How we handle data
What Tidal Creatives stores about you, why, and for how long.
Cookies we set
Sign-in session
Keeps you signed in. Without it, signing in cannot mean anything. Removed when you sign out; expires after 30 days.
Strictly necessary — no choice offered
Theme
Remembers whether you chose light or dark. Set only when you press the control that sets it.
Your own action
Free-video meter
Counts how many free videos you have watched, so we know when to ask you to sign in. Stores counts, not an identity.
Needed to deliver the free tier
Cookie notice
Remembers that you pressed “Got it” on the cookie notice, so it is not shown again. Kept for 180 days.
Needed to stop showing the notice
Viewing ID
A random ID, set on your first visit and kept for a year, so we can count how many people watch rather than how many times a video is played. With it we record which episodes you start and how far you get, what you share, which upcoming stories you ask to hear about, when you reach a sign-up or payment screen, and the steps of signing up or signing in. We also note, once, how you first found us: the campaign tags on the link you followed, the name of the site that sent you (not the page), the page you landed on, and whether you were on a phone, tablet or computer. It is not derived from your name, your email or your address. If you sign in, it is connected to your account, so that what you did before and after signing in is counted as one person, including any purchase. It is used only for our own statistics and is never shared.
Set for every visitor — our legitimate interest in understanding how the service is used
What we count
We count every visitor. Besides the viewing ID above, we keep hourly totals of visits and of episodes started, with no identifier and no link to you or your account. So that nobody can inflate these figures, we also keep a scrambled form of your network address beside a short-lived counter. It is used for nothing else, and old entries are cleared automatically.
When you press “Got it” on the cookie notice we keep a record of that: which version of the notice you saw, when, and your account if you were signed in at the time. It exists so we can show what you were told.
Deleting this site's cookies in your browser removes the viewing ID from your device. A new one is set on your next visit.
If you have an account
We store the email address and display name you gave us, which dramas you saved, how far you got in each episode, any ratings or comments you posted, and a record of anything you purchased. Purchases are handled by Xendit; we never see or store your card details.
Who else sees this
Vercel
Runs the servers this site is served from, so every request reaches them. They also count page views for us — which page, roughly which country, what kind of device. No cookie is set for this and nothing stored on your device; the count is worked out at their end and never joined to your account.
Hosting is necessary — counting page views is our legitimate interest
Supabase
Holds the database and the artwork: your account, what you saved, how far you got in each episode, and anything you rated or posted.
Necessary to run the service
Bunny Stream
Hosts and delivers the video. Playing an episode fetches it from them directly, so they see your IP address and which episode you asked for.
Necessary to play video
Xendit
Takes the payment. You enter your card on their page rather than ours, so we never see or store card details — only that a purchase succeeded, for how much.
Only when you buy something
Our email provider
Delivers the messages the service has to send: confirming your address, resetting a password, and receipts. It receives your email address and the contents of that message.
Only when a message is sent to you
Your rights under RA 10173
You may ask what we hold about you, ask for it to be corrected, or ask for your account and its data to be deleted. Deleting your account removes your profile, your viewing history, your ratings and your comments.
This notice describes what the service technically stores. The operator's contact details for data protection requests, and the process for raising a concern with the National Privacy Commission, are still to be added here.