Privacy Policy
Last updated: March 2026
Short version: We collect only what we need to run the platform. We do not sell your data. We do not run ads.
1. What We Collect
- Account information you provide: username, email, hashed password.
- Content you upload: videos, images, comments.
- Usage data: which videos you watch, your watch history, subscriptions, and likes — stored locally on our server only.
- Session data: a secure cookie to keep you logged in.
2. What We Don't Collect
- We do not use third-party tracking scripts (no Google Analytics, no Facebook Pixel).
- We do not collect your IP address beyond what Apache logs by default.
- We do not share or sell your personal data to any third party.
3. How We Use Your Data
- To operate your account and provide the service.
- To send transactional emails (welcome, password reset, membership confirmation) via PHP mail().
- To notify you of new subscribers, approved content, and platform updates.
4. Data Storage
- All data is stored in JSON files on the server — no third-party database services.
- Passwords are hashed using bcrypt and never stored in plain text.
- Data files are protected from web access and signed with HMAC-SHA256 to detect tampering.
5. Payments
- Payments are processed by PayPal. We do not store your payment card details.
- We only receive a confirmation token from PayPal to activate your membership.
6. Your Rights
- You can delete your account at any time from Settings. This removes all your data permanently.
- You can clear your watch history from the Library page.
- You can request a data export by emailing help@nzquakes.com.
7. Cookies
- We use one session cookie to keep you logged in. No third-party cookies.
- If you enable "Remember Me", a long-lived cookie is set. You can clear it by signing out.
8. Contact
- For privacy questions, email us at help@nzquakes.com.