URL fragments are removed before sending. Chat text and form inputs are not collected. Data is stored in browser localStorage and PostHog's US region.
• Session replay: for a sample of age-confirmed visits, page structure, clicks and scrolling are recorded to understand watch paths. Inputs are masked by default. Query strings, chat text and video frames are not collected. Replays are stored in PostHog's US region for about 30 days.

Episode requests need no account. Submitted title and episode IDs, optional notes, page language and source path are stored in our database. A random browser identifier in localStorage is hashed for deduplication; browsers are not individual people. We collect an email only when you explicitly request update notifications, solely to contact you about that drama. Notes and emails are private to our team. Analytics record the title, episode, language and notification choice, never the note or email. Contact us to delete feedback or cancel notifications; other feedback is retained for update planning.

We currently do not request real names, identity documents, payment details, precise location or address books. Do not submit sensitive personal information in comments, search fields or public third-party communities.

2. Purposes and legal bases

• Create accounts, authenticate login and provide features you request;
• Save on-site preferences, playback progress and interaction state;
• Reorder related titles and end-of-video suggestions from the page language, browser language, country/region and locally stored watches and likes;
• Understand page visits, on-site navigation and sampled session replays to improve pages;
• Prevent abuse, protect accounts and services, and troubleshoot;
• Meet applicable legal obligations and handle privacy, copyright and safety reports.

Clicking “Check and publish” starts automated checks of the work text, cover, video frames and audio excerpts; a passing result publishes the work. Sampling can miss content or produce false positives and does not verify copyright or identities. You can withdraw or delete works in My works. Deleting an account removes its works. If storage is unavailable, file deletion is queued for retry and public access stops first; copies already saved by others cannot be recalled.

Depending on local law, legal bases may include performing our service agreement, legitimate interests in service security, your consent and legal obligations.

3. Cookies and local storage

The hg_session cookie is necessary for login and lasts up to 30 days. Age confirmation, on-site activity and the anonymous analytics ID use localStorage. You can clear on-site activity in the account area. Age confirmation and analytics IDs remain until you clear browser data or the browser removes them. Adsterra may set advertising cookies on watch pages. We do not set analytics cookies.

4. Sharing, third parties and international processing

Cloud hosting and database infrastructure providers may process data needed to operate the service under contracts, security measures and applicable law. PostHog processes the anonymous visit events, interaction events and sampled session replays described above in its US region; automatic click capture, heatmaps and person profiles are disabled. Session replay masks form inputs by default and does not send query strings or URL fragments. Related ranking requests are sent through OpenRouter to TypeSafe's Jev model; they contain public catalog IDs, titles and tags, plus the page language, browser language and a country/region code derived from the IP on the server (the IP itself is not sent). Search queries, comments, account details and tracking IDs are not included, and no long-term personal profile is kept.

Your browser accesses Telegram, X, Instagram or TikTok only when you click an identified link, or Google when you choose to leave at the age gate. Those third parties independently determine how they process data. We may also disclose limited information when required by law or necessary to protect users or respond to lawful rights requests. Processing may occur outside your country or region.

5. Retention

• Account details: until deletion, or a shorter or longer period necessary for security, disputes or legal obligations.
• Login cookie: up to 30 days, invalidated earlier on sign-out or account deletion.
• Application rate-limit records: usually about one minute, only in running memory.
• Local activity stays in your browser until cleared. Synchronized account activity is also stored in our server database; clearing browser data does not delete that copy. Deleting your account removes its synchronized activity.
• Related ranking requests: used to complete that ranking and not kept as a long-term watch profile.
• Analytics events: according to the PostHog project's retention settings.
• Session replays: usually about 30 days under the PostHog project settings.
• Infrastructure logs and backups: according to providers' security and rotation schedules.

6. Choices and rights

• Use the account area (Simplified Chinese) to view your login email, sign out, clear local activity or delete your server account.
• Clear cookies and localStorage through browser settings; you will need to confirm your age and sign in again.
• Where applicable, request access, correction, deletion, restriction, objection to processing or a portable copy.
• Withdraw consent where processing relies on it. Withdrawal does not affect the lawfulness of earlier processing.

Submit privacy requests through Contact. To prevent impersonation, we may require necessary verification through your active session or registered email.

7. Security and minors

Passwords use random salts and scrypt one-way hashing. Production login cookies use Secure and HttpOnly. No measure guarantees absolute security; use a unique password. This service is not intended for anyone under 18. Contact us immediately if a minor's information has been submitted; we will investigate and delete it.

8. Updates

When features, providers or legal requirements change, we will update this policy and the date above. Changes that significantly affect your rights will be communicated in a manner proportionate to their impact.