This starter policy is a placeholder, not legal advice. Replace it with a policy reviewed for your organization, jurisdiction, hosting, and services before collecting real user data.
Information stored
DearDrama stores the display name, email address, password hash, session records, watchlist, and playback progress provided by an account holder. Passwords are not stored in plaintext. Administrators can view basic account details and disable a user account.
Cookies and session
A random, HttpOnly, same-site session cookie is used to keep users signed in. No authentication token is stored in browser local storage.
Demonstration catalog and external assets
The sample catalog uses remote image URLs as illustrative artwork and may contact the image host when loaded. Replace these URLs with assets you have permission to use and update this policy for your image, media, email, analytics, and hosting providers.
Retention and contact
Account deletion removes the user and associated watchlist and progress from the application database. Set a real contact address and define your retention process before production.