Privacy Policy
LHD Holdings, Inc. · narreme.tv · Version 1.0 · Effective August 16, 2026
Companion to the Terms of Service & NARREME Credits Terms.
The short version — in plain English
This explains what narreme.tv collects, why, and what we never do with it. The short version: we collect what we need to run the service and remember your story — nothing to sell you out. Your card lives with the payment company, not with us. And if you play without an account, your choices stay on your device.
1. What This Policy Covers
- How LHD Holdings, Inc. (“NARREME,” “we”), a Delaware corporation, handles personal data on narreme.tv and related services.
- Read alongside the Terms of Service & NARREME Credits Terms — defined terms carry over.
- Covers accounts, episode purchases/unlocks, subscriptions, NARREME Credits, Narrative Commerce Engine (NCE) purchases, and the interactive gameplay layer (choices, character trust, viewing progress).
In plain English
This is the data half of the rules. The Terms cover the money; this covers your information.
2. What We Collect
- Account data: email address and a securely hashed password (authentication is handled by Supabase Auth — we never store passwords in readable form), plus your player/display identifier.
- Payment data: handled by Stripe (PCI-DSS Level 1). We receive a payment-token / customer reference and transaction metadata (amounts, timestamps, receipts) — never your full card number.
- Viewing & gameplay data: episodes unlocked, viewing progress (watch time, last position, completion), the choices you make at interactive beats, resulting character-trust scores, and NCE/commerce events.
- Engagement signals: on-beat timing, choice velocity, and replay counts used to pace the experience and personalize loyalty rewards (the COA/ACP engine); raw signals are retained only as long as needed for those functions and then aggregated or deleted.
- Technical data: IP address, device/browser type, and essential session identifiers, collected to deliver and secure the service.
- Communications: messages you send to support, security, or appeals addresses.
In plain English
Enough to log you in, take a payment safely, remember what you watched and chose, keep the lights on, and answer you when you write in. That’s it.
3. Guests & On-Device Data
- You can watch the free episode and make the first choice without an account. When you do, your choice and the resulting character-trust are stored only in your browser (local storage on your device) — they are not sent to our servers.
- If you later create an account, that on-device progress can carry forward into your synced profile so the story continues seamlessly.
- Clearing your browser storage erases guest progress; there is no server copy to recover.
In plain English
Play without signing up and your story stays on your device, not our database. Make an account and it follows you across devices — your call.
4. How We Use Your Data
- Provide the service: authenticate you, unlock and stream episodes, run the interactive story, and remember your relationships (“the city remembers what you did”).
- Process payments and send receipts, through Stripe.
- Personalize recommendations, loyalty rewards, comeback discounts, and coin value based on how you watch — never sold, never shared for third-party advertising.
- Keep the platform safe: detect fraud, card-testing, and abuse; enforce the Terms.
- Communicate with you about your account, purchases, and material changes.
- Meet legal obligations (tax, accounting, unclaimed-property, lawful requests). Where the GDPR applies, we rely on contract necessity, legitimate interests, consent, and legal obligation as the applicable bases.
In plain English
We use your data to run the show, take payment, keep you safe, and remember your story — not to profile you for advertisers.
5. Who We Share With
- We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
- Service providers (processors) that run the platform on our behalf, under contract: Stripe (payments), Supabase (database & authentication), and Vercel (hosting/delivery); on mobile, in-app purchases are processed by the app stores and RevenueCat.
- Legal & safety: disclosure when required by valid legal process or to protect users, the public, or our rights.
- Business transfers: if NARREME is involved in a merger, acquisition, or asset sale, data may transfer subject to this Policy and prior notice.
In plain English
The only outsiders who touch your data are the companies that literally run our payments, database, and servers — bound by contract. We don’t sell you.
6. Payments & Stripe
- Card details are collected and stored by Stripe, not NARREME; Stripe’s handling is governed by Stripe’s own privacy notice.
- We retain transaction records (amount, date, item, token reference) for receipts, refunds, tax, and fraud defense.
- See Terms §5–§7 and §10 for pricing, refunds, and unauthorized-charge protections.
In plain English
Your card lives with Stripe, a licensed payment company. We keep the receipt, not the card.
7. Cookies & Similar Technologies
- Essential cookies / local storage: sign-in sessions, security, and guest gameplay state. These are required for the service to work.
- We do not use third-party advertising or cross-site tracking cookies. Any product analytics we use are limited to first-party, aggregate usage measurement to run and improve the service.
- You can control storage through your browser; disabling essential storage will break sign-in and guest progress.
In plain English
The only cookies we need are the ones that keep you logged in and remember your choices. No ad-trackers.
8. Data Retention
- We keep account and gameplay data while your account is active and as needed to provide the service.
- Transaction records are retained as required for tax and accounting, generally up to 7 years.
- After account closure, personal data is deleted or anonymized within 90 days, except records we must keep by law.
- Guest on-device data persists until you clear your browser storage (see §3).
In plain English
We hold your data while you use us, keep receipts as long as the law says, and clear the rest after you leave.
9. Your Rights & Choices
- Access, correct, export, or delete your personal data, and object to or restrict certain processing. We verify requests against your account before acting.
- California (CCPA/CPRA): rights to know, delete, correct, and to opt out of “sale”/“sharing” — we do not sell or share for advertising, so there is nothing to opt out of, but the request path is honored.
- EEA/UK (GDPR): legal-basis, access, portability, erasure, and the right to complain to your supervisory authority.
- Exercise any right at privacy@narreme.tv; we respond within the timeframe your law requires (generally 30–45 days) and never charge for a first request.
- Manage account data and cancel subscriptions directly in account settings at any time.
In plain English
See what we have, fix it, take it with you, or delete it — just ask. Californians and Europeans get the specific rights your laws give you.
10. Children
- narreme.tv produces rated, adult-oriented drama and is not directed to children.
- Accounts and purchases require users to be 18 or older (see Terms §2); we do not knowingly collect data from children under 13 (or the minimum age your jurisdiction sets).
- If we learn we collected a child’s data without required consent, we delete it.
In plain English
This is grown-up content. We don’t build accounts for kids, and we delete anything collected from one by mistake.
11. Security
- Encryption in transit, hashed credentials, scoped database access (row-level security tying your gameplay data to your account), and payment isolation via Stripe.
- No system is perfectly secure; report concerns to security@narreme.tv. See Terms §3 and §10 for account-security and unauthorized-charge handling.
In plain English
We encrypt, we isolate payments, and we lock your data to your account. Spot a problem? Tell us and we act.
12. International Data Transfers
- Our providers may process data in the United States and other countries.
- Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
In plain English
Your data may be handled in the US by our providers, with the legal safeguards your region requires.
13. Changes to This Policy
- Material changes: notice by email and an in-app banner before they take effect; continued use after the effective date means acceptance.
- Prior versions are dated and available on request at privacy@narreme.tv.
In plain English
We won’t quietly change how we handle your data — you’ll get notice, and old versions stay on record.
14. Contact
- Privacy requests & questions: privacy@narreme.tv
- Security/fraud: security@narreme.tv
- Postal mail: LHD Holdings, Inc., a Delaware corporation (USA) — request our current mailing address at privacy@narreme.tv.
In plain English
One address for privacy, one for security — both read by people. We answer.
© 2026 LHD Holdings, Inc. Version 1.0, effective August 16, 2026.