Privacy Policy

AllureTV ("we", "us", "our") operates the website alluretv.net and its associated mobile progressive web app. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it.

AllureTV is intended for adults aged 18 or older. By using the service you confirm you are of legal age in your jurisdiction.

1. Information we collect

1.1 Account information

When you sign in we collect the information your authentication provider shares with us:

• Google sign-in: email address, full name, profile picture URL, and a Google account identifier.
• Email magic link: the email address you provide.

We do not store passwords. Authentication is delegated to Supabase Auth and your chosen provider (Google).

1.2 Activity data

• Comments, ratings and replies you post on stories, with your display name and avatar.
• Likes you give to other comments and items you save to "My List".
• Anonymous, aggregated playback analytics (which stories were played, completion rate). We do not record audio or video of you.

1.3 Payment information

When subscriptions are enabled, payments are processed by Stripe, Inc. AllureTV does not see, store, or have access to your full card number. We retain only the subscription status (active / canceled / trialing), the renewal date, and a Stripe customer identifier.

1.4 Technical data

• IP address, browser user-agent, device type and language, used for security, fraud prevention, and to choose the right audio/text locale.
• Cookies strictly necessary for the session: a Supabase auth cookie (so you stay signed in) and a locale preference cookie (so the site remembers if you chose English / Deutsch / Français / Español).

Consent for analytics cookies. We do not enable PostHog analytics or session recording until you click Accept on the cookie banner. You can change your choice at any time via the Cookie preferences link in the footer. See our Cookie Policy for the full list.

1.5 Age verification data

Because AllureTV is intended for adults, we collect and retain:

• Your date of birth (required to confirm you are 18 or older).
• The timestamp at which you accepted these Terms and the version of the Terms you accepted.
• The country code derived from your IP address at the time of verification (used for compliance with local age-assurance laws).
• A hashed audit log entry (hashed IP and user-agent — never raw — plus the verification result) kept for compliance and fraud prevention.

Legal basis: compliance with our legal obligation to restrict adult content to adults (GDPR Art. 6(1)(c); LGPD Art. 7º, II). Age verification is valid for two years, after which you will be asked to re-verify.

2. How we use your information

• To create and authenticate your account.
• To provide the stories, audiobooks, ebooks, and player features.
• To process subscription payments via Stripe.
• To display your comments, ratings, and likes alongside other users' activity.
• To send transactional emails about your account (sign-in links, billing receipts, important service changes). We do not send marketing emails unless you explicitly opt in.
• To detect, investigate, and prevent fraud, abuse, and security incidents.

3. Service providers

We work with the following data processors. Each has its own privacy policy.

• Supabase (PostgreSQL hosting + Auth).
• Cloudflare (DNS, R2 object storage for media delivery, edge caching).
• Vercel (web application hosting).
• Google (when you sign in with a Google account).
• Stripe (payment processing — only active when subscriptions are enabled).
• PostHog (privacy-respecting product analytics).

4. Data retention

We keep your account information while your account is active and for up to 90 days after deletion to comply with legal and accounting obligations. Aggregated analytics may be retained longer in a form that no longer identifies you personally.

5. Your rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data (right to erasure / "right to be forgotten" under GDPR; right to delete under CCPA).
• Export your data in a portable format.
• Withdraw consent for any processing based on consent.
• Object to processing or request restriction of processing in certain cases.

To exercise any of these rights, email us at the address below. We respond within 30 days.

6. International transfers

Your data may be processed in the United States and the European Union. When data leaves your jurisdiction, we rely on the standard contractual clauses provided by the relevant data protection authorities.

7. Children

AllureTV is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the most recent revision. Material changes will be announced by email and on the site before they take effect.

9. Contact