Privacy Policy

Last updated: April 21, 2026

Vague Media, LLC ("we," "us," or "our") operates Videocrud.com (the "Site"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights. By using the Site, you agree to the practices described here.

If you are in the European Economic Area, United Kingdom, or Switzerland, Vague Media, LLC is the "controller" of your personal data for purposes of the GDPR/UK GDPR.

1. Information We Collect

Information you provide to us:

• Account information — email address, username, and password (stored in hashed form).
• Payment information — processed directly by our payment processor (Stripe). We receive a transaction confirmation, the last four digits of the card, the card brand, and billing country; we do not store full card numbers or CVV codes.
• Communications — messages you send us through contact forms, email, or support channels.

Information collected automatically:

• Device and usage data — IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
• Streaming analytics — which seasons you accessed, playback start/stop events, and approximate duration viewed. We use this to measure artist compensation, detect abuse (e.g., shared accounts), and improve the Service.
• Cookies and similar technologies — see Section 6.

Information from third parties:

• Fraud signals and verification data from our payment processor.

2. How We Use Your Information

We use personal information to:

• Provide, maintain, and improve the Service;
• Process purchases and grant access to seasons;
• Authenticate your account and prevent fraud, abuse, or unauthorized sharing;
• Communicate with you about your account, purchases, and changes to the Service;
• Send marketing emails about new seasons (only where you've opted in, and with an unsubscribe link in every email);
• Comply with legal obligations and enforce our Terms of Service;
• Compile aggregated, anonymized analytics.

Legal bases (GDPR/UK GDPR): We process your data under the following bases:

• Contract — to provide the Service you purchased.
• Legitimate interests — to secure the Service, prevent fraud, and improve our offering. You can object to processing based on legitimate interests (see Section 8).
• Consent — for optional marketing communications and non-essential cookies. You can withdraw consent at any time.
• Legal obligation — for tax, accounting, and regulatory compliance.

3. How We Share Information

We do not sell your personal information. We share it only with:

• Service providers — our payment processor (Stripe), hosting provider (Digital Ocean), email service (Buttondown), and analytics provider (Umami). These parties are contractually bound to use your data only to provide services to us.
• Artists — we share aggregated, non-identifying viewership data with artists to calculate royalties. We do not share individual viewer identities unless you explicitly consent.
• Legal and safety reasons — if required by law, subpoena, or court order, or to protect our rights, users, or the public.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4. International Transfers

We are based in USA. If you access the Service from outside USA, your data may be transferred to, stored in, and processed in USA and other countries where our service providers operate. Where data is transferred out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Data Retention

• Account data: retained while your account is active and for 3 years afterward, then deleted or anonymized.
• Transaction records: retained for 7 years to comply with tax and accounting laws.
• Server logs and analytics: typically retained for 90 days.
• Support communications: retained for 2 years.

You may request earlier deletion (see Section 8), subject to legal retention obligations.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in and maintain your session (strictly necessary);
• Remember your preferences (functional);
• Measure site performance and understand usage (analytics — only with your consent where required);
• Prevent fraud and account sharing.

You can control non-essential cookies through our cookie banner and your browser settings. Blocking strictly necessary cookies may break parts of the Service.

We use Umami, a cookieliess analytics tool.

7. Security

We use industry-standard measures including TLS encryption in transit, hashed passwords, restricted access to production systems, and regular security reviews. However, no method of transmission or storage is perfectly secure. You are responsible for keeping your account credentials confidential.

If we become aware of a breach affecting your personal data, we will notify you and relevant authorities as required by law.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information ("right to erasure");
• Restrict or object to certain processing;
• Data portability — receive your data in a machine-readable format;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a supervisory authority (in the EEA/UK, your local data protection authority).

California residents (CCPA/CPRA) additionally have the right to know what personal information is collected, to delete it, to correct it, to opt out of any "sale" or "sharing" (we do not sell or share personal information as defined by the CCPA), and to non-discrimination for exercising these rights.

To exercise any of these rights, email us at info@videocrud.com. We will respond within the time required by applicable law (typically 30 days). We may need to verify your identity before fulfilling the request.

9. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects on you. We may use automated systems to detect fraud or account sharing, but decisions to suspend accounts are reviewed by a human.

11. Do Not Track

Some browsers transmit "Do Not Track" signals. Because there is no industry standard for responding to these signals, we do not currently respond to them. We do honor the Global Privacy Control (GPC) signal where required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on the Site with a revised "Last updated" date, and where required by law we will notify you by email.

13. Contact Us

Questions, concerns, or requests regarding this Privacy Policy:

Vague Media, LLC
1111B S Governors Ave STE 40302
Dover, DE
19904
Email: info@videocrud.com