Privacy Policy
Last updated 15 September 2026 · Ler em português
This describes exactly what Stream Universe stores about you, why, and how to get rid of it. It is the whole list, not a summary.
What we store
- Your account. Name, email address, the country and language you use the app in, the profile picture you chose from the actors in the catalogue, and when the account was created.
- Your services. Which streaming services you tell us you pay for.
- Your lists. The titles you save, the playlists you make, and when you did each.
- What you looked up. Titles you have opened, how many times, and when you last did. Searches you have run, how many times, and when.
- Your devices. For each signed-in session: the browser or device, when it signed in and was last used, and the approximate city and country of the connection, as Cloudflare reports it. This is what the devices screen shows, so you can recognise a session and end it. Supabase, which runs sign-in, also records each session's IP address.
- Your subscription. Which plan you are on, whether it is active, when the period ends, and the identifiers Stripe uses for your customer record and subscription.
We never see or store your card number. Stripe handles payment and holds those details.
Why we store it
To run your account and your subscription, which is the contract between us, and to do the one thing the product exists for: rank what is available by what you already pay for. Your services and your lists are what make that possible. Device details exist to keep your account safe.
We do not sell your data. We do not share it with advertisers. We do not build a profile of you for anybody else.
Who else touches it
- Supabase hosts the database your account lives in and runs sign-in.
- Cloudflare serves the site and the API, and counts page visits without cookies and without identifying you.
- Stripe processes payments and holds your payment details.
- Resend sends your account emails, such as confirmation codes and password resets.
Nothing about you is sent to TMDB or to the streaming services. Our catalogue is our own copy, refreshed nightly, so searching does not tell anyone else what you searched for.
How long we keep it
Until you delete your account. There is no expiry window and nothing is quietly purged. Deleting your account removes your profile, your services, your lists, your history, your devices and your subscription record in one go.
Your rights
Under the LGPD you can ask us to confirm what we hold, correct it, delete it, or hand it to you in a portable form. You can also object to processing and ask who we have shared data with.
You can download a copy of your data and delete everything yourself from your account settings. For anything else write to [email protected] and we will answer within fifteen days.
Cookies
Two, and neither is for tracking:
- Session. Keeps you signed in. It is
HttpOnly, so no script on the page can read it, and it goes when you sign out. - Country. Holds your connection's country for a day, only to open the page in the right language.
Your browser also keeps your language choice, and your name and profile picture so the top of the page can draw without waiting, on your own device. We run no analytics or advertising cookies.
Security
Every row of your data is behind row level security in the database, keyed to your account, so one person's request cannot reach another person's rows. Passwords are hashed and never stored in the clear. All traffic is encrypted in transit.
Children
Stream Universe is not intended for children under 18, and we do not knowingly collect their data.
Changes
If this policy changes we will post the new version here and tell you before it takes effect.
Contact
Catalogue data from TMDB. Availability by JustWatch. Service names, logos and artwork belong to their owners.