Privacy Policy

Last updated: April 18, 2026

WVault (“we”, “our”, “the Service”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account Information

  • Email address (required for registration)
  • Hashed password (we never store plaintext passwords)
  • Display name (optional)

Usage Data

  • Videos viewed and search queries (for recommendations and analytics)
  • Download history (for tier limit enforcement)
  • IP address and user agent (for security and abuse prevention)

Payment Data

  • Cryptocurrency payments are processed through BTCPay Server (self-hosted). We do not see or store your wallet details.
  • For manual payments (CashApp, Venmo, Zelle), we only store the order reference and confirmation status.
  • We do not collect or store credit card numbers, bank accounts, or financial credentials.

2. What We Do NOT Collect

  • Real names (not required)
  • Physical addresses
  • Phone numbers
  • Third-party tracking cookies or advertising pixels
  • Data from social media accounts

3. How We Use Your Data

  • Service operation: Authentication, subscription management, download tracking
  • Security: Detecting abuse, preventing unauthorized access, rate limiting
  • Communication: Account-related emails (password resets, subscription updates)
  • Legal compliance: Responding to valid legal requests

4. Data Storage & Security

All data is stored on our self-hosted infrastructure. We do not use third-party cloud services for data storage. Passwords are hashed using bcrypt. Sessions use cryptographically random tokens. All connections are encrypted via TLS.

5. Third-Party Services

We minimize third-party dependencies. The only third-party service involved in payment processing is the Bitcoin/Lightning network (decentralized, no third party). We do not use Google Analytics, Facebook Pixel, or any advertising trackers.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties. We may disclose data only when:

  • Required by law (valid court order, subpoena)
  • Necessary to protect our rights or safety
  • You have given explicit consent

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data in a portable format

To exercise these rights, please contact us. We will respond within 30 days.

8. Cookies

We use only essential cookies for authentication (session token). We do not use tracking cookies, analytics cookies, or third-party cookies.

9. Data Retention

Account data is retained while your account is active. Upon account deletion, personal data is permanently removed within 30 days. Download logs and payment records may be retained for up to 12 months for legal and accounting purposes. DMCA-related records are retained indefinitely as required by law.

10. Changes

We may update this policy from time to time. Material changes will be communicated via email. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, please contact us.