Privacy Policy

1. Scope

This Privacy Policy explains how VRLewds ("we", "us", "our") collects, uses, and protects personal data when you use vrlewds.com, dev.vrlewds.com, related APIs, and the Vibealong companion experience.

2. Identity and account processing

Account sign-in and account recovery are handled through our central identity provider ("VRLewds Identity"). When you authenticate, we receive and store the minimum claims required to run your VRLewds account (for example: identity subject, username, email, and verification state).

We do not store your identity-provider password in VRLewds application storage.

3. Data categories we collect

• Account data: user ID, username, display name, identity subject, email, roles, and account status.
• Profile data: avatar, banner, bio, support links, and channel settings.
• Content data: video metadata, tags, thumbnails, comments, chat messages, and moderation actions.
• Technical and security data: IP-derived risk signals, user agent, request logs, anti-abuse counters, and session information.
• Preference data: cookies/local storage preferences including age-gate and consent choices.

4. How we use data

• Provide account access, creator tools, livestreaming, chat, and video delivery.
• Operate moderation, trust and safety, abuse prevention, and incident response.
• Store and serve user-uploaded assets and video media.
• Support creator features such as tags, follows, playlists, notifications, and campaigns.
• Operate sponsored placements and ad slots. Optional ad measurement is only enabled after user consent.
• Comply with legal obligations and enforce our Terms.

4.1 Advertising and sponsored placements

VRLewds may display sponsored placements. We review sponsored content for platform fit and policy compliance before publication.

We do not enable optional ad measurement cookies/storage until you opt in. Without consent, we still serve placements but do not run non-essential ad measurement on your device.

5. Legal bases

• Contract necessity (Art. 6(1)(b)): operating your account and requested platform features.
• Legitimate interests (Art. 6(1)(f)): service security, abuse prevention, product reliability, and platform improvement.
• Consent (Art. 6(1)(a)): where required, including optional tracking or integrations.
• Legal obligation (Art. 6(1)(c)): legal compliance and law-enforcement cooperation where required.

6. Service providers and data sharing

We do not sell personal data. We share data only when needed to run the service.

• Cloudflare R2 object storage: stores media files and related objects uploaded to VRLewds (video segments, thumbnails, profile assets, and similar content objects).
• Identity provider: handles authentication and account identity lifecycle.
• Infrastructure providers: hosting, CDN, and networking providers required to serve the product.

7. Vibealong, companion app, and Lovense integration

Vibealong is an optional feature that distributes real-time stream intensity events for compatible clients. If enabled by a creator, the system processes event data such as stream ID, intensity, and timing signals.

The Vibealong companion app may authenticate through VRLewds Identity and receive scoped tokens to access companion endpoints. Companion sessions and anti-abuse controls may log security metadata (for example, request timing, IP-based rate-limit context, and token status).

Lovense support is optional. If used, requests are proxied through VRLewds APIs and may involve Lovense developer endpoints/tokens required to establish device sessions.

8. Retention

• Account records: retained while account is active, then deleted or anonymized according to operational/legal requirements.
• User content: retained until deletion by creator, moderation action, or account deletion workflows.
• Security and abuse logs: retained only as long as needed for security and compliance.

9. Cookies and local storage

We use essential cookies/local storage for login sessions, age-gate state, and consent settings. Optional non-essential processing is controlled through your consent settings. See our Cookie Policy for details.

10. Security

We use HTTPS, access controls, credential protection, and other reasonable technical and organizational safeguards. No internet service can be guaranteed 100 percent secure.

11. Your rights

Where applicable, you may request access, correction, deletion, restriction, objection, and data portability. Use /contact for privacy requests.

12. International transfers

Some providers may process data outside your home country. Where required, we rely on lawful transfer mechanisms such as contractual safeguards.

13. Changes

We may update this policy as the product evolves. Material updates will be reflected on this page with a new "Last updated" date.

14. Contact

For privacy questions or requests, contact us through /contact.