Privacy Policy

Effective date: 10 May 2026  ·  Version 1.0

This policy explains what personal data BingeChill collects, why we collect it, how long we keep it, and your rights over it. BingeChill is operated as a personal project. Our infrastructure runs on Amazon Web Services (AWS) in the United States.

1 · Who we are

BingeChill is operated by Jide Okedele. For data-related questions, contact us at jideola@jideola.com.

2 · Data we collect

Account data — collected when you sign up:

• First name, last name
• Email address
• Date of birth (used to verify minimum age)
• Password (hashed and managed by AWS Cognito — we never see it)

Profile data — set by you after signing up:

• Avatar selection
• Terms of Service acceptance record (version, timestamp)

Usage data — collected automatically when you use the service:

• Watch history (which titles you've watched and your playback position)
• Reactions (likes / dislikes on titles)

Technical data — collected by our infrastructure:

• IP address (retained in AWS CloudFront and API access logs)
• Browser type and device information (from HTTP headers in logs)
• Request timestamps

3 · Why we collect it and our legal basis

• To provide the service (contract performance) — account data, watch history, playback position
• To comply with legal obligations — Terms of Service acceptance records, age verification
• Legitimate interest — access logs for security monitoring and abuse prevention

4 · Cookies

We use three strictly necessary cookies to keep you signed in:

• id_token — identifies your account (expires after 1 hour)
• access_token — authorises API requests (expires after 1 hour)
• refresh_token — renews the above automatically (expires after 30 days)

These cookies are strictly necessary for authentication and cannot be disabled without breaking the service. No advertising or tracking cookies are used.

5 · Who we share your data with

We do not sell your data. We share it only with the infrastructure providers needed to run the service:

• Amazon Web Services (AWS) — authentication (Cognito), database (DynamoDB), content delivery (CloudFront), compute (Lambda). AWS acts as a data processor under a Data Processing Addendum incorporating EU Standard Contractual Clauses.

No other third parties receive your personal data.

6 · International transfers

Our infrastructure runs in AWS us-east-1 (Northern Virginia, USA). If you are located in the European Economic Area or United Kingdom, your data is transferred to the US under the AWS Data Processing Addendum, which incorporates Standard Contractual Clauses approved by the European Commission.

7 · How long we keep your data

• Account and profile data — retained while your account is active, and deleted within 30 days of an account deletion request
• Watch history and reactions — retained while your account is active
• Access logs — retained for up to 90 days in AWS CloudWatch

8 · Your rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — ask us to delete your account and associated personal data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Restriction — ask us to limit how we process your data while a dispute is resolved

To exercise any of these rights, email jideola@jideola.com. We will respond within 30 days.

9 · Children

BingeChill requires users to be at least 13 years old. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will delete it promptly.

10 · Changes to this policy

We will notify registered users by email if we make material changes to this policy. The effective date at the top of this page will always reflect the current version.