Privacy Policy
Last updated: 25 October 2026
This policy explains what personal data VaasFlash collects, why, and what you can do about it. VaasFlash is run by VaasFlash, which is responsible for your data. We collect as little as the site needs to work, we don't use advertising or analytics trackers, and we don't sell your data.
What we collect
- Your account: your email address, and your password stored only as a secure one-way hash (we can't read it). Whether you've confirmed your email.
- Your passes and payments: which plan you bought, when, its price, its status, and the payment reference from our payment provider. We never see your wallet's private keys or card details.
- What you do on the site: which videos you've watched (to count views and rank videos), liked or saved to your favourites.
- Security records: when someone tries to sign in, register or reset a password, we keep the email address tried and the IP address for one day, to stop password-guessing.
- Server logs: our servers record requests (IP address, page, time, browser) to keep the site running and secure. They're kept for a short time and never include the links in password-reset emails.
How we use it
- to run your account and sign you in;
- to give you the access you paid for;
- to send emails you need: confirming your address, resetting your password, and notices about your account;
- to keep the site secure and stop abuse;
- to see which videos are popular.
We don't send marketing email.
Cookies
VaasFlash uses only cookies it needs to work, so it doesn't ask for consent:
- vs_session keeps you signed in (30 days);
- vs_age remembers that you confirmed you're 18 or older (one year);
- vs_theme remembers whether you chose the light or dark look (one year).
Who else handles your data
- NOWPayments processes payments. Their own privacy policy applies to what you give them.
- Bunny.net stores and streams the videos, so it sees your IP address when you watch.
- Resend sends our emails, so it handles your email address.
- Host hosts our servers and database.
We share data with authorities only when the law requires it.
How long we keep it
- Account data, likes and favourites: until you delete your account.
- Views: once your account is deleted, they're kept only as anonymous counts.
- Payment records: as long as accounting and tax law require, even after an account is deleted.
- Sign-in security records: one day.
Your rights
Depending on where you live, you can ask to see the data we hold about you, correct it, get a copy, or have it deleted, and you can object to how we use it. Write to support@vaasflash.com from your account's email address; we'll reply within 30 days. You can also complain to your local data protection authority.
Security
Passwords are hashed, connections are encrypted (HTTPS), and access to our systems is limited. No system is perfectly secure, so use a password you don't use anywhere else.
Children
VaasFlash is for adults only. We don't knowingly collect data from anyone under 18; if we learn we have, we delete the account.
Changes
We'll update this page if what we do changes. The date at the top shows the last change.
Contact
Privacy questions or requests: support@vaasflash.com.