Privacy Policy

Last Updated: May 1, 2026

1. Introduction

Welcome to Vyla ("we," "us," "our," or "Platform"). We are committed to protecting your privacy and ensuring transparency in how we handle your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and related services (collectively, the "Service").

By using the Service, you acknowledge that you have read, understood, and agree to the collection, use, and sharing of your information as described in this Privacy Policy.

2. Information We Collect

We collect information that is necessary to provide and improve our Service. This includes:

2.1 Account Information

• Username: The unique identifier you choose when creating your account.
• Password: Encrypted credentials used for account authentication.
• Generated Email: We automatically generate an email address (e.g., `username@vyla.vercel.app`) solely for authentication purposes within our system. We do not use this email for outbound communications.
• Discord Integration: If you choose to connect Discord, we access your username and avatar for personalization purposes only.

2.2 User-Generated Content & Preferences

• Favorites List: Media titles and IDs you mark as favorites.
• Watch Later List: Media titles and IDs you save for future viewing.
• Watch History: Media titles, IDs, viewing progress, and timestamps.
• Settings & Preferences: Language preferences, theme choices, default streaming sources, and other customization options.

2.3 Technical & Usage Information

• IP Address: Automatically collected for security purposes, rate limiting, and CAPTCHA verification to protect against abuse.
• Device Information: Browser type, operating system, and device identifiers for compatibility and performance optimization.
• Usage Data: Pages visited, time spent on features, and interaction patterns to improve user experience and service functionality.
• Cookies & Local Storage: Session management, authentication tokens, and preference storage to maintain your logged-in state and personalized experience.

3. How We Use Your Information

Your information is used for the following specific purposes:

• Service Provision: To authenticate users, maintain accounts, and provide personalized features like favorites, watch history, and cross-device synchronization.
• Security & Protection: To protect our Service from malicious activity, prevent unauthorized access, detect fraud, and ensure platform stability.
• Service Improvement: To analyze usage patterns, understand user behavior, and improve features, performance, and overall user experience.
• Communication: To respond to your inquiries, provide support, and send important service-related notifications (rare and only when necessary).
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information. We only share information with essential third-party service providers as necessary to operate our Service:

4.1 Essential Service Providers

• Supabase: Backend infrastructure including user authentication, database hosting, and real-time synchronization. Your account information and user-generated content are stored securely with Supabase.
• Cloudflare (Turnstile): CAPTCHA verification during signup to prevent automated bots and protect against fraudulent account creation. May process IP addresses for verification purposes.
• Upstash (Redis): Rate limiting and temporary caching to prevent brute-force attacks on authentication systems. Temporarily processes IP addresses for request counting.
• The Movie Database (TMDB): Public API for accessing movie and TV show metadata. No personal information is shared with TMDB.

4.2 No Third-Party Advertising or Analytics

We do not use third-party advertising services or analytics platforms that track users across websites. Our usage analysis is conducted internally using anonymized and aggregated data.

5. Your Data Rights & Choices

You have comprehensive control over your personal information:

5.1 Access & Control

• View & Edit: Access and modify your Favorites and Watch Later lists at any time through your account settings.
• Delete History: Clear your Watch History from within your account settings.
• Export Data: Request a copy of all your personal data through our Discord support.
• Account Deletion: Request permanent deletion of your account and all associated data by contacting us through our official Discord server.

5.2 Privacy Settings

• Incognito Mode: Browse without saving watch history or usage data.
• Discord Integration: Connect or disconnect Discord integration at any time.
• Cookie Preferences: Manage cookie and local storage preferences through your browser settings.

6. Data Security & Retention

We implement multiple layers of security to protect your information:

• Encryption: Passwords are hashed using industry-standard algorithms. Data transmission uses HTTPS encryption.
• Access Controls: Strict access controls and authentication mechanisms prevent unauthorized access to our systems.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Data Minimization: We collect only the information necessary to provide our Service.

Data Retention: We retain your information only as long as necessary to provide our Service and comply with legal obligations. Account data is deleted upon account deletion, except where required by law.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers maintain appropriate data protection measures and comply with applicable international data transfer regulations. When processing your information outside your country, we ensure adequate protection through contractual agreements and technical safeguards.

8. Children's Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information without parental consent, we will take immediate steps to delete it. Parents who believe their child has provided personal information should contact us immediately.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain your authentication session
• Remember your preferences and settings
• Provide security features and prevent abuse
• Analyze anonymized usage patterns for service improvement

We do not use tracking cookies for advertising purposes or cross-site tracking.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Providing prominent notice within the Service for significant changes

You are advised to review this page periodically for any changes. Continued use of the Service after changes constitute acceptance of the updated policy.

11. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us through our official Discord server. We typically respond to inquiries within 48-72 hours.

For data protection inquiries or to exercise your rights under applicable privacy laws, please tag your message with "Privacy Inquiry" in our Discord server.