Privacy Policy
Last updated 2026-10-06
This policy explains what personal data we process when you use amberzera.com, why, and what rights you have. It is written to meet the GDPR, the UK GDPR and US state privacy laws.
Who is responsible
Amber Zera, operator of amberzera.com, is the data controller. Contact: [email protected]
Data we collect
Account data: email address, display name, chosen avatar and a user ID (for guests, an anonymous ID). Profile settings you choose to enter: height, gender, country. Membership data: activation code redeemed, plan and the platform you bought from. Usage data: content you open, watch time, likes, My List, continue-watching progress, and an approximate country/city derived from your IP address. Technical data: IP address, browser and device type, and security logs.
How we use it
To create and secure your account; to provide streaming and remember your settings and progress; to check membership access; to show popular content and improve the Site using aggregated statistics; to prevent abuse, fraud and code sharing; and to meet legal obligations.
Legal bases
Performance of our contract with you (providing the Site); our legitimate interests (security, abuse prevention, statistics); your consent where required (you can withdraw it at any time); and legal obligations.
Who we share it with
We do not sell or rent your personal data and do not share it for advertising. We use service providers that process data on our behalf: Google (Firebase Authentication and Firestore for accounts, Google Drive for media hosting) and Cloudflare (hosting, delivery and security). Payments are handled by SubscribeStar or DeviantArt under their own policies; we never receive your card details.
International transfers
Our providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
Account and usage data are kept while your account is active and deleted or anonymised within 30 days after you ask us to delete your account, unless we must keep some data longer by law. Security logs are kept for a limited period.
Your rights
You can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. To use these rights write to [email protected]. You may also complain to your data protection authority. California residents: we do not sell or share personal information.
Minors
The Site is strictly for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
Security
We use encrypted connections (HTTPS), access controls and reputable infrastructure providers. No online service can be completely secure, so please use a strong password.
Changes
We may update this policy. The date at the top shows the latest version; important changes will be announced on the Site.