Privacy Policy

• A random device identifier we create the first time you open the app. It is not your phone's advertising identifier, and it is linked to your email only if you sign in.
• Viewing activity: which series and episodes you start, how far you watch, when, which screens you visit, which series you like, save or share, and when you open the unlock screen or start or restore a purchase, recorded against that identifier.
• Technical details when something goes wrong, such as the error a video or a purchase failed with. The app has no crash reporting.
• Purchase records when you unlock a series or subscribe to All-Access, including each weekly renewal: the product, price, store (App Store or Google Play), store transaction identifier and whether it was a sandbox or real purchase. Payment itself is handled by Apple or Google; we never see your card details.
• Your email address, only if you choose to sign in. Signing in is optional and exists so purchases and progress follow you to another device.
• A campaign identifier, if you open the app from a link on our website or in one of our ads. The link carries a random identifier we created when you first landed on our website; the app keeps it on your device and attaches it to your viewing activity so we can tell which advertising brought viewers who watch and buy. It is our own identifier, not the ad platform's, and the app itself sends nothing to TikTok or Meta.
• Install and purchase attribution, in the Android app. The app includes AppsFlyer's attribution kit. It records the install when you first open the app, each later time you open it, and your purchases, renewals and free trials, together with an identifier AppsFlyer creates for this installation, our random device identifier, your device model, operating system and app version, your IP address, and the referral details Google Play passes to the app (which store link or ad led to the install). AppsFlyer uses this to tell us, and the ad platform that showed you our ad (TikTok), whether that ad led to the install or the purchase. The app does not read your phone's advertising identifier.
• Standard connection data when the app streams video or calls our servers: your IP address and device type. We use it to deliver video and keep the Service secure. From the IP address we also look up the country and state you are in, nothing more precise, and store those with your viewing activity; the IP address itself is not stored with it. While you are signed in, our sign-in service (Supabase) also keeps the IP address and device type of your session.

The app shows no ads. Apart from AppsFlyer's attribution kit described above, it contains no advertising, analytics, attribution or crash-reporting kits from other companies. It does not access your phone's advertising identifier, does not ask for your contacts, photos or precise location, and shares what you do in the app with other companies only as described here: installs, purchases, renewals and free trials, through AppsFlyer, to measure our advertising.

• The same random identifier, viewing activity, optional sign-in email and connection data as the app, stored in your browser as a cookie.
• Advertising measurement and audiences. The website loads Meta's and TikTok's pixels. While they are enabled they receive each page you view on crazydramas.com, including which series page, together with cookie identifiers they set, your IP address and your browser type. They use this to measure our ads and to build audiences for showing you our ads on their platforms. When you arrive from one of our ads, the click identifier from the ad is kept in a cookie for up to 90 days. When you open checkout, and again if you buy, our servers also send both platforms a record containing that click identifier, their cookie identifiers, your IP address and browser type, our identifier in irreversibly hashed form and, on purchase, your email address in irreversibly hashed form. This is what lets the platform tell which ad led to a sale.
• Purchase records for website purchases, processed by Stripe: product, price, transaction identifier and the email you gave at checkout, including weekly All-Access renewals, VIP renewals and coin packs. We keep that email on your account so that signing in with it on another device restores what you bought. When you pay by card (Apple Pay included), we also keep the card fingerprint Stripe gives us: a code that recognizes the same card again, not the card number. We use it, with your checkout email, only to check that first-time offers go to first-time buyers and to prevent abuse.
• Coins, VIP and Rewards: your coin balance and a history of every coin movement (coins bought, bonus coins, rewards claimed, episodes unlocked, refunds, and coins moved from a browser to your account when you sign in); the episodes you unlocked with coins; the Rewards tasks you claimed and your check-in days; how many seconds you watched each day, for the watch rewards; the time zone your device reports, so daily rewards reset at your midnight; and the offers we showed you and when they end. It is kept under the same random identifier, and under your account once you sign in.

• Supabase: database and sign-in (your email and one-time codes).
• Resend: sends the sign-in code emails and, after a purchase on our website made without signing in, an email to the address you gave at checkout with a link to sign in and keep what you bought on every device.
• RevenueCat: in-app purchase records from the App Store and Google Play, kept under the random device identifier.
• Mux: video hosting and streaming. When a video plays, in the app or on the website, Mux receives your IP address and device type. On the website Mux also measures playback quality. For that it receives your device, browser and operating system, network provider and approximate location (country and region); which series and episode played and the page it played on (without the rest of the address); whether the episode was free, unlocked with coins or part of a series or plan you have; whether your visit came from one of our ads; how playback went (start time, pauses, freezes and errors); and a short code derived from our random identifier, which groups your views together. For this measurement Mux keeps your IP address only in shortened form, sets no cookie, and receives neither your name nor your email.
• Stripe: payments on the website.
• Vercel: hosting for the website and our servers.
• Expo: delivery of app updates (it receives a random installation identifier and your IP address when the app checks for one).
• Cloudflare: our domain, and delivery of email sent to our support address.
• AppsFlyer: install and purchase attribution for the Android app, as described above. It tells the ad platform that showed the ad (TikTok) whether that ad led to the install or the purchase.
• TikTok and Meta: advertising measurement and audiences for the website, as described above. From the Android app, TikTok receives only AppsFlyer's report of whether one of its ads led to an install or a purchase; Meta receives nothing from the app.

Google Play and the Apple App Store take payment for in-app purchases and subscriptions under their own privacy policies, and tell us, through RevenueCat, what was bought.

Producers of the series receive aggregated viewing and revenue statistics, never information about individual viewers.

• Viewing activity (with the country and state it came from) and error details: until you delete your account or, if you never sign in, until you ask us to delete it (see crazydramas.com/data-deletion). Resume points: until you delete your account or clear your watch history. After deletion, anonymous viewing records remain for our statistics, with no set end date, under a throwaway identifier in place of yours and with no link to your account or email.
• Your email: until you delete your account.
• Your coin balance and history, coin-unlocked episodes, Rewards claims, daily watch time and time zone: until you delete your account or, if you never sign in, until you ask us to delete them. The records of what you paid for coin packs are purchase records (below).
• The IP address and device type of a signed-in session: until you sign out or delete your account.
• The campaign identifier: on your device until you sign out or delete your account; on our servers with the viewing activity it is attached to.
• Purchase records: seven years, as tax and accounting rules require. When you delete your account they are kept without your email or account. They keep the order number and, for a purchase made in the app, the random device identifier it was made under (ours, not your Google or Apple account), so it can still be restored from that App Store or Google Play account.
• Records of the ad that brought you to our website (the ad's click identifier, the address of the page you arrived at, a hashed IP address and your browser type): until you delete your account or ask us to delete them. After that, which campaign brought you and the page you arrived at stay for our advertising totals, without your IP address or browser type.
• Advertising cookies on the website: up to 90 days.
• Mux's playback-quality records from the website (see Who processes it for us): up to 100 days, kept by Mux, then deleted by Mux.