Controller

Vilo Media Group FZCO, Burjuman Business Tower, Office 905, 9th Floor, Dubai, United Arab Emirates, is the controller of personal data processed for Vilomedia.

What we collect

Account details (username, nickname, region), sealed personal data (email, birthdate), session cookies, reading activity, library lists, donations and subscription metadata, support tickets, payment-related identifiers from Stripe (not full card numbers), and content you upload.

Sealed personal data (“translator”)

Sensitive fields such as email and birthdate are stored encrypted with server-only keys. Login uses a one-way lookup hash so we do not need to decrypt every row. Passwords use Argon2id and are never recoverable as plaintext.

How we use data

To run the service, enforce age gates (13+ registration; 18+ NSFW and payouts), personalize discovery, process payments, prevent abuse, fulfill tips and Plus, and improve the product.

Sharing

We use processors such as hosting, object storage, and Stripe. We do not sell personal data. Program partners receive only what is needed for a program you join.

Your rights (including EU/UK-style rights)

Subject to applicable law, you may request access to your personal data, correction, deletion, export/portability of data you provided, restriction of processing, and objection to certain processing. You may also lodge a complaint with a supervisory authority where you live.

Contact us via the Contact page or Support to exercise these rights. We may need to verify your identity. Some data must be retained for security, fraud prevention, or legal obligations.

• Access - ask what personal data we hold about you
• Correction - fix inaccurate account or sealed details
• Deletion - request account closure and erasure where allowed
• Export - receive a copy of data you provided in a common format when feasible
• Objection / restriction - where the law provides those rights

Retention & security

We retain data while your account is active and as needed for legal or safety reasons. Database backups may include sealed fields; backup access is treated like production access.

Session cookies are required to stay logged in. Password reset uses your email (and optional username confirmation).