This policy explains what data XLoveMe collects, how it is used and what your rights are.
Data We Collect
Account information: Email address, username and an irreversibly encrypted digest (hash) of your password. We never store your password in plain form.
Usage data: Your watch history, likes and comments. This is kept so you can resume where you left off and receive recommendations.
Technical data: IP address, browser type and sign-in time. Retained for a limited period for security and abuse detection.
Payment data: Your card details never reach our servers. From the payment provider we store only the transaction reference, amount and status.
How We Use Data
- To manage your account and verify your VIP access
- To remember your watch history and preferences
- To detect fraud and abuse
- To meet our legal obligations
We do not sell your data to third parties for advertising.
Cookies
Essential cookies are used to keep your session open. Your language preference and age confirmation are stored in your browser. See the Cookie Policy page for details.
Retention
Account data is kept while your account is active. When you delete your account, your personal data is permanently erased within 30 days; only payment records we are legally required to retain are kept.
Your Rights
- Access your data and request a copy
- Request correction of inaccurate data
- Request deletion of your account and data
- Object to processing
To exercise these rights, write to us via the contact page. Requests are answered within 30 days.
Security
Passwords are hashed with bcrypt, sessions are held in signed HttpOnly cookies, and all traffic is transmitted over HTTPS.
Changes
This policy may be updated. Registered users are notified by email of significant changes.