1. Data Controller

The data controller for personal data collected through Vidsera is the operating entity behind vidsera.com. For all data-related inquiries, contact us at [email protected].

2. Data We Collect

2a. Data you provide directly

• Account registration: username, email address, password (stored as a salted hash — never in plain text).
• Payments: processed exclusively by Paddle. We do not store credit card numbers or bank details. We receive a transaction ID and payment status only.
• Support / DMCA contact: name and email address you include in messages to us.

2b. Data collected automatically

• Access logs: IP address, browser user-agent, referring URL, pages visited, time and date of visit. Logs are retained for 30 days and then deleted.
• Download history: for registered users, we store the URLs you submit and the resulting file metadata (title, duration, format). This is used to power your download history page. You can delete this data at any time from your profile settings.
• Analytics: we use a privacy-respecting analytics tool (Plausible or Google Analytics with IP anonymisation enabled) to understand aggregate traffic. No individual profiles are built.
• Cookies: we set a session cookie for authentication and a preference cookie for theme (dark/light). We do not use third-party advertising cookies or cross-site tracking cookies.

2c. Data we do NOT collect

• We do not store the actual video or audio files you download.
• We do not sell your personal data to third parties.
• We do not build advertising profiles.

3. Legal Basis for Processing (GDPR)

Purpose	Legal Basis
Providing the download service	Performance of a contract (Art. 6(1)(b))
Processing payments	Performance of a contract (Art. 6(1)(b))
Security, fraud prevention, access logs	Legitimate interests (Art. 6(1)(f))
Analytics (aggregate)	Legitimate interests (Art. 6(1)(f))
Marketing emails (opt-in only)	Consent (Art. 6(1)(a))
Compliance with legal obligations	Legal obligation (Art. 6(1)(c))

4. Cookies

We use the following cookies:

Cookie	Purpose	Duration
sessionid	Authentication — keeps you logged in	2 weeks
csrftoken	Security — prevents cross-site request forgery	1 year
theme	Stores dark/light theme preference	1 year
language	Stores your language preference	1 year

We do not use advertising cookies or cross-site tracking technologies. You may disable cookies in your browser settings; however, doing so will prevent you from staying logged in.

5. Data Sharing

We share your data only in the following limited circumstances:

• Payment processor — our payment provider processes billing data on our behalf. Their privacy policy governs data they collect directly. We receive only a transaction ID and payment status.
• Hosting and infrastructure — we use EU-based cloud infrastructure providers who act as data processors under GDPR-compliant Data Processing Agreements.
• Security and content delivery — we use third-party services for security, DDoS protection, and content delivery. These services may process IP addresses as part of network routing. Such transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs).
• Legal requirements — we may disclose data when required by a court order or applicable law, but we will notify you (unless prohibited by law) and will challenge requests we believe are overbroad.

6. Data Retention

• Account data: retained while your account is active. Deleted within 30 days of account deletion request.
• Download history: retained until you delete it or close your account.
• Access logs: retained for 30 days, then automatically deleted.
• Payment records: retained for 7 years as required by EU tax law.

7. International Transfers

Our infrastructure is located within the European Union. Where data is transferred outside the EEA (for example, via our content delivery or security providers), such transfers are governed by Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework, as applicable.

8. Your Rights (EU/EEA Residents)

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("Right to be forgotten") — request deletion of your personal data.
• Restriction — ask us to restrict processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Lodge a complaint — with your national data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8b. No Monitoring Obligation

Vidsera does not proactively monitor, review, or filter the URLs submitted by users or the content they download. We are not obligated to do so under applicable law. However, we will act promptly upon receiving a valid legal notice or becoming aware of a specific violation.

9. Children's Privacy

Vidsera is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

11. Contact

Data protection queries: [email protected]
DMCA / copyright notices: [email protected]

---

© 2026 Vidsera. All rights reserved.