Privacy Policy

Effective: March 12, 2026

This Privacy Policy describes how Virtual Technology Stack Inc ("Company", "we", "us"), located at 6166 S. Sandhill Road Suite 122, Las Vegas, NV 89120, collects, uses, and shares information when you use the Fans.mov platform ("Service").

1. Information We Collect

Account Information from Telegram: When you interact with our Telegram bot (@SendMovBot) or log in through Telegram, we receive and store your Telegram user ID (a numeric identifier), Telegram username (if set), and display name (first name). We do not collect your phone number, last name, or profile photo.

Video Metadata: When creators upload videos, we store a video title, an internal content ID (used by our video hosting provider), an optional thumbnail URL, video duration, processing status, and the timestamp of upload. We do not store the video files directly — they are processed and hosted by our third-party DRM provider.

Shares and Library Data: When a fan receives access to a video, we record a share entry linking the fan's account to the video, along with the timestamp. This powers the fan's video library.

Magic Links: When videos are shared via Telegram inline mode, we generate time-limited magic link tokens. Each magic link record includes the associated video, the fan's Telegram ID (or 0 for anonymous links created via inline sharing), the fan's username and display name (if available), expiration time, and whether the link has been used.

Sessions: When you authenticate, we create a session record containing a unique session token and an expiration time (30 days). The session token is stored as an HTTP-only cookie in your browser.

Automatically Collected Information: As the Service runs on Cloudflare Workers, Cloudflare may collect standard request metadata such as IP addresses, user-agent strings, and request timestamps as part of its infrastructure. We do not independently log or store this data.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account on the platform.
• Authenticate you via Telegram and maintain your session.
• Enable creators to upload, manage, and share protected videos.
• Generate magic links and playback tokens so fans can view shared videos.
• Maintain your video library (the list of videos shared with you).
• Generate viewer identifiers for DRM playback token requests (using your Telegram ID or an anonymized token prefix).
• Operate, maintain, and improve the Service.

3. Information Sharing and Third Parties

We share information with the following third-party service providers, as necessary to operate the Service:

• Telegram (Telegram Messenger Inc): We interact with the Telegram Bot API to receive messages, process inline queries, and send responses. Telegram provides us with the user data described above when you interact with our bot.
• Fastevo (video hosting and DRM): We send video files (via URL) to Fastevo for transcoding and DRM-protected hosting. When generating playback tokens, we send a viewer identifier (your Telegram ID or an anonymous token) to Fastevo to authorize playback.
• Cloudflare (infrastructure): The Service runs on Cloudflare Workers and uses Cloudflare D1 as its database. Cloudflare processes requests and stores data on our behalf.

We do not sell your personal information to anyone. We do not share your information with advertisers. We may disclose information if required by law, legal process, or governmental request.

4. Cookies

We use a single cookie:

• session — An HTTP-only, secure cookie containing your session token. It is used solely to authenticate you across page loads. It expires after 30 days. It is set with the SameSite=Lax attribute and is only transmitted over HTTPS.

We do not use advertising cookies, tracking pixels, analytics scripts, or any other tracking technologies.

5. Data Retention

• Account data (Telegram ID, username, display name): Retained for as long as your account exists on the platform.
• Video metadata: Retained until the creator deletes the video. When a video is deleted, all associated shares and magic links are also deleted.
• Magic links: Expire after 24 hours. Expired links remain in the database but are no longer functional.
• Sessions: Expire after 30 days.

6. Data Security

We implement reasonable technical measures to protect your information, including HTTPS-only transmission, HTTP-only secure cookies, server-side session management (no client-side secrets), and DRM-protected video delivery. However, no method of electronic transmission or storage is 100% secure.

7. Your Rights

You may request deletion of your account and associated data by contacting us. Creators can delete their own videos through the creator panel or bot, which also removes all related shares and magic links. Since the Service uses Telegram for identity, we do not maintain separate credentials to delete — your data on our platform is linked to your Telegram ID.

8. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a person under 18, we will take steps to delete that information promptly.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the effective date at the top of this page. Continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Virtual Technology Stack Inc
6166 S. Sandhill Road Suite 122
Las Vegas, NV 89120
United States