Privacy policy
This page describes exactly what is collected when you use Vizzo, why, and who it is passed to. It is written from the actual database schema rather than from a template.
Who is responsible for the data
The service is operated from Israel by an individual, as a sole trader, and not by a registered company — so there is no company number to show here. Ownership of the database, and responsibility for what is done with it, rest with the person who operates the service. If a company is registered to run the service, we will update this. Any privacy question: info@vizzo.tv
What is collected
Some of this is collected without an account, so the site can remember where you stopped and what you saved.
| What | Why |
|---|---|
| Anonymous browser identifier | Stored in your browser on your first visit, with or without an account. It is what makes resume points and your saved list work, and it contains no name or address. |
| Name and email address | Only if you registered. Used for signing in and password reset. The password is stored one-way hashed and we cannot read it. |
| Date of birth | Given at signup only. An account holder must be 18 or over, because the account holder is the person who sets up the kids profiles and holds the PINs. We store the date rather than an age — an age goes stale the next day, the date it is computed from does not. |
| Terms acceptance | The moment you ticked the terms-of-use box at signup, recorded on our server. It exists so we can show when agreement was given, not to identify you. |
| Marketing consent | Only if you ticked the optional box at signup. We store when the consent was given and which screen it came from. We have sent no marketing mail at all yet — the box exists so that on the day we do, there is prior consent, as the law requires. You can withdraw it at any time. |
| Profiles | Profile name, whether it is a kids profile, and an age limit if one was set. A PIN, if set, is stored hashed. |
| Viewing history | Which title, when, how long was watched and where you stopped. Used for continue watching, and to calculate the royalties we pay to rights holders. |
| Country | A two-letter country code only, computed on our server from your IP address and stored with the viewing. Our licences are per territory and this decides what may be shown. |
| IP address | Kept in your sign-in record and in the server's log files, for security and abuse prevention. Server logs are deleted automatically after 14 days. The IP address is not linked to your viewing history — only a two-letter country code is stored there. |
| Watchlist | The titles you saved. |
| Ad impressions | Whether an advertisement was shown at a break, whether it completed, and in which country. Used to measure fill rate and for reporting. |
Cookies and local storage
The site stores a small number of items on your device. These are all of them, by name.
| Item | What it is and how long |
|---|---|
| viewer_key (local storage) | The anonymous identifier. It is what lets us resume where you stopped and keep a watchlist without an account. Stays until you clear your browser. |
| ad_consent (local storage) | Your answer to the personalised-advertising question. Stays until you change it or clear your browser. |
| The login cookie | Holds your session. Marked httpOnly, so code on the site cannot read it. Expires at the end of the session or on sign-out. |
| XSRF-TOKEN | Protects against forms being submitted from another site in your name. Expires at the end of the session. |
| The “remember me” cookie | Written on sign-in only, and keeps you signed in between visits. Expires on sign-out. |
| Google advertising SDK storage | Created only if you agreed to personalised advertising. Controlled by Google rather than by us, under Google's policy. |
There are no measurement cookies, no analytics, and no social network pixels on this site. If any are added, this list will be updated before they load.
Who the data goes to
We do not sell data and do not pass it to advertisers. These are the service providers involved in running the site:
| Who | Why |
|---|---|
| Advertising is served through Google's SDK. When an advertisement is shown your browser contacts Google's servers, and they receive connection data as is standard in online advertising. | |
| Bunny.net | Delivery of the video itself. Your browser requests the film's segments from them. |
| Brevo | System mail — address verification at signup, and password resets. |
| Zoho | Our inbound mailbox. If you write to us, the message arrives there. |
| Hetzner | The servers the site runs on sit in a Hetzner data centre in Germany. Everything stored by the system is physically there. |
Transfer outside Israel
The service providers above operate outside Israel, so some data goes to servers abroad. The transfer is made solely in order to run the service. Most of the data never leaves Europe at all: our servers are in Germany. In the other direction, Israel is recognised by the EU as providing an adequate level of protection, so transferring data from the EU to here needs no additional arrangement.
How long it is kept
Account details are kept while the account exists. Viewing history is kept beyond that where a filed royalty report needs it — a report already sent to a rights holder cannot lose rows after the fact. The anonymous handle stays in your browser until you clear it. We also back the database up nightly and keep the backups for 30 days, so data you delete still exists in a backup until that backup expires in turn.
Personalised advertising
Free viewing is paid for by advertising served through Google. To show it, your browser loads Google's code, which stores and reads information on your device. We ask before that happens. On a kids profile, advertising is never personalised — the request is always marked child-directed and non-personalised, regardless of the choice above.
If you decline, the films work exactly as they do now — simply without advertising. You can change your answer at any time on the privacy page.
You have not been asked yet.
Your rights
You may see what is stored about you, ask for it to be corrected if it is wrong, and delete your account. Deletion is done by you from the account page, immediately and without writing to us. Note that viewing history already included in a royalty report filed with a rights holder is kept after the account is deleted, detached from your details. If a request to us was not answered as you expected, you can approach the Privacy Protection Authority at the Ministry of Justice. If you are watching from the EU or the UK, you also have the rights in the GDPR — erasure, portability and objection to processing — and you can complain to the supervisory authority in your own country.
Privacy enquiries
For any request or question: info@vizzo.tv
Last updated: 21 August 2026