Privacy Policy

• Account: your name, email address, password (stored only as a secure hash by our sign-in provider), profile photo and preferences.
• Filmmaker profile: public name, page address, bio, country, languages, genres, links and business email, plus your projects and uploads.
• Viewing: for each viewing session: the title, seconds actually watched, how far you got, whether you finished, device type (phone, computer or TV), your country (worked out from the network, not your precise location) and where you found the title. Signed-out visitors get a random ID stored in their browser.
• Activity: who you follow, your saved list, watch history, support pledges and any note you add, reports you make and support conversations.
• Security: for admin and Executive actions, the time, device and IP address, kept in an audit log.

• To run your account and show you films, follows, saves and continue-watching (to provide the service you signed up for).
• To recommend titles you're likely to enjoy, based on what you watch, like, save, comment on and follow. Your activity is only used for your own recommendations; “you might also like” suggestions only use viewing shared by several people, never one person's.
• To give filmmakers honest audience numbers and to calculate the Creator Performance Pool (our legitimate interest in running a fair platform).
• To keep DonkiCom safe: stopping fake views, reviewing reports, and auditing admin actions (legitimate interest and legal obligations).
• To reply when you contact Support, and to send you notifications you've chosen.

• Filmmakers see audience totals for their own titles (views, watch time, countries, devices), not who watched. If you pledge support without choosing “anonymous”, they see your name, amount and note.
• People a filmmaker shares an audience report with see the same totals, never individual viewers.
• The public sees filmmakers' public profiles and follower counts.
• DonkiCom's team sees what they need to run the platform, limited by role, and their access is logged.
• We don't sell your personal information or use it for third-party advertising.

DonkiCom is hosted by Supabase (database, sign-in and file storage, in Ireland in the European Union) and Vercel (website hosting, with servers in Ireland). When full-length video streaming is switched on, videos are also stored and streamed by Mux (in the United States). These providers process information only on our instructions and protect it under laws and contracts giving a level of protection similar to POPIA.

We use essential cookies to keep you signed in, and your browser's storage to remember a random viewer ID and how you found a title. We don't use advertising or cross-site tracking cookies.

We keep your information while you have an account. When you delete your account, your profile, follows, saves, history and, for filmmakers, their studio and projects are deleted. Viewing sessions and pledges you made are kept without your name so filmmakers' audience records stay accurate. Audit-log entries are kept for security.

You can ask to see, correct or delete your personal information, or object to how we use it.

• Update your details and delete your account yourself from your account page.
• For anything else, contact us through Support.
• If you're unhappy with our answer, you can complain to the Information Regulator (South Africa).

Access to data is enforced in the database itself, passwords are hashed, admin accounts need two-step verification, and sensitive changes need two Executive signatures and are logged. No system is perfect; if a breach affects you, we'll tell you and the Information Regulator as the law requires.

DonkiCom isn't for children under 13. Users aged 13 to 17 need a parent or guardian's permission.

We'll update this policy when how we use information changes, and tell you about important changes. For privacy questions, contact us through Support.