Privacy — Get Qurio

What we store

Your account: your name and email, whether you’ve confirmed the email, the date you signed up and the last time you logged in, and the ID our sign-in provider gives your account. We use them to run your account and send account emails.
Not your password. We pass it straight to our sign-in provider, Harakumo, which keeps only a salted hash of it.
The country you signed up from, worked out from your connection (never your exact location), so we know where our viewers are.
Purchase records: which film you bought, the Stripe checkout and charge references, the email you gave Stripe when paying (it can differ from your account email), the amount, currency and date, which account it belongs to, and whether it was refunded or disputed.
Which device is playing: to play films on one device at a time, we keep, per account, a random ID for the device that’s streaming and when it started and last fetched a piece of the film. It is replaced when another device takes over.
Short-lived abuse counters: to stop password guessing and spam, we count recent attempts (logging in, sending codes, adding or restoring purchases, starting the player) and our daily re-check of a payment with Stripe. They are keyed by your account or the purchase, or by a one-way hash of the email or network (IP address) used, never the address itself. Routine clean-up deletes counters once they’re a day old.
Three essential cookies: tf_at (proves you’re logged in, for up to 7 days), tf_rt (renews it, so you stay logged in; it lapses after 60 days without a visit) and tf_dev (the random device ID above, sent only to the player’s stream, kept for a year). They are essential, so there is no cookie banner. We use no analytics or advertising cookies.
The mark on the picture: while you watch a film you bought, your email and the first characters of your account ID are shown faintly over the picture, so a copy can be traced back to the account. It is drawn by your browser and nothing new is stored for it.
In your browser only: where you stopped watching each film (for Resume and Continue watching), your quality choice, whether you’ve closed the “add to home screen” hint, and, until it’s in your library, the reference of a payment you just made, so you aren’t asked to pay twice. That reference is cleared once the film is added, or after 7 days. While you sign up or reset your password, the open tab also remembers the email you typed.

Who else is involved

Stripe processes your payment. We never see your card number. Stripe’s own privacy policy applies to the checkout.
Harakumo runs sign-in. It keeps your name, email and password hash, emails your 6‑digit codes, and gets your IP address when you sign up and a short browser label (like “Firefox on macOS”) for its list of signed-in devices, to stop abuse.
Cloudflare hosts the site, the film streams and the database, and sends our own emails: “your movie is ready” and the Studio interest-list emails.
Google Fonts serves the typefaces, so your browser fetches them from Google.

Emails

For your account we send only the 6‑digit codes to confirm your email or reset your password (sent by Harakumo) and “your movie is ready” after a purchase. If you join the Studio interest list (below), we also send the email that asks you to confirm it, a delete link when you ask for one, and, once you’ve confirmed, emails about Get Qurio Studio only. Nothing else: no newsletters and no marketing.

Early-access interest list (/studio)

If you fill in the Get Qurio Studio form on Make a film, we store:

Your answers: your name and email, what describes you, whether you’d like to make animated or live-action-style films, what you’d spend with our software on one film of each kind, and your total budgets for each; and anything optional you add: mobile number, country, company or channel, website, what you’d make (formats, length, where your story is, what it’s for), how you’d like to pay, when you’d start, how you’d like to work, and your note about software.
Where you came from: the campaign tags in the link you followed (utm_source, utm_medium, utm_campaign, utm_term, utm_content and ref), if it had any.
A few details about the answer: a short browser label such as “Safari · iOS” (never the full user agent), which consent wording you agreed to, when you sent the form and when you confirmed your email, and a status for our own follow-up, such as “contacted”.
The links we email you: only a one-way hash of each confirm or delete link, next to your email, so the link works. A link works for 7 days.
Short-lived spam counters: how many forms came from one network or one email, keyed by a one-way hash, never the address itself. Routine clean-up deletes them once they’re two days old.

We don’t store your IP address, or a hash of it, with your answers, and the form sets no cookies. Until you send it, your progress is kept only in that browser tab.

We use the answers to decide whether and what to build and how to price it, and, once you confirm your email, to contact you about Get Qurio Studio only. We never sell them. Cloudflare hosts the site, stores the answers in its D1 database and sends our emails. We may email a copy of a confirmed answer to our own team inbox, and if we review answers in a spreadsheet such as Google Sheets, a copy is there too; we delete those copies the same way.

How long we keep them: answers you don’t confirm are deleted after 7 days. Confirming deletes that email’s older answers, so only your newest confirmed answer is kept, and it is deleted 24 months after you sent it. Delete yours any time with the link in any email from us, or ask for a delete link on the Studio page; it deletes every answer that email gave.

Deleting your data

Delete your account any time from Account (Delete account). Harakumo then deletes your sign-in account (name, email and password hash) and you’re signed out everywhere.

In our own database we erase your name, forget which device was playing, and mark the account as deleted. We keep the rest of that record: your email, whether it was confirmed, your sign-up country, and your sign-up and last log-in dates. This is kept even if you never bought anything. If you did buy, we keep the purchase records, including the email you paid with, but no longer tied to an account, because accounting rules require them. They also let you restore a purchase if you sign up again with the same email.

Contact

Questions or requests: reply to your Stripe receipt email.