Privacy Policy

This Privacy Policy explains how TenKeyLabs LLC ("VClarity", "we", "us") handles information when you use the VClarity Player app for Android and iPhone (the "app"), the website vclarity.tv, including the Publisher Portal (the "site"), and the VC Service gateway that connects the app to video publishers. Together we call these the "Services". Using the Services is also subject to our Terms of Service.

The short version

• The app works without an account. Your library, watch history, playlists and settings are stored on your device, not on our servers.
• The app contains no advertising, analytics or tracking SDKs, and we do not sell your personal information.
• When you browse a video publisher in the app, our gateway passes your request, including your IP address, to that publisher. Videos stream straight from the publisher to you.
• If you create a VClarity account, we store your username, email address, a hashed password and the IP address you signed up and last signed in from. You candelete your account at any time.

Information that stays on your device

The app keeps the following only on your device. None of it is uploaded to us:

• watch history and the position where you stopped each video;
• your playlists;
• catalogs you import from publishers (collection and video titles, descriptions and artwork links);
• the list of video servers you have added;
• app settings such as appearance and playback preferences.

Videos on your phone. If you allow the app to access your videos (the "On this device" feature), it reads your device's video library to list and play those files and caches thumbnails on the device. Your files are never uploaded. Files you open in VClarity from another app are played locally in the same way.

Links you play. When you play a video link you entered, the app connects directly to the server hosting that video. That server receives your IP address and ordinary request information and handles it under its own policies.

Device backups. Depending on your device settings, Android may include app data in your device backup to your Google account. Google manages that backup, not us.

To remove on-device data, use Settings › Storage in the app to clear watch history and progress, clear the app's data from your device settings, or uninstall the app.

Video publishers and the VC Service gateway

VClarity connects to independent video services ("publishers") that support the VClarity Protocol (VCP). So that publishers' credentials never sit inside the app, the app does not call a publisher's API directly; it sends those requests through our gateway at vclarity.tv.

• Adding a server. The app sends the web address you entered to the gateway, which checks it against our publisher registry. The publisher is not contacted at this step.
• Browsing, searching and playing. The gateway forwards each request to the publisher. A forwarded request includes the publisher's ID, the collection or video you asked for, any search terms you typed, the app's name and version, and your IP address. Publishers use the IP address to apply regional availability and to issue video links that work for your device.
• Video and artwork. Videos and images stream directly from the publisher or its content delivery network, which receives your IP address.
• Publisher credentials. If a publisher asks you to sign in or supplies you with an access token, that credential is passed through the gateway to that publisher and is not stored by us.

The gateway does not store the contents of these requests. It briefly caches publisher registry information, which contains nothing about you. Each publisher handles what it receives under its own privacy policy, so review it before you add a server. We do not control publishers or the content they provide.

VClarity accounts

You do not need an account to use the app. An account is required for the Publisher Portal. When you create one, we collect:

• your username and email address;
• your password, stored only as a salted one-way hash (we never store the password itself);
• the IP address you created the account from and the one you most recently signed in from, how many times you have signed in, and when the account was created and last updated.

We use this information to run your account, sign you in, send password reset emails and protect the Services from abuse.

Sign-in cookie. Signing in sets one cookie, vctv_session. It is signed so it cannot be forged, is not readable by scripts on the page, and expires after one month or when you sign out.

Password resets. When you ask to reset your password, we create a single-use link that expires after 7 days and email it to you through Cloudflare's email service.

Publisher registrations

If you register a service in the Publisher Portal, we store its web address, the contact email you provide, its manifest (name, description, icon, API address and supported features), a domain verification token and the service credential our gateway uses to call your API. Your service's name, description and icon are shown to app users who add your service.

Cookies, local storage and the website

• Cookies. The site sets only the sign-in cookie described above. There are no advertising or analytics cookies.
• Local storage. Your browser stores your theme choice, your preferred language for code samples in the documentation and, while you are signed in, your username and email so pages can show who is signed in.
• Third-party assets. Pages load fonts from Google Fonts and scripts and icons from jsDelivr and Iconify. These providers receive your IP address and browser information when your browser fetches those files.

The site has no analytics and shows no ads.

Who else handles your information

Account and publisher registry data live in a database on servers we operate. Our application servers do not keep request logs.

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We may disclose information when the law requires it, to protect the rights, safety or security of our users, the public or VClarity, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

How long we keep information

• Account information is kept until you delete your account.
• Password reset links expire after 7 days.
• A deleted account is removed immediately. Copies may remain in routine backups for a limited time before they are overwritten.
• Data on your device stays there until you clear it or uninstall the app.

Deleting your account

You can delete your VClarity account at any time:

1. Sign in at vclarity.tv/account.
2. Under Delete account, enter your password and confirm.

Deletion permanently removes your username, email address, hashed password, sign-in records and any publisher registrations you own. Removing a registration also takes that service out of the publisher registry, so app users can no longer add or browse it. Deletion cannot be undone.

If you cannot sign in, email admin@vclarity.tv from the address on your account and we will delete it within 30 days.

Data the app keeps on your device is not part of your account. Remove it by clearing the app's data or uninstalling the app.

Your rights

Depending on where you live (for example under the EU or UK GDPR, or California's CCPA), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. You can view your account details and delete your account yourself at vclarity.tv/account, and reset your password at vclarity.tv/forgot-password. For anything else, contact us. We will not treat you differently for exercising these rights.

Where the GDPR applies, we rely on performance of a contract to provide your account and the Services, on our legitimate interests to keep the Services secure and to forward your requests to the publishers you choose, and on legal obligations where they apply. You can also complain to your local data protection authority.

Security

All traffic to the Services uses HTTPS, and the app only connects to publishers over HTTPS. Passwords are hashed, sign-in cookies are signed and hidden from page scripts, and publisher credentials never reach the app. No system is perfectly secure, so we cannot guarantee absolute security.

Where information is processed

TenKeyLabs LLC is based in the United States. Information is processed in the United States and in the countries where Cloudflare operates its network.

Children

The Services are not directed to children under 13, or under the minimum age required in your country, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we handle your information, we will announce it on the site or in the app before it takes effect.

Contact

Questions or requests about privacy: TenKeyLabs LLC,admin@vclarity.tv.