Data minimization
The platform should collect only what is needed for authentication, membership billing, fraud prevention, support, analytics, and secure media access.
Payments
Payment processing is handled through a third-party processor using generic membership/order descriptions. Tape titles, adult categories, and member viewing details should remain internal to the app and should not be sent to Stripe metadata.
Security
Private media is intended to stay behind server-side entitlement checks and expiring signed URLs. Service-role credentials, webhook secrets, and private object paths must never be exposed in client code.
Analytics
Analytics should be limited to operational events such as shelf views, checkout progress, preview starts, and playback status. Avoid storing unnecessary sensitive personal data.