Skip to main content

Privacy Policy

Effective Date: May 24, 2026 | Last Updated: August 3, 2026

What We Watch You Watch: Nothing

Streamlly does not build a record of the videos you watch, and we do not disclose your video viewing to anyone. Specifically:

  • No analytics on story pages. Our analytics and marketing tools are switched off entirely on story pages (/story/*). They do not record the page, the URL, or the video.
  • No advertising pixel ever fires on a story. Every ad pixel we load is blocked on story pages in the page itself, so no ad platform learns what you watched — regardless of your cookie settings.
  • Nothing about your viewing goes to our email tools. When you follow a story, our email provider is told only that you follow something, never which story. The story stays on our own servers.
  • Story-view counts are anonymous. We count how many times a story was played. That count is not linked to your account.

The exception is Mux, our video host, which necessarily processes playback in order to deliver the video to you and reports playback quality to us. Mux acts as our service provider under contract, does not receive your name or email from us, and is not permitted to use playback data for its own advertising or to build profiles.

If you follow a story, we keep that association so we can notify you and show you your library. You can unfollow at any time, and deleting your account removes it — see Section 6.

1. What We Collect

  • Email Address — used for transactional messages (confirmations, receipts) and for updates to stories you have chosen to follow. See Section 3.
  • Payment Information — only collected when you choose to amplify a story, and processed securely via a third-party provider.
  • Offline Payment Details — wire/ACH reference codes, deposit confirmations, and related metadata needed to reconcile non-card payments. We do not store your full bank account number; those are handled by Chargebee, Plaid, or your financial institution.
  • Identity Verification Data — if required for fraud prevention, we may collect limited government-issued ID information, selfies, or verification logs through trusted vendors (e.g., Stytch or Persona). We only request this when necessary to comply with law or protect our community.
  • Activity Data — stories you like or follow are stored with your account so we can show your library back to you. Anonymous story-view counts and aggregated traffic telemetry (page views, referring source) are recorded for analytics but are not tied to your account.
  • Optional Info — like name or preferences, if you choose to share it.

We do not collect biometric data or sensitive identifiers.

2. How We Use Your Info

  • Send you receipts, confirmations, or story status updates
  • Process your Amplify purchases securely
  • Reconcile offline payments, match wire references, and keep invoices accurate
  • Verify your identity when needed to prevent fraud, abuse, or unauthorized access
  • Improve your viewing and submission experience

We never sell or rent your data.

3. Email Communication

We only use your email for:

  • Transaction confirmations
  • Story submission status updates
  • Receipts for Amplify purchases
  • Story updates you follow — only for stories you have chosen to follow, and only while you still follow at least one. Unfollowing everything stops them.

We do not send promotional emails unless you specifically opt in elsewhere. We never email you about a story you did not choose to follow. Following is the only thing that turns story notifications on, and every message we send includes an unsubscribe link. Creating an account does not subscribe you to anything.

4. Cookies & Analytics

We use cookies and analytics to:

  • Understand viewer behavior
  • Improve platform performance

You can disable cookies in your browser settings or manage your preferences below. We also honor the Global Privacy Control (GPC) signal — if your browser advertises GPC, we automatically decline analytics and marketing trackers, no further action required. GPC also travels with the requests your browser makes to us, so if you sign in with it enabled we record that opt-out on your account and exclude you from advertising audiences. That opt-out stays in force until you turn it off yourself; signing in later from a device without GPC does not undo it. Because GPC is an opt-out of selling and sharing rather than of all contact, we still send the transactional and followed-story email described in Section 3.

Cookie Declaration & Preferences

Streamlly uses Cookiebot to manage consent for analytics, personalization, and ad delivery. Use the button below to reopen the same consent prompt you saw when you first visited Streamlly.

5. Third-Party Tools

We share personal information with the following service providers strictly to operate Streamlly. Each is contractually obligated to protect your data and use it only for the purpose listed.

  • Stytch — authentication and session management (email, account ID).
  • Chargebee — checkout, subscription, and invoicing (payment details, billing address).
  • Plaid — bank deposit detection for offline Amplify payments (transaction metadata).
  • Persona — identity verification when fraud signals require it (limited government ID).
  • Google Analytics — aggregated, de-identified site usage telemetry.
  • Taboola — story recommendations on partner networks (pseudonymous cookie ID).
  • Mux — video delivery and playback analytics.
  • Customer.io — email delivery for the messages described in Section 3, and audience management (email address, name, account ID, and whether you follow any stories). If you hold a Streamlly account, we may include your email address in advertising audiences we build through Customer.io so that you see Streamlly ads on other platforms — see Sale or Sharing in Section 8, and how to opt out. Customer.io is never told which stories you follow or what you watch.
  • Cookiebot — consent management.
  • Cloudflare — content delivery network + edge analytics (page views, performance timing) when Cloudflare Web Analytics is enabled on the streamlly.com zone.
  • Help Scout / Beacon — support inquiries you initiate from /about.

We also load the following advertising and marketing pixels through our Google Tag Manager container. These pixels run only after you accept the marketing category in our cookie consent banner, and never on stories you watch (we suppress them on /story/* paths in the page itself):

  • Meta Pixel (Facebook / Instagram) — ad measurement + audience building.
  • TikTok Pixel — ad measurement + audience building.
  • X (Twitter) Pixel — ad measurement + audience building.
  • Vibe — connected-TV ad attribution.
  • IntenTiQ — cross-publisher audience identifier.
  • Google Ads (DoubleClick) — Google Ads remarketing lists.

Streamlly does not sell personal information for money. When the marketing pixels above are allowed to run, the cookie ID they set on your browser may be shared with the listed ad platforms for cross-context behavioral advertising — under California law (CPRA), that counts as "sharing." You can opt out at any time by clicking Your Privacy Choices in the footer, choosing Reject in the cookie banner, or enabling the Global Privacy Control signal in your browser — we honor GPC automatically. See Section 8 below for California-specific rights.

6. Your Rights

You can:

  • Download your data — go to Account & Data and click Download my data for a JSON export of everything we store about you.
  • Delete your account — same page, Delete. Your profile and identifying data are removed within 30 days.
  • Correct your info — update your account details directly, or email us.
  • Withdraw consent — use the cookie preferences button above, or visit Your Privacy Choices in the site footer.

Contact us at: [email protected]

7. How We Protect Your Info

We use encryption and secure infrastructure. Payment details are processed via PCI-compliant third parties only, identity documents are stored with specialized vendors, and offline payment references are limited to the metadata needed to match your deposit.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act and its amendments (collectively "CCPA") give you the following rights. The disclosures below apply to information collected in the twelve months preceding the Last Updated date.

Categories of Personal Information We Collect

  • Identifiers — email address, account ID, IP address. Email address and account ID are shared for cross-context behavioral advertising as described below.
  • Commercial Information — Amplify purchase history, invoice references.
  • Internet or Network Activity — stories you have liked or followed (tied to your account); anonymous story-view counts and aggregated page-view telemetry (not tied to your account).
  • Inferences — none drawn or stored for profiling purposes.
  • Sensitive Personal Information — only collected when fraud prevention requires identity verification (government ID, selfie), and only as long as needed.

Sale or Sharing of Personal Information

Streamlly does not sell personal information for money or other valuable consideration. When you allow marketing cookies, the cookie identifier set by the advertising pixels listed in Section 5 (Meta, TikTok, X, Vibe, IntenTiQ, Google Ads) may be shared with those platforms for the purpose of cross-context behavioral advertising — which under CPRA counts as "sharing". We suppress all of these pixels on story-watch pages (/story/*) so they never see what video you watched.

Separately, if you hold a Streamlly account, we may include your email address in advertising audiences we build through Customer.io and provide to those same platforms, so that you see Streamlly ads elsewhere. This does not depend on cookies and does not involve anything you watched — only your address and the fact that you have an account. Under CPRA this also counts as "sharing". We never receive money for it.

You can opt out of sharing at any time:

  • Click Your Privacy Choices in the footer and turn off the Marketing category.
  • Reject all in the cookie banner.
  • Enable Global Privacy Control in your browser — we honor it automatically. No pixels load, and if you are signed in we record the opt-out on your account and exclude you from the advertising audiences described above.
  • Delete your account, which removes you from Customer.io entirely — see Section 6.

Your California Rights

  • Right to Know — what categories and specific pieces of personal information we have collected.
  • Right to Delete — request deletion of personal information we have collected from you.
  • Right to Correct — request correction of inaccurate personal information.
  • Right to Opt Out of Sale / Sharing — applies if/when we ever change our practices.
  • Right to Limit Use of Sensitive Personal Information — restrict use of any sensitive PI beyond what's necessary to provide the service.
  • Right to Non-Discrimination — exercising these rights will not change the price or quality of the service you receive.

How to Exercise Your Rights

  • Right to Know: visit Account & Data → Download my data, or email us.
  • Right to Delete: visit Account & Data → Delete, or email us.
  • Right to Opt Out / Privacy Choices: click Your Privacy Choices in the footer, or enable the Global Privacy Control signal in your browser — we honor GPC automatically.
  • Authorized Agent: you may designate someone to submit a request on your behalf. We will require written authorization and verification of the agent's identity before acting.

We may verify your request by matching against the email on your Streamlly account. We will respond within 45 days, with one 45-day extension if reasonably necessary.

Submit any California-specific request to [email protected] with the subject line California Privacy Request.

9. Children's Privacy

We do not knowingly collect information from children under 13.

10. Updates to This Policy

We'll update the "Last Updated" date and notify users if major changes are made.

11. Questions?

Contact us here.