Privacy Policy

This policy explains what VIRAL collects when you use our apps and website, why we collect it, who we share it with, and the choices you have. We have tried to describe the service as it actually works rather than list every conceivable practice.

Who we are

VIRAL operates this website and the VIRAL apps for phone, tablet, TV and the web. If you need to reach us about privacy, email privacy@getviral.live.

What we collect

Your email address. Signing in uses a one-time code sent to your email; there is no password. We store your address so we can recognise your account, and we store a short-lived hash of the code itself while it is valid.

Profiles you create. The profile name you choose, whether it is a kids profile, its maturity limit, and its avatar selection. Profile names are yours to pick — they do not have to be real names.

What you watch. Your watchlist, and your playback position in a title so you can resume it on another device. We also record active playback sessions so we can enforce the limit on simultaneous streams.

Product analytics. Events about how the service is used — for example that a title was opened or playback started — along with a session identifier, the interface language, and your account identifier where you are signed in. We use this to understand what people watch and to fix what is broken.

Sign-in sessions and devices. A hashed session token, when it was created and last used, and the pairing code used when you activate a TV. Sessions expire after 90 days.

Approximate location, by country only. Our content delivery network tells us which country a request came from. We use it to apply the licensing rules for a title and to choose a default language. We do not collect GPS or precise location.

Subscription and entitlement state, where you have one, including records of purchases made through an app store or payment provider.

Downloads stay on your device. Titles you download for offline viewing are stored in the app's own storage on that device. We do not receive a copy of them.

What we do not do

We do not sell your personal information. We do not track you across other companies' apps and websites for advertising. We do not ask for your contacts, photos, microphone or precise location.

Advertising

VIRAL is free to watch with ads. Where ads are shown, they are scheduled by our own servers and requested from an ad partner at playback time. That request can include coarse, non-identifying context such as the country and the kind of content being played. If you hold an ad-free entitlement, the ad path is skipped entirely.

Who we share it with

We use a small number of service providers who process data on our behalf and are not permitted to use it for their own purposes:

• Microsoft Azure — hosting, databases and delivery of one-time sign-in codes by email.
• Cloudflare — content delivery, and the country signal described above.
• The Movie Database (TMDB) — artwork and descriptive metadata about titles. Requests your browser or app makes for poster images go to TMDB directly.
• An advertising partner, only when ads are enabled, as described above.

We may also disclose information where the law requires it, or to protect the service and its users from fraud, abuse or a security threat.

How long we keep it

Account details, profiles, your watchlist and playback positions are kept while your account exists. Sign-in sessions expire after 90 days, and one-time codes expire within minutes. Analytics events are retained in a form linked to your account only while the account exists. When you delete your account, the profiles, watchlist and playback history attached to it are deleted with it.

Your choices

You can edit or delete a profile, clear your watchlist, and sign out of a device at any time from within the app. To request a copy of your data or to delete your account and everything attached to it, email privacy@getviral.live from the address you signed up with and we will action it.

Depending on where you live you may also have the right to correct your data, object to or restrict certain processing, or complain to your data protection authority. We will not treat you differently for exercising any of these rights.

Children

VIRAL is not directed at children under 13, and we do not knowingly create accounts for them. Kids profiles are a content filter applied to an adult's account, not a separate account for a child. If you believe a child has given us personal information, contact us and we will remove it.

Security

Sign-in codes and session tokens are stored hashed, never in plain text. Traffic between your device and our servers is encrypted in transit. No service can promise perfect security, but we work to keep the amount of data we hold small enough that there is little to lose.

Changes

If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect.