Privacy Policy

This policy describes what AiFanFlix stores, why, and what you can do about it. It reflects what the platform actually records rather than a generic template.

What we store

Account data

• Your username, email address, and account status.
• A secure hash of your password. We never store your password itself and cannot recover it.
• A count of consecutive failed sign-in attempts and, if your account locks, the time the lock expires. This exists to slow down password guessing.

Sessions

When you sign in we set a single HttpOnly cookie holding a random session token. We store only a SHA-256 fingerprint of that token, never the token itself, so a database disclosure cannot be used to take over accounts. Sessions expire after 30 days, and signing out revokes the session on the server rather than only clearing the cookie. Resetting your password revokes every session on every device.

Profile and activity

• Anything you choose to add to your profile: display name, bio, country, avatar, links.
• Films you submit, along with the tooling you disclose and the workflow notes you share.
• Your reactions, comments, forum posts, suggestion votes, follows, and watchlist.
• The date and time you accepted the creator rights warranty for each submission.

Technical data

We record the browser user agent and, where available, the IP address associated with a session, to help investigate abuse. View counts are aggregate totals and are not tied to individual members.

What we do not do

• We do not sell your personal data.
• We do not host your video files, so we hold no video content about you.
• We do not build advertising profiles from your viewing history.

Advertising

AiFanFlix is supported by platform-wide advertising placed in fixed slots on browse pages. Ads are not targeted using your on-platform behaviour. If an ad provider is introduced that sets its own cookies, this policy will be updated before that happens and the provider will be named here.

Third parties

Films play through embedded third-party players. When a player loads, that provider may set its own cookies and receive your IP address under its own privacy policy, which we do not control. We load YouTube embeds through their no-cookie domain where possible, and Vimeo embeds with tracking disabled.

Retention

• Expired sessions and used password reset tokens are purged.
• Deleting your account removes your profile, films, comments, and posts. Moderation and copyright records are retained without your account link, because they document decisions the platform made.
• A film removed for a copyright claim is retired from public view but not erased.

Your choices

• Edit or clear most profile fields at any time from your settings.
• Delete your own comments and forum posts.
• Withdraw a film, which removes it from public view.
• Request account deletion, or a copy of your data, by contacting us.

Children

AiFanFlix is designed for a general audience and may include mature fan-created content. As part of our commitment to user safety, we do not knowingly allow account creation for children under 13.