Privacy Policy

Last updated: June 15, 2026

SurrealCast ("we," "us," or "our") respects your privacy. This policy explains what data we collect, how we use it, who we share it with, and your rights regarding your personal information.

1. Information We Collect

Information You Provide

Data	When Collected	Purpose
Username	Account creation	Account identification
Email address	Account creation	Account recovery, notifications
Password (hashed)	Account creation	Authentication
Payment information	Video purchases and campaign donations	Payment processing (handled by Stripe)

Information Collected Automatically

Data	Purpose
IP address	Used at the moment you play a video to look up your country and city. We do not store your IP address. The lookup is performed by a third party (see section 3).
Country and city	Stored against the view so creators can see roughly where their audience is
Device category and browser family	Recorded as a broad category only (Mobile / Tablet / Desktop, and Chrome / Firefox / Safari / Edge / Other), derived from your browser's user-agent string. We do not fingerprint devices.
Which videos you viewed, and when	View counts for creators, and your own "continue watching" list

We do not track how long you watch for. Playback happens in an embedded third-party player and we do not measure watch duration.

Information from Creators

Data	Purpose
Uploaded video content	Hosting and streaming
AI provenance metadata	Transparency and disclosure compliance
Revenue and payout data	Creator payments

2. How We Use Your Information

Provide the Service: Stream video, manage accounts, process payments.
Creator earnings: Record each purchase and campaign donation so creators can see what they have earned. Earnings come from purchases and donations, not from viewing time.
Creator analytics: Show creators their view counts, most-viewed videos, and the countries and device categories their audience uses.
Security: Protect accounts, authenticate requests, and rate-limit abusive traffic.
Moderation: Review uploads before publication and act on reports.
Communication: Send account-related emails (password resets, payment confirmations, policy updates).

3. Who We Share Your Information With

Third Party	Data Shared	Purpose
Stripe	Payment details, email	Payment processing and creator payouts
Bunny.net (CDN)	IP address, device info	Video hosting and delivery
Railway	Application data at rest, including your account record	Application and database hosting
ip-api.com	Your IP address, at the moment you play a video	Looking up the country and city for that view. Only the country and city are returned to us and stored; the IP address is not.
Resend	Email address	Sending account emails such as password resets
Google	Email address and name, if you choose to sign in with Google	Authentication

We do not sell your personal information to third parties. We do not share your viewing history with advertisers. We do not run ads on the platform.

4. Data Retention

Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
View records: Retained while your account is active so creators keep accurate view counts. Removed when the account is deleted.
Payment records: Retained as long as required for tax and accounting purposes. Stripe holds the payment details themselves under its own retention policy.
Creator content: Retained until the creator removes it or the account is closed.

5. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your account and associated data.
Data Portability: Request your data in a machine-readable format.
Opt-out: Opt out of non-essential communications.
Restriction: Request we limit processing of your data in certain circumstances.

To exercise any of these rights, email privacy@surrealcast.com. We will respond within 30 days.

6. Cookies and Local Storage

We use browser local storage to:

Keep you signed in (session token, expiry).
Remember your preferences (video quality, volume).

We do not use third-party tracking cookies. We do not use advertising cookies. We do not participate in cross-site tracking.

7. Security

We protect your data through:

Encrypted connections (HTTPS/TLS) for all data in transit.
Hashed passwords (never stored in plain text).
Signed, time-bound playback tokens to prevent unauthorized access.
Rate limiting on authentication endpoints.
Append-only audit logs for all security-relevant events.

8. Children's Privacy

SurrealCast is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a minor, we will delete it promptly.

9. International Data Transfers

Your data may be processed in the United States and other countries where our infrastructure providers operate. We ensure appropriate safeguards are in place for international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions or to exercise your rights:

Email: privacy@surrealcast.com