Template. Fill in the highlighted fields in site.config.json and have a lawyer review this page before you publish it.
Privacy Policy
Effective [effective date]
This policy explains what personal data [legal name] ("we") collects when you use Trampling, why, and your rights. We are the data controller. Contact: [support email], [address], [country].
What we collect
- Account: your email address, display name, a one-way hash of your password (never the password itself), and when you accepted our Terms.
- Purchases: the videos you've bought, what you paid, and the payment references our processor gives us. We never receive or store your card details. CCBill collects and processes payment information under its own privacy policy.
- Viewing and security: which videos you start or download, when, the login session and IP address used, to enforce the screen limit, stop account sharing and investigate leaks of our content.
- Favorites you save.
- Waitlist: if you join the waitlist before launch, your email address, when you joined and the IP address and browser you used, as a record of your consent. You don't need an account for this.
- Cookies: only strictly necessary ones: a login session cookie and a cookie remembering that you confirmed you are 18 or older. Your browser may also store display preferences locally. We use no advertising or tracking cookies.
Why we use it (legal basis)
- To provide your account and the videos you buy (performance of our contract with you).
- To email waitlist members about our launch and new videos (your consent, which you can withdraw at any time through the unsubscribe link in every email or by writing to [support email]).
- To prevent fraud, account sharing and piracy, and to keep the Site secure (our legitimate interests).
- To meet legal obligations, such as age-related rules, tax and accounting records, and responding to lawful requests.
Who we share it with
Our payment processor (CCBill), our hosting and infrastructure providers, and professional advisers, each only as needed to run the Site, and authorities where the law requires it. We do not sell your data.
International transfers
Some providers may process data outside your country. Where data leaves the EEA or UK we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
Account data for as long as your account exists, then up to 30 days. Viewing and security logs for up to 90 days. Billing records as long as tax and accounting law requires.
Your rights
You can ask to access, correct, delete or receive a copy of your data, and object to or restrict some uses, by emailing [support email]. You can also complain to your data protection authority.
Minors
The Site is for adults only. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
Changes
We will post updates here and tell account holders about important changes.