Privacy Policy

We collect the following categories of information:

• Account info: email, username, password hash, profile picture, profile description.
• User Content: videos, images, captions, comments, reactions, playlists, and metadata you upload or create.
• Technical info: IP address, user agent, device type, OS, browser, referrer, timestamps, and basic logs needed to operate the Service.
• Usage info: watch history, search queries, likes, subscriptions, watch time, and similar interaction events you generate on the Service.
• Cookies & local storage: session identifiers, security tokens, preferences (theme, volume), and the visited-videos list. We do not currently use third-party advertising trackers.
• Push subscription: if you opt in, your browser-provided push endpoint and keys (we never see your device PIN or password).

• Provide and operate the Service (host and stream User Content)
• Authenticate you, secure your account, and prevent fraud and abuse
• Improve features, personalize recommendations, and tune performance
• Send service notifications and (if you opt in) push alerts
• Enforce our Terms and comply with applicable law
• Detect and report child sexual abuse material to NCMEC and law enforcement as required by 18 U.S.C. §2258A

Where the GDPR applies we rely on: (a) contract — to deliver the Service you requested; (b) legitimate interests — operating, securing, and improving the Service; (c) consent — for push notifications and any optional analytics; (d) legal obligation — record-keeping, mandatory reporting, and responses to lawful requests.

We share information only as described here:

• Service providers who help us host, operate, and secure the Service (for example, cloud infrastructure, databases, authentication, media delivery, and email). Each provider is bound by confidentiality obligations and may use your information only to provide services to us.
• Other users: public-facing parts of your profile and User Content you choose to make public are visible to others.
• Legal requests: we may disclose information if required by law, subpoena, court order, or to protect the rights, safety, or property of Memories, our users, or the public.
• Business transfers: if we are acquired or merge, information may transfer to the successor under terms at least as protective.

We do not sell your personal information for money. We do not share it with advertisers for cross-context behavioral advertising.

We keep account info for as long as your account is active. User Content is retained while it remains posted; if you delete content, copies may remain in backups and cached copies for up to 30 days before being purged. Logs are kept up to 12 months. Records we are legally required to keep (e.g. mandatory reporting evidence) are retained for the period required by law.

Depending on where you live (EU/UK GDPR, California CCPA/CPRA, and similar laws), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent for processing based on consent
• Lodge a complaint with your local data protection authority (EU/UK)

To exercise these rights email privacy@memories.brozy.org from the email associated with your account. We respond within 30 days. We will not discriminate against you for exercising your rights.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact privacy@memories.brozy.org and we will delete it promptly.

We use industry-standard safeguards, including encryption in transit, secure authentication, hashed passwords, and access controls. No system is perfectly secure; we cannot guarantee absolute security. Report suspected vulnerabilities to security@memories.brozy.org.

Your information may be processed in countries where we or our service providers operate. By using the Service, you consent to this processing. Where required by law, we use standard contractual clauses or equivalent safeguards.

We use first-party cookies and local storage for session management, security, and remembering preferences. We do not use third-party advertising cookies. You can clear cookies in your browser settings — doing so may sign you out and reset preferences.

We do not respond to "Do Not Track" browser signals because there is no agreed standard. We otherwise do not track you across third-party sites.

We may update this Policy. Material changes will be announced in the Service or by email. Continued use after the effective date constitutes acceptance.