Privacy Policy

Bentobox Limited LLC, [ADDRESS]. Contact: [CONTACT EMAIL].

• Account details: your email address and password (stored as a one-way hash, so we cannot read it). If you sign in with Apple or Google, we receive the identity they share with us (such as your email address) so we can match it to your account.
• Viewer profiles: the profile names and avatars you create on your account.
• My List and resume points: the titles you save and where you stopped watching, kept per profile.
• Beta waitlist answers: when you join the waitlist, your email, the devices you watch on, the streaming services you pay for, your favorite horror films and how you heard about us.
• Invite codes: the invite code you used to create your account.
• Subscription status: whether you have an active subscription, its plan and where it was bought (our website, Apple or Google).
• Payments: handled by Stripe. We never see or store your card number. We keep Stripe's customer and subscription identifiers so we can link a payment to your account.
• Technical data: the sign-in and profile cookies described in our Cookie Policy, and the standard request logs our hosting providers keep (such as IP address and browser type) to run and secure the service. [ATTORNEY: confirm log retention periods]

• Resume points and My List stay in our database, tied to your profile, so they work across your devices. We use them only to run those features.
• Viewing statistics are anonymous. To learn how many people watch a film and how far they get, we record each viewing session with the title, how long it was watched, the device type and the country. The country is worked out from your connection when you watch; we keep only the country, not your IP address. We do not store your account or profile identifier with these statistics, so they aren't linked to you.
• We do not share your viewing history with advertisers or analytics vendors, and we do not place third-party tracking pixels on pages or screens that play video.

[ATTORNEY: confirm wording against the Video Privacy Protection Act]

We plan to offer live-event features in the future that can use your approximate location. This does not exist yet. When it does:

• it will be opt-in, and you can turn it off at any time;
• it will be approximate only (an area roughly 5 km across), never your precise position, and never collected in the background;
• it will be deleted within 24 hours after the event;
• we will never share any person's location or attendance with venues, vendors or advertisers.

We will update this policy before launching it.

• to create and secure your account and sign you in;
• to provide the service: playback, profiles, My List, resume points and subscriptions;
• to send account emails (such as confirming your email or resetting your password);
• to run the closed beta, including sending waitlist invitations;
• to understand, in anonymous aggregate form, what is watched, and to report to filmmakers;
• to prevent abuse and fraud, and to comply with the law.

These companies process information on our behalf. We do not sell your personal information.

• Supabase: hosts our database and handles accounts and sign-in.
• Vercel: hosts the website.
• Stripe: processes card payments and subscriptions.
• Mux: encodes and streams video. Its viewer-analytics tracking is turned off in our web player.
• Resend: sends account emails (planned).
• Apple and Google: if you sign in with them, or buy through their app stores (planned), under their own terms and privacy policies.

We may also disclose information if the law requires it, or in a sale or reorganization of the business.

We keep account information while your account exists. Waitlist answers are kept until the beta ends or you ask us to delete them. [RETENTION PERIODS: attorney/BD to set for accounts, waitlist, logs and payment records]

You can delete your account yourself: sign in, open Account, and choose "Delete account". This permanently deletes your profiles, My List, resume points, subscription records and sign-in details, and cancels any subscription bought on this website. Anonymous viewing totals, which are not linked to you, are kept. Subscriptions bought through the App Store or Google Play must be cancelled there. You can also choose "Download my data" on the Account page to get a copy of your information as a file. For anything else, including correction of your information, email [CONTACT EMAIL] from the address on your account. We will respond within [RESPONSE TIME].

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the EU/UK GDPR. [ATTORNEY: confirm which laws apply and add the required disclosures]

We use access controls and encrypted connections to protect your information, but no system is perfectly secure.

Cult Theater is for viewers aged [MINIMUM AGE: BD/attorney to decide, e.g. 13+ or 18+] and over, and features horror content with mature themes. We do not knowingly collect information from people younger than that. If you believe we have, contact us and we will delete it.

We will post changes here and update the date at the top. For material changes we will notify you by email or in the service [NOTICE PERIOD] before they take effect.

Bentobox Limited LLC, [ADDRESS], [CONTACT EMAIL].