Privacy Policy

This Privacy Policy explains how Black Rose Pictures Inc. operates BlackRosePictures and handles personal information when you visit the website, use an account, watch videos, contact support, or use a paid feature.

Operator: Black Rose Pictures Inc. / BlackRosePictures

Contact: use the support form at the bottom of this page to ask a privacy question or make a data request.

1. Information we collect

Information you provide or that is created for your account

Depending on the features you use, we process:

• Account and identity details: account identifier, username, email address, display name, account status, roles, group membership, and any profile-picture URL supplied by an identity provider. If Google Sign-In is enabled, Google sends identity claims through Keycloak; we do not receive your Google password. The profile-picture image remains hosted by the provider.
• Account security records: sign-in and account-creation events, login sessions, security events, and records needed to enforce account status and access controls.
• Access and billing records: subscription tier and expiry, purchase or rental access and expiry, and Paddle transaction or event references needed to apply access, handle refunds, and prevent duplicate payment events. Paddle handles payment details as merchant of record. Card credentials are entered on Paddle and are not stored by BlackRosePictures.
• Payment-method change records: when Paddle reports that a payment method was added, replaced, or removed, we record the date, method type, whether it was a first method or replacement, and Paddle's event reference. We do not receive or store the card number, expiry date, security code, or cardholder name in this record. These records are included in account exports and are stripped of identifying details when the account is erased; anonymous totals may remain.
• Support communications: the message and contact details you submit through the support form, including the page or video connected with your request.
• Ratings and rating prompts: if you use the rating feature, we record the rating you submit for a video or a part of its presentation, along with the account and video needed to save and display it. We also record whether an optional rating prompt was answered or dismissed and limited playback context used to decide when to show that prompt. Ratings may be combined into aggregate scores; they are not used for third-party advertising.
• Age category: where age-rated access is enabled, the qualifying age category and its review year. The service does not store your date of birth or exact age for this feature. If an external age-verification vendor is configured, it receives only the information needed for that check. Depending on the vendor, this may be your account email address or a hosted verification session; viewing history is not sent to the vendor.
• Email tracking choice and events: if you turn on email-open tracking, we record whether a tracked email was opened and related event details. An audited support or security override may enable tracking for an individual operational email as described below.

Information collected when you use the service

We process technical and service-use information such as requested paths, timestamps, browser and device details, user-agent strings, truncated IP addresses, errors, and operational logs. Playback diagnostics may include video identifiers, playback events, orientation changes, quality switches, request timing, and service-health reports. The account page can show your viewing history for the most recent 90 days.

The website and sign-in components use cookies or similar browser storage when needed to maintain sign-in, protect sessions, and complete authentication redirects.

Where information comes from

Information comes from you, your use of BlackRosePictures, the login provider you choose (when enabled), Paddle for payment and billing events, and service providers that operate the hosting, content delivery, email, monitoring, or security features described in this policy.

2. How we use information

We use information to:

• create and maintain accounts, authenticate sign-ins, and provide support;
• deliver video and account features, and enforce roles, subscription tiers, video grants, viewing quotas, active-login limits, simultaneous-stream limits, and account status;
• save your ratings, calculate aggregate feedback, and avoid showing rating prompts too frequently;
• apply age-category restrictions where configured;
• process subscription, purchase, rental, refund, and access events through Paddle;
• diagnose playback and service faults, maintain reliability, prevent abuse, and protect accounts and infrastructure;
• respond to support requests and privacy rights requests;
• send service and account communications; and
• measure email opens only when tracking is enabled with your consent, or under an audited support/security override for an individual operational email.

We do not use third-party advertising trackers or sell personal information. We do not use viewing history to target advertising on other services.

Ratings are stored with the account so that you can review or change your own response and so the service can prevent duplicate submissions. The catalog may display combined rating results to viewers; it does not display your account identity beside your rating.

3. Legal grounds where required

Where data-protection law requires a legal basis, we rely on the basis that applies to the processing:

• Contract: to create and operate your account, provide playback and account features, apply access entitlements, and handle paid features.
• Legitimate interests: to secure and troubleshoot the service, prevent abuse, respond to operational incidents, and use limited first-party diagnostics needed to maintain playback. You may object where the law provides that right.
• Legal obligation: to meet recordkeeping, regulatory, or lawful-process requirements that apply to the operator.
• Consent: for email-open tracking and any other feature for which we ask for consent. You can withdraw consent at any time; withdrawal does not affect earlier processing.

The applicable basis can depend on your location and the feature involved.

4. When information is shared

We share information only as needed to operate the service, respond to you, protect people and systems, or meet legal obligations. Recipients may include:

• Infrastructure and content-delivery providers, including hosting, Bunny.net CDN, and monitoring providers. A CDN processes network information, including your IP address, to deliver requested content.
• Login providers, including Keycloak and Google when Google Sign-In is enabled. Google supplies identity claims; it does not send us your Google password.
• Paddle, which acts as merchant of record for enabled paid features and processes payment details under its privacy policy. We receive the transaction and access events needed to administer your account.
• Age-verification providers, if configured for age-restricted content. The selected provider receives only the limited information needed to complete the check.
• Email and support providers used to send service messages and receive support requests.
• Authorities or other parties where disclosure is required by valid legal process or is permitted and reasonably necessary to protect rights, safety, and service security.
• A successor operator if the service or its relevant assets are reorganized or transferred, subject to applicable privacy requirements.

Providers process information for the services they provide and under the applicable arrangements. Their own privacy terms may also apply to information they collect directly from you.

5. International processing and storage

The service is hosted in the European Union. Bunny.net CDN edge locations process network information to deliver content. Encrypted backups are stored with Backblaze in the United States; backups are encrypted before they leave our servers. Information may therefore be processed in countries other than the one where you live. The operator uses the contractual and technical protections applicable to the relevant service and transfer. See Backblaze’s EEA/UK/Swiss privacy notice for information about Backblaze’s own commitments; it does not replace the operator’s obligations.

6. Your choices and privacy rights

Depending on your location, you may have the right to request access to, correction of, export of, or deletion of your personal information; to object to or restrict certain processing; or to withdraw consent. You may also complain to your local data-protection authority.

Use the support form at the bottom of this page and choose Account / sign-in. We may need to verify your identity before acting. Some information may be retained where required by law, needed to resolve a dispute or security issue, or held temporarily in encrypted backups until they expire.

Email-open tracking

You can turn email-open tracking on or off in your Account page. When it is off, future emails do not include a tracking image, except for an individual operational email sent under an audited support/security override. Turning it off stops future tracking and removes the association between your account and opens of emails already sent. Your email application may also block remote images.

7. Cookies, sessions, and account access

Cookies and similar storage support sign-in, session security, and authentication redirects. The service does not use third-party advertising cookies or third-party analytics trackers.

Anyone with access to your account or a signed-in device may be able to view account information and activity available through that account. Protect your sign-in method, use account controls to review access, and sign out of devices you no longer use.

8. Retention

• Account information is kept while the account exists and is deleted when the account is deleted, subject to legal and operational exceptions.
• Viewing history is available for the most recent 90 days. A daily cleanup removes older viewing and concurrency records no later than day 91; non-identifying totals may be retained longer.
• Limit-reached events may retain a pseudonymous account identifier for up to 90 days, or until account erasure removes that identifier.
• Truncated web access logs are kept for up to 30 days. System and operational logs are kept for up to 90 days.
• Support tickets are retained while needed to resolve the request and for a reasonable period afterwards.
• Email-open records follow the applicable account and event-retention rules and are deleted or disassociated as described above when tracking consent is withdrawn.
• Encrypted backups expire on a rolling schedule. Information removed from live systems may remain in backups until the relevant backup expires.

Where a legal obligation, dispute, or security matter requires longer retention, we retain only what is needed for that purpose and for the applicable period.

9. Security

We use access controls, protected sign-in flows, secret management, encryption for backups, and operational monitoring to protect accounts and service data. No internet service can guarantee absolute security. Contact support promptly if you believe your account or information has been exposed.

10. Children and age-rated content

The service may apply age categories to restrict access to age-rated content. It stores the qualifying category and review year for that feature, not your date of birth or exact age. A parent or guardian who has a privacy question or request may contact support using the form on this page.

11. Changes to this policy

We may update this policy when our practices or legal requirements change. The version shown on this page identifies the policy currently published for the service. We will use the service or another appropriate channel to communicate material changes where required.

Contact

For privacy questions or a data request, send a message using the support form at the bottom of this page.