Privacy Policy

Effective: August 9, 2026

This Privacy Policy explains what information Kuldron collects, how we use it, and the choices you have.

1. Who we are

Kuldron is operated by Kuldron LLC, 1500 N Grant St Ste R, Denver, CO 80203, United States. For privacy matters we are the data controller, and you can reach us at privacy@kuldron.com.

2. Information we collect

• Account information: email address, username, display name, password (stored hashed), and any profile fields you choose to provide.
• Sign-in with Google (optional): Google shares your email address and a unique Google account identifier. We use them to create and sign you into your Kuldron account. We never receive your Google password, never act on your behalf, and access no other Google data.
• Sign-in with Apple (optional): Apple shares an identifier and either your email address or Apple's private relay address, depending on what you choose at sign-in. We use them the same way, and we never receive your Apple password.
• Content: streams, VODs, clips, chat messages, forum posts, comments, direct messages, and anything else you submit.
• Payment information: processed by Stripe. Card numbers never reach our systems. We store transaction records, including the amount, cadence, status, processor references and fees, and any cancellation, refund, or dispute. Patron payments are recorded separately from your wallet and payments to creators.
• Patron recognition choices: whether you display a Patron mark and whether the public Patrons page acknowledges you by a named profile or only in an anonymous collective count. The mark and directory acknowledgment are off by default, can be chosen independently, and remain reversible.
• Invitations: if you invite someone, we process the email address you give us in order to send that invitation and to show you whether it was delivered. If you received an invitation and never created an account, we delete that address once the invitation expires.
• Notifications: what you want to be told about, and which channels you have muted. If you turn on notifications that reach you when Kuldron is closed, your browser gives us an address it will accept messages at, along with two keys used to encrypt them. That address identifies one browser on one device, so we hold one for each device you turn it on for. Turning it off, or signing out of that device, removes it.
• Usage and logs: viewing activity, broadcast metadata, IP addresses, device and browser information, timestamps, and error logs.
• Request counts: we count the requests made to Kuldron and what kind of work each one asked for, so that limits are applied fairly and so that usage-based billing, if you turn it on, rests on an honest number. We keep hourly totals, not a record of each request. For a signed-in account the totals are kept against the account, however you connected. For a visitor who is not signed in they are kept against a network address, are used only to understand demand on the service, are never billed to anyone, and are not used to build a profile of you.
• Advertising and analytics data: see section 5.

3. How we use information, and our legal bases

Where the EU or UK GDPR applies, we rely on the bases named below.

| What we do | Why | Legal basis | | --- | --- | --- | | Run your account, stream, chat, forums and messages | To provide what you signed up for | Performance of a contract | | Bill your wallet, take payments, pay creators | To complete transactions you initiate | Performance of a contract | | Process one-time or monthly Patron support | To complete and manage the support you initiate | Performance of a contract | | Display optional Patron recognition | Only when and in the form you choose | Consent | | Count requests and apply limits to them | To keep Kuldron available and share capacity fairly | Legitimate interests | | Charge recorded usage to your wallet | Only when you have turned usage billing on | Performance of a contract | | Authenticate you, prevent fraud, enforce our rules, keep the platform secure | To protect users, creators and Kuldron | Legitimate interests | | Send service email about your account, security, billing and copyright | To operate the service | Performance of a contract, or legal obligation | | Tell you a channel you follow went live | Only when you have turned it on | Consent | | Measure how Kuldron is used | To improve it | Consent where required, otherwise legitimate interests | | Measure whether our own advertising brought you here | To know what our advertising is worth | Consent where required, otherwise legitimate interests | | Personalise the advertising we run elsewhere | Only when you have turned it on | Consent | | Keep records, respond to legal process, handle DMCA notices | To meet legal obligations | Legal obligation |

4. How we share information

• Service providers, under agreements limiting them to work performed for us: Stripe (payments and creator payouts), Amazon Web Services (hosting, storage and delivery), Google (analytics, and advertising — personalised only where you have turned that on), and Brevo (transactional email).
• Notification services: if you turn on notifications that reach you when Kuldron is closed, delivering one means handing it to the service your browser nominates — Google, Apple or Mozilla, depending on the browser. We send them the address your browser gave us and the notification itself, encrypted. What we send is what you see: who went live, and a link to it.
• Anyone on the internet: your display name, profile, public content, chat messages and forum activity are visible by design, and reading them does not require a Kuldron account. If you turn Patron recognition on, your amount-neutral Patron mark may appear with that public identity. If you separately choose a named listing, the Patrons page links that same public profile. Choosing anonymous acknowledgment contributes only to a collective count; it reveals no identity, profile, account identifier, amount, milestone, or payment history. Search engines may index public information and show it in results. Your direct messages are not public, and neither are your account settings or your email address.
• Legal: when required by law, or to protect rights, safety or property.
• DMCA: counter-notice information, including your identity, is forwarded to the claimant as 17 U.S.C. § 512 requires.

We do not sell your personal information for money.

5. Cookies, analytics and advertising

We use cookies and equivalent storage for sign-in, session management and security. Those are strictly necessary and cannot be turned off while you are using an account.

We do not show you advertising. Nothing plays before or during a stream, VOD or clip, no page carries display advertising, and embedded players carry none either. Free viewing is funded by a viewing allowance rather than by advertising. We do not ask any advertising provider to build or enrich a profile of you. This applies to everyone, signed in or not.

The settings below concern the advertising Kuldron itself buys on other sites, which is the only advertising we are involved in.

If you have an account you can change that under Privacy in your settings, where three choices are kept separate because they differ in who receives anything:

• Personalised recommendations — we use your own activity to order what you are shown. Nothing leaves Kuldron. Off by default.
• Usage measurement — analytics and the measurement of our own advertising, both described below. On by default; this is your opt-out.
• Personalised ads — permits Google to use your activity on Kuldron when choosing who to show Kuldron's own advertising to on other sites. It changes nothing about what you see here, because you are shown no advertising here. Off by default.

Without an account there is nothing to turn on: visitors who are not signed in are never personalised.

We use Google Analytics to understand usage. It is served from our own domain, at /metrics/, which means it is not affected by browser extensions or filters that block requests to third-party analytics hosts; the data still goes to Google. This is governed by Google's Privacy Policy and how Google uses information from sites that use its services.

We advertise Kuldron on Google, and we measure whether that works. If you arrived from one of our advertisements and went on to create an account, Google is told the visit led to one, so we can see which advertising is worth paying for. This measures our own advertising; it does not personalise anyone's. We still tell Google it may not use any of it to build a profile of you or to choose what you are shown, on Kuldron or anywhere else. Usage measurement above is the setting that governs this, so switching it off switches this off too.

In the EEA, the UK and Switzerland we do not collect for advertising or analytics at all. Doing so there would require us to ask through a certified consent platform; we do not operate one, so nothing is collected for those purposes and there is nothing for you to be asked. The account settings above do not grant anything in those regions either — they can only make things stricter, never looser.

Where you have turned personalised ads on, the advertising cookies involved can be used to personalise the advertising we run elsewhere, which some laws treat as "sharing" personal information even though no money changes hands. Section 8 explains how to opt out.

6. Data retention

• Account data: while your account exists, and for a limited period afterwards where we need it for fraud prevention, tax or legal claims.
• Streams, VODs and clips: until the creator deletes them, until the creator's retention setting expires them, or until we remove them under our policies.
• Chat: kept live during a broadcast and for a moderation window afterwards, then tiered to archival storage. Offline channel chat is swept daily.
• Notifications: what you have been told about is kept for a limited period and then cleared. A device's notification address is kept until you turn notifications off, sign out of that device, or the browser retires it — whichever comes first.
• Payment records: including Patron payments, as long as tax, accounting, dispute, and other applicable law requires. If you delete your account, we cancel active monthly Patron support and remove public Patron recognition immediately; retained financial records are limited to those purposes.
• Request counts: hourly totals are kept for a limited period and then deleted automatically. The totals held against your account go when your account does.
• Logs: as needed for security, fraud prevention and legal compliance.

7. Your rights everywhere

• Update your profile from your account settings.
• Delete your account from your account settings. Deletion is confirmed by email and can be cancelled during that window. Some records are kept where law requires it or to prevent fraud.
• Control or remove public Patron recognition from Patronage in your account settings.
• Email from us is only ever about your account — security, billing, invites and copyright. There is no marketing email to opt out of.

8. Regional rights

EEA, UK and Switzerland. You have the right to access your personal data, correct it, delete it, restrict or object to processing, receive it in a portable form, and withdraw consent at any time without affecting processing already carried out. Exercise any of these by writing to privacy@kuldron.com. You may also complain to your local supervisory authority; in the UK that is the Information Commissioner's Office.

California. You have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising, and to be free of discrimination for exercising those rights. We do not sell personal information for money. Personalised advertising, which may be treated as "sharing", is off by default and stays off unless you turn it on yourself under Privacy in your settings — and you can turn it back off in the same place at any time. Authorised agents may act on your behalf with proof of authority.

9. International transfers

Kuldron is operated from the United States, and your information is processed there. Where we move personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, and take the additional measures those require.

10. Children

Kuldron is not for children under 13, and we do not knowingly collect their information. Where the EU or UK GDPR applies, you must be at least 16 unless your country sets a lower age and a parent or guardian consents. If you believe a child has given us information, write to privacy@kuldron.com and we will delete it.

11. Security

We protect accounts with hashed passwords, encrypted transport, scoped access to production systems, and rate limits designed to make credential and content abuse expensive. No system is perfectly secure, so tell us immediately at privacy@kuldron.com if you think your account has been accessed by someone else.

12. Changes

We may update this policy. Material changes will be announced in advance.

13. Contact

• Privacy: privacy@kuldron.com
• Copyright: copyright@kuldron.com
• Support: support@kuldron.com