Privacy Policy

RiftStream Inc. ("RiftStream," "we," "us") operates riftstream.tv and app.riftstream.tv (the "Services"). This policy explains what we collect, why, how long we keep it, and what you can ask us to do with it.

It is written to be read, not to be survived. If something here is unclear, email hello@riftstream.tv.

1. Who we are

RiftStream Inc. is a Delaware corporation and the data controller for information collected through the Services.

RiftStream Inc.
8 The Green, STE 23510, Dover, DE 19901
hello@riftstream.tv

RiftStream is operated by a single person. One individual — the founder — has administrative access to our database. We do not sell your information, and we do not share it with advertisers or data brokers.

2. What we collect

When you create an account

• Email address and a password. Passwords are hashed by our authentication provider; we never see or store your password in readable form.
• The date and time you created the account.
• Your agreement to these documents — we record which version of the Terms of Service you accepted and when. This is kept as a permanent record so both of us can tell what you agreed to.

We do not ask for your name, date of birth, phone number, or address at signup.

When you set up a profile or channel

Whatever you choose to add: username, display name, avatar image, bio, channel name. All of this is public.

If you add a creator support link, we store which platform you chose and your handle on it — for example kofi and yourname. We do not store payment details, card numbers, or bank information, and no money passes through RiftStream.

Age check for channels and uploads

When you start a channel — or before your next upload if you already have one — we ask for your date of birth, once, to confirm you are at least 18. It is stored separately from your public profile and isn't public: it can't be seen on the site, and it can't be changed in the app. (As noted in Section 1, the founder has database access.) If you entered it incorrectly, email hello@riftstream.tv and we will correct it. We keep it while your account exists; it is deleted automatically when your account is.

When you upload

• The video or audio file itself, which we pass to our video provider for storage and streaming
• Title, description, category, and genre
• Technical details our video provider returns, such as duration and processing state

When you use the Services

• Views. We count how many times a piece of content is played.
• Likes, follows, and comments. All public.
• Reports. If you report content, we store what you reported, why, and your account identifier if you were signed in.
• Product analytics. We use PostHog to understand how the Services are used: pages viewed, buttons tapped, your device and browser, your approximate location (derived from your IP address), page performance, and whether you have visited before. If you are signed in, this is linked to your account email. We also record some visits (session replay) to find problems with the site. Replays hide everything you type and are never recorded on sign-in, account, or admin pages.

Automatically, by our infrastructure providers

Our hosting, database, and video providers receive technical information in the ordinary course of serving you — IP address, browser and device type, timestamps, and request logs. We rely on that for security, abuse prevention, and keeping the site working. Each provider's own retention applies; see Section 6.

What we do not collect

• No advertising cookies or trackers. None.
• No payment data. Monetization is not active, and creator support links go directly to third-party platforms.
• No biometric, precise location, or health data.

3. Cookies

We use two kinds of cookies and similar storage. Sign-in: set by our authentication provider so you stay logged in. Analytics: PostHog stores an identifier on your device so we can tell whether you have visited before.

If you are in the EU, EEA, UK, or Switzerland, we ask first and collect nothing unless you accept. Elsewhere, analytics is on by default. You can turn it off at any time with the "Allow analytics on this device" switch on this page, which stops collection immediately and deletes the analytics identifier from your device. We also honor the Global Privacy Control signal. Your choice is stored on your device, so it applies to that browser only and resets if you clear your browser data.

We set no advertising cookies and use no third-party trackers.

You can clear cookies in your browser at any time. Doing so signs you out.

4. Why we use your information

5. We do not train AI models on your data

RiftStream does not use your content, your profile, or your activity to train, fine-tune, or develop any artificial intelligence or machine learning model. We do not build training datasets from it, and we do not sell, license, or otherwise make it available to anyone else for that purpose.

Section 3.4 of our Terms of Service sets out the full commitment, including the distinction between applying an existing model to content — which we do, for safety scanning and technical delivery — and training one, which we do not.

6. Who we share it with

We use a small number of service providers. They process data on our behalf, under their own terms, and only to deliver the Services:

We also disclose information when the law requires it — valid legal process, or an emergency involving a risk of death or serious physical injury. Our practice and the exceptions to it are set out on the Legal Notices page.

If RiftStream is ever acquired or merged, your information transfers with the business. Any successor is bound by the commitments in Sections 3.1, 3.4, and 8 of the Terms, per Section 15.3.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

7. How long we keep it

When you delete content or your account

• Public access is removed promptly, ordinarily within 24 hours
• Cached copies may persist in content delivery networks for a short period afterwards
• Backup copies are overwritten in the ordinary course within 30 days

We may retain material after removal where the law requires it — see Section 3.6 of the Terms. Preservation for a legal obligation is not a general right to keep removed content.

8. Your rights

Whoever and wherever you are, you can ask us to:

• Tell you what we hold about you
• Correct it if it's wrong
• Delete it — you can delete your account yourself at any time, or email us
• Export it in a portable form
• Object to or restrict a particular use

Email hello@riftstream.tv. We will respond within 30 days. We will not charge you, and we will not treat you differently for asking.

Two honest limits. Terms acceptance records are kept even after account deletion, because they are the record of an agreement between us. And material we are legally required to preserve — in connection with a report to NCMEC or law enforcement — cannot be deleted on request.

If you are in California

You have the rights above under the CCPA as amended by the CPRA, including the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We do not use sensitive personal information to infer characteristics about you.

If you are in the European Union, the United Kingdom, or Switzerland

You have the rights above under the GDPR and UK GDPR, plus the right to lodge a complaint with your local data protection authority. Our legal bases are set out in Section 4.

Where we transfer data outside your region, we rely on our providers' Standard Contractual Clauses and equivalent safeguards.

9. Children

You must be at least 13 to use RiftStream. You must be at least 18 to start a channel, upload, or participate in monetization.

If you are between 13 and 17, you may use RiftStream only with the permission and involvement of a parent or guardian.

We do not serve personalized or targeted advertising to accounts we know are used by anyone under 18.

We do not knowingly collect information from anyone under 13. If we learn that we have, we delete the account and its data. If you believe a child under 13 has an account, email hello@riftstream.tv and we will act on it.

10. Security

Access to the database is restricted to the founder. Passwords are hashed by our authentication provider. Database access is governed by row-level security, so one account cannot read or alter another's data. Material preserved for legal reasons is access-restricted and never displayed on the Services.

No system is perfect, and we won't pretend otherwise. If we discover a breach affecting your information, we will notify you and any required authority as the law requires.

11. Changes to this policy

We may update this policy. When we make material changes, we will notify you by email to your account address and/or by prominent notice on the Services, and the changes take effect 30 days after that notice. Non-material changes take effect when posted with a new effective date.

12. Contact

• Privacy questions, requests about your data: hello@riftstream.tv
• Trust & safety, including non-consensual intimate imagery: safety@riftstream.tv
• Legal notices: legal@riftstream.tv
• Copyright: the designated agent in Section 7.1 of the Terms

RiftStream Inc.
8 The Green, STE 23510, Dover, DE 19901