Privacy Policy

What we collect

• Account details: your name, email, and password (stored hashed).
• Referral relationships: who invited you and who you invited.
• Transactions: membership purchases, commissions, and withdrawal requests (including bank details you provide).
• Usage data: watch progress and basic activity to improve the service.

How we use it

We use your data to operate your account, run the membership and referral program, process withdrawals, send transactional notifications, and keep the platform secure. We do not sell your personal data.

Usage statistics (our own)

To understand how the service is used, our server records a small number of events: account sign-ups (and whether a referral code was applied), membership invoices, payments and their confirmation, commissions distributed, withdrawal requests and payouts, and when a title’s player page is opened (repeat opens of the same title within 30 minutes count once).

• Each record holds only internal ids (account, viewing profile, title or invoice), the time, and simple values such as an amount or payment method. We do NOT store your IP address, email, name, or device details in these statistics — visitors who are not signed in are counted anonymously.
• These statistics stay on our own server, are never shared or sold, and are deleted automatically after 180 days.
• They may power features such as the “Trending” row (titles opened most often in the last 7 days).

Third-party analytics (optional)

The site operator may enable one of the following tools. Which one is active right now is stated below.

• Google Analytics 4 — uses cookies (such as _ga) to measure visits. It is loaded ONLY after you click “Accept” in the cookie banner; if you decline or do nothing, no Google script is loaded. We do not enable advertising features. You can change your choice any time via “Cookie settings” at the bottom of the page.
• Plausible Analytics — a privacy-friendly tool that uses no cookies and stores no personal data; it counts page views in aggregate, so no consent banner is shown for it.

Currently active: none — no third-party analytics is loaded.

Cookies we use

• noxac-session — strictly necessary. Keeps you signed in and remembers your language and choices during a visit. Expires after 2 hour(s) of inactivity.
• XSRF-TOKEN — strictly necessary (security). Protects forms against cross-site request forgery. Same lifetime as the session.
• remember_web_… — functional, only if you tick “Remember me” when signing in. Keeps you signed in across visits until you sign out.
• ref_code — functional (referral attribution), only if you arrive through a member’s referral link. Remembers who invited you for 30 days so they are credited if you sign up. Removed once you register.
• noxac_consent — strictly necessary, only when Google Analytics is enabled. Stores your cookie choice (accepted or declined) for 6 months.
• _ga, _ga_… — analytics (Google), set ONLY after you accept. Up to 2 years unless you decline later, which removes them.

We do not use advertising or cross-site tracking cookies. Your language preference is kept in the session, not in a separate cookie.

Emails

We send transactional emails (for example, membership confirmations, commission notifications, and withdrawal updates) to the address on your account.

Data security & retention

We take reasonable measures to protect your data. We retain it as long as your account is active or as needed to meet legal and accounting obligations.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting us. Some data may be retained where the law requires it.

Questions? See the Contact page.