Funflixy

Privacy Policy

What we collect, why we collect it, how long we keep it, and how you can have it removed. In plain language.

Operated by EarthLast updated: 24 September 2026

In one line

We collect only what is needed to run the service — your email, a hash of your password, and what you have listened to. We do not sell your data.

What we collect

Account: your email, your name (if you give one), and a hash of your password. The password itself is never stored — neither we nor anyone else can read it.
Session: logging in creates a random token. Only its SHA-256 hash is stored in the database. Even if the database leaked, nobody could steal your session.
Listening history: which episode you played and how far you got. This is what makes “continue where you left off” work.
Technical: IP address and browser name. These are used for security only — to stop spam and repeated failed logins.
Contact form: whatever you write yourself — your name, email and message.

What we do NOT collect

Your location.
Your contacts, photos, or anything else on your phone.
Third-party advertising cookies. There is no ad network tracker on this site.
Payment card details. When payments go live, card information goes straight to the payment gateway — it never reaches our servers.

Cookies

There is exactly one cookie — micystory_session. It keeps you logged in. It is httpOnly (JavaScript cannot read it), SameSite=Lax (it is not sent on requests from other sites), and in production it is Secure (HTTPS only).

There are no analytics cookies, no advertising cookies and no tracking pixels. That is also why this site has no cookie consent banner — there is nothing to ask consent for.

How long we keep it

Session: 30 days, or until you log out.
Account and listening history: for as long as your account exists.
Contact messages: 12 months after we reply, so past conversations keep their context.
Security logs (IP, user agent): 90 days.

Your rights

You can ask for any of the following at any time, and we will do it:

Request all of your data — we will give you a copy.
Have incorrect data corrected.
Have your account and data deleted.
Ask who your data has been shared with (answer: it has not been sold to anyone).

To do any of this, write to info.auricallure@gmail.com, or use the contact form and pick “Privacy or my data” as the subject.

Children's data

This service is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, tell us and we will remove it.

Grievance Officer

Under India's Information Technology Rules, 2021, our grievance officer is:

Email: info.auricallure@gmail.com

We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days.

Changes to this policy

If something significant changes, we will email you and update the date on this page. Smaller corrections may happen without notice, but the date will always change.