Last updated: September 22, 2026
[Registered Business Name], operating as Xero Streams ("we", "us", or "our"), operates the website xerostreams.com (the "Service"), a video discovery and streaming platform. This Privacy Policy explains in detail what personal data we collect, why we collect it, how it is used, who it is shared with, and the rights you have over your information. By creating an account or using the Service, you acknowledge and consent to the practices described here.
Payments for subscriptions, individual video purchases, and book purchases are processed by PayPal. We receive a transaction/order identifier and confirmation of payment status, but we do not collect, view, or store your full card numbers or banking details — those are handled entirely by the payment provider under its own privacy policy.
When you register or sign in, we collect your email address and full name to create and identify your account. If you sign in through a third-party identity provider (such as Google, Microsoft, Apple, or Facebook single sign-on), we receive the profile information that provider shares with us — typically your verified email address, display name, and a profile identifier — to authenticate your session and link it to your Xero Streams account. We do not receive, request, or store your identity-provider password. We use this authentication data to verify your identity, keep you signed in, protect against unauthorised access, and display your name within the Service. Your email address may also be used to send you service notifications, security alerts, and responses to your enquiries.
If you choose to sign in with Google, Xero Streams accesses the following Google user data through the Google Sign-In API, limited to the basic profile scopes you authorise:
How we use Google user data: We use Google user data solely to provide or improve Xero Streams' functionality — specifically to authenticate your sign-in, create and link your account, keep you signed in, display your name, and protect against unauthorised access. We do not use Google user data to serve personalised advertising, and we do not use it for any purpose unrelated to providing or improving the Service.
How we store Google user data: Your Google email address, name, and linked identifier are stored on our servers in your account record for as long as your account is active. We do not store your Google password or OAuth access tokens beyond the duration needed to complete authentication.
Sharing, transfer, and disclosure: We do not sell Google user data and do not transfer it to third parties for reasons other than providing or improving the Service. We may share the minimum necessary Google user data only with: (a) our hosting and infrastructure providers who process it on our behalf to operate the Service, and (b) authorities where required by law. Apart from these limited cases, Google user data is not shared, transferred, or disclosed.
Data protection: Google user data is protected using the same technical and organisational measures described in the Data Security section, including encrypted transmission, access controls, and row-level security that restricts each user's data to themselves and authorised administrators.
Retention and deletion: Google user data is retained for the lifetime of your account. You may request deletion of your account and all associated Google user data at any time by contacting us (see Contact Us). Upon deletion, we remove your Google email address, name, and linked identifier from our active systems within 30 days, subject to any legal retention obligations.
Google API Limited Use Disclosure: Xero Streams' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
For users in the UK and European Economic Area, we process your personal data on the following legal bases under the UK GDPR:
We use your browser's local storage rather than traditional advertising cookies. Local storage holds your continue-watching progress, watched history, theme preferences, sign-in state, and onboarding flags. This data stays on your device unless synced to your account. You can clear local storage at any time through your browser settings, which will reset continue-watching and similar features.
We do not sell your personal data. We share information only as described below:
Your data may be processed and stored on servers located outside your country of residence. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses to ensure your data is protected to a comparable standard.
We retain your account and usage data for as long as your account is active. Continue-watching and watched history are kept until you clear them or your account is deleted. Download logs, purchase records, and subscription records are retained for as long as necessary to provide the Service, handle disputes, and meet legal or accounting requirements. You may request deletion of your data at any time (see Your Rights below).
We implement appropriate technical and organisational measures to protect your data, including access controls, encrypted transmission, and segregation of administrative and user access. Row-level security restricts each user's data to themselves and authorised administrators. However, no system is completely secure, and we cannot guarantee absolute protection against unauthorised access.
Depending on your location, you may have the right to:
To exercise any of these rights, contact us through the support options available on the Service.
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Adult (18+) content is gated behind age verification. If you believe a child has provided us with personal data, please contact us so we can delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. Material changes will be highlighted where practical.
If you have questions, requests, or complaints about this Privacy Policy or your personal data, please contact our Data Protection team:
We will respond in accordance with applicable data-protection law, generally within 30 days. For account-specific requests, please also reach out through the support options available on xerostreams.com.