Privacy Policy

1. Information We Collect

Account Information

• Username and password (password is hashed, never stored in plain text)
• Stellar wallet public key (required for payments and withdrawals)
• Display name (optional)

Automatically Collected

• IP address — used for anti-abuse (residential verification, duplicate detection)
• Watch time and viewing sessions — used for reward eligibility
• Chat messages — stored for moderation and history
• Transaction records — all XLM payments, rewards, and withdrawals

What We Do NOT Collect

• Email addresses (not required for registration)
• Real names or personal identification
• Stellar wallet secret keys (we never have access to your private key)

2. How We Use Your Information

• IP addresses: To verify residential status, detect VPN/proxy usage, prevent multi-account abuse, and enforce one-account-per-IP rules. IP classification results are cached for up to 1 hour.
• Watch time: To determine reward eligibility (70% watch threshold) and prevent AFK farming.
• Transaction data: To process XLM payments, distribute rewards, and maintain an audit trail.
• Chat messages: To display in the public chat, apply profanity filters, and enable moderation.

3. Public Information

The following is publicly visible to all users:

• Your username and display name (unless queuing anonymously)
• Videos you queue (unless anonymous)
• Chat messages
• Leaderboard rankings
• Play history (video title, cost, viewers rewarded, per-viewer split)

Your Stellar wallet address, IP address, and internal balance are NOT publicly visible.

4. Blockchain Transparency

XLM transactions (enqueue payments, withdrawals, donations) are recorded on the public Stellar blockchain. Transaction hashes are linked in your transaction history and play history. These on-chain records are permanent and publicly accessible via block explorers like stellar.expert.

5. Cookies

We use the following cookies:

• Session cookie (sessionid) — Required for login. Expires when you close your browser or after 2 weeks.
• CSRF cookie (csrftoken) — Required for form security. Prevents cross-site request forgery.
• Cookie consent (cookie_consent) — Remembers your cookie preference. Expires after 1 year.

We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

Third-party cookies: YouTube's embedded player may set its own cookies. These are governed by Google's Privacy Policy.

6. Data Retention

• Account data is retained as long as your account is active.
• Transaction records are retained indefinitely for audit purposes.
• Chat messages are retained indefinitely.
• IP address data in viewer sessions is retained for reward verification.
• Inactive accounts (90+ days without login) may have their balance reclaimed, but the account itself is not deleted.

7. Data Security

• Passwords are hashed using Django's PBKDF2 algorithm.
• All connections are encrypted via HTTPS/TLS.
• Stellar wallet secret keys are never stored for user wallets (external wallets only).
• The platform wallet secret key is stored as an environment variable, not in code or the database.

8. Third-Party Services

• YouTube — Video embedding and metadata. Subject to YouTube's Terms of Service.
• Stellar Network — Blockchain for XLM payments. Transactions are public and permanent.
• MaxMind GeoLite2 — IP geolocation database for residential verification. No data is sent to MaxMind; lookups are performed locally.
• Cloudflare — DNS, CDN, and DDoS protection. Subject to Cloudflare's Privacy Policy.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to processing of your data

To exercise these rights, contact us at .

10. Children's Privacy

This Service is not intended for users under . We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy questions or data requests, contact us at .