Privacy Policy

Last updated: March 2026

Short version: We collect only what we need to run the platform. We do not sell your data. We do not run ads.

1. What We Collect

  • Account information you provide: username, email, hashed password.
  • Content you upload: videos, images, comments.
  • Usage data: which videos you watch, your watch history, subscriptions, and likes — stored locally on our server only.
  • Session data: a secure cookie to keep you logged in.

2. What We Don't Collect

  • We do not use third-party tracking scripts (no Google Analytics, no Facebook Pixel).
  • We do not collect your IP address beyond what Apache logs by default.
  • We do not share or sell your personal data to any third party.

3. How We Use Your Data

  • To operate your account and provide the service.
  • To send transactional emails (welcome, password reset, membership confirmation) via PHP mail().
  • To notify you of new subscribers, approved content, and platform updates.

4. Data Storage

  • All data is stored in JSON files on the server — no third-party database services.
  • Passwords are hashed using bcrypt and never stored in plain text.
  • Data files are protected from web access and signed with HMAC-SHA256 to detect tampering.

5. Payments

  • Payments are processed by PayPal. We do not store your payment card details.
  • We only receive a confirmation token from PayPal to activate your membership.

6. Your Rights

  • You can delete your account at any time from Settings. This removes all your data permanently.
  • You can clear your watch history from the Library page.
  • You can request a data export by emailing help@nzquakes.com.

7. Cookies

  • We use one session cookie to keep you logged in. No third-party cookies.
  • If you enable "Remember Me", a long-lived cookie is set. You can clear it by signing out.

8. Contact

  • For privacy questions, email us at help@nzquakes.com.