Privacy

Who we are

Pureplay Studios Ltd is responsible for your personal information. We are registered in England and Wales, company number 06446126. Our registered office is Suite Lp7356, 20-22 Wenlock Road, London, N1 7GU, United Kingdom. Contact ethan@midnightscreens.com with privacy questions.

Information we collect

• Account and transaction information such as email, bid amount, payment status and receipt identifiers.
• Listing information such as destination URL, title, tagline, category, uploaded media and generated-media inputs.
• Technical and usage information such as device/browser details, coarse request information, product events, errors and security signals.
• Reports, support messages and moderation records.

Dodo Payments handles full payment-card details; we do not receive or store your complete card number.

How we use it

We use information to provide and secure the service, process and reconcile payments, send transactional email, publish and moderate listings, make share clips when enabled, prevent abuse, diagnose failures, measure product use and comply with legal obligations.

Our legal bases are our contract with screen owners for purchases, accounts and publishing; legal obligations for required financial records and disclosures; and our legitimate interests in keeping the service safe, fixing failures and measuring its use with limited data. We balance those interests against your privacy, including children's privacy. Where processing relies on your consent, you can withdraw it at any time.

Rider measures

When rider measures are enabled, a screen view counts after at least half the screen is visible for one continuous second. We also count close views, and visits to a screen's link when link tracking is enabled. Views and close views are each capped at about 12 per browser per screen per UTC day. Screen owners see aggregate numbers for their own screens in My Screens, not rider identities.

The Line sends a random page ID, the current video-edition ID, screen listing IDs and counts. To apply the daily cap, the server makes a daily hash from a coarse part of your IP address, browser details and a secret key. This makes the per-browser cap approximate. The measures system does not save your raw IP address or browser details, and uses no cookies or local storage for rider identity. Hash-based cap records are set to expire 48 hours after the start of their UTC day. We keep aggregate daily and lifetime totals without a fixed expiry; those totals contain no rider identifier.

Riders on the Line

When the anonymous rider count is enabled, your page sends a random page ID and the part of the Line you are riding through. The count keeps only that ID, place and last-seen time in memory. A page drops out after 90 seconds without an update. This count uses no cookies or local storage and does not save presence records to a database. Riders see a total, not a list of people. It counts active pages, not verified unique people.

Midnight Train companion waitlist

If you join the waitlist for the Midnight Train desktop companion at midnightscreens.com/train, we keep your email address and any optional answers you give: which computer you use, where the train would ride on your screen, and whether you would pay about $5 once. We also keep a short tag for the link you arrived from, such as a video platform's name, and the version and time of the consent statement you saw. No cookies are set and nothing is saved in your browser.

We use this only to tell you about the companion's launch and early access. Our lawful basis is your consent, which you can withdraw at any time. We keep it until you unsubscribe or ask us to delete it, and in any case delete it 12 months after the companion launches. It is stored with Cloudflare (D1), like the rest of the service. Every email has an unsubscribe link, or email ethan@midnightscreens.com to be removed.

Saved browser data

We use local storage to remember comforts, sound and rain preferences and interactions with the dog. We also save checkout details, including your email and chosen spot, and video drafts so you can return to them. Session storage keeps temporary purchase access and helps you resume a move after checkout. These saved preferences and drafts are separate from rider measures. Owner sign-in uses a session cookie, normally for 30 days. The separate wall page uses a saved random ID for product analytics.

Saved preferences and drafts have no automatic expiry. Checkout can resume for 24 hours, but that limit does not delete the saved details. You can clear saved browser data in your browser settings. This clears saved preferences and drafts too.

Live radio

After your first tap, click or key press, the Line can request Lofi 24/7, a third-party internet radio stream at usa9.fastcast4u.com, and its Radio Browser directory at de1.api.radio-browser.info. Both third parties receive your IP address and request details. This can start with your first gesture, without a separate radio tap. You can turn music off in the Music controls.

Service providers

We use Cloudflare for application infrastructure, Dodo Payments for checkout and tax, Postmark for transactional email, PostHog for product analytics when enabled, Fal for optional video generation and pixel-art conversion, OpenRouter and its model providers for creative screening, Google Gemini for animation-style review, and Fly.io for media processing. Providers process the information needed for those services and may process it outside the UK, including in the US. Contact us for details about applicable international-transfer safeguards.

Provider retention depends on the service and account settings. Cloudflare's standard Workers logs last 3 days on its Free plan or 7 days on its Paid plan. Postmark's default email-content and activity retention is 45 days; custom plans may differ. These periods are separate from our account, payment and video records.

Animation-style review may send a temporary copy of your video to Google's Files API. We request deletion when review finishes or fails; those temporary files automatically expire after 48 hours if immediate deletion fails. Google separately retains prompts, context and responses for 55 days for abuse monitoring. Retention for other generation and review requests follows the relevant provider's terms and settings, including Fal and OpenRouter's model providers.

Retention and disclosure

We keep account and video information while needed to provide the service. Following a verified account-closure or deletion request, we remove information no longer needed, while keeping records required for payments, disputes, safety or legal duties. Financial records are normally kept for six years from the end of the financial year they relate to, or longer where required. We keep support and moderation records only while needed to handle the matter, prevent abuse or resolve a dispute.

Public listings, approved videos, share clips and destination links are visible to riders. We may disclose information when required by law or to protect users, the service or others.

Your choices

You may request access, correction, deletion, restriction or a copy of your information where applicable. You may object to processing based on our legitimate interests. Some transaction, placement, security and legal records must be retained. Email ethan@midnightscreens.com with a privacy request.

You can also complain to the UK's Information Commissioner's Office.