Privacy Policy

This Privacy Policy explains how Videoflix processes personal data in connection with the use of our website and the associated video service. By using the platform, you agree to the processing described here.

1. Information we collect

We process information that is necessary to provide our services, especially account data such as your email address, password, and other registration details submitted during sign-up. We may also process information required for password reset, account activation, and secure login. If available in the application, profile data such as first name, last name, or avatar-related information may also be processed.

In addition, technical data is collected to ensure the platform functions correctly and securely. This may include login-related metadata, request logs, error information, and data needed to maintain access protection and prevent misuse.

2. Purpose of processing

Personal data is used to create and manage user accounts, authenticate the user, provide access to protected content, handle registration and account activation, process password resets, and protect the platform from unauthorized access or abuse.

We also use the data to ensure the reliability, security, and functionality of the service, including troubleshooting, incident response, and maintaining the technical operation of the website.

3. Cookies and session management

Videoflix uses cookie-based session handling for authentication. In particular, login sessions may be maintained through HTTP-only cookies to keep the user authenticated while using the website and to protect access to restricted routes. These cookies are essential to the operation of the service and are used to verify the user's session securely.

The frontend does not normally access authentication tokens directly in browser storage; instead, the backend typically manages secure session cookies. This reduces the risk of token exposure in the browser.

4. Data sharing

We do not sell personal data. Data is only shared with service providers or technical partners when this is necessary to operate the platform, such as hosting, authentication, email delivery, or security-related processing. Where required by law, we may also disclose data to public authorities or legal entities.

The exact third-party providers depend on the implementation of the backend and hosting environment. If a provider is used for user authentication, email delivery, or infrastructure, that provider processes data in accordance with its own privacy obligations.

5. Data retention

Personal data is retained only as long as necessary for the purpose for which it was collected or as required by applicable law. Account data may be kept while the account remains active, and some information may be retained for security, legal, or operational reasons after the account is closed.

If a user requests deletion, we will review the request in accordance with applicable legal requirements and the practical constraints of running the service.

6. Your rights

Depending on the applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data. You may also have the right to withdraw consent where consent is used as the legal basis for a specific processing activity.

If you wish to exercise a right or have questions about your personal data, please contact the operator of this service using the contact details provided in the Imprint section of the website.

7. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. This includes secure transmission, access restrictions, and protected authentication flows. However, no system can be completely secure, and we cannot guarantee absolute security in all cases.

8. Changes to this policy

This Privacy Policy may be updated from time to time to reflect changes in the service, legal requirements, or technical implementation. The current version will always be available on this page.

If you continue to use Videoflix after changes to this policy are published, you accept the updated terms.