Privacy
Privacy Notice
Last updated July 30, 2026
Who is responsible
Neon Fox Inc. operates Episetta and is responsible for the personal information described in this notice. This notice applies to Episetta’s websites, player, account, purchases, support, and promotional email. It does not govern a provider’s own website or independent privacy practices.
What we collect
We collect information you provide, such as your email address, sign-in choice, marketing preference, support messages, and purchase or refund request details. We also create or receive account identifiers, consent records, purchase status, country-level eligibility, viewing progress, caption preference, device and browser class, playback performance, landing page, referrer, and campaign or ad identifiers. We do not ask for a full date of birth, and Stripe—not Episetta—collects your full card details.
How information reaches us
Information comes from you, your browser or device, and services involved in your request. Those services can include Google or Apple for sign-in, Stripe for payment status, Bunny for video delivery, and advertising platforms when you arrive through an ad. We limit referrers, location, identifiers, and provider data to what the feature needs.
Why we use information
We use personal information to play video, remember your place, create and secure accounts, link guest progress, confirm eligibility, process purchases and refunds, restore access, provide receipts and support, prevent fraud and abuse, maintain the service, meet legal obligations, and understand product and campaign performance. Where law requires a legal basis, we rely on performing our agreement with you, our legitimate interests in operating and protecting Episetta, your consent, or compliance with law, as appropriate.
Analytics and advertising measurement
Episetta asks before using optional browser product analytics. If you allow it, PostHog receives manually selected viewing-funnel, playback-performance, device, campaign, and opaque account or session identifiers. We disable automatic page capture and session recording and do not send PostHog your email, payment-provider identifiers, captions, or free-text messages. Playback, accounts, and purchases work if you decline. Essential first-party records and server-side purchase, fraud, and campaign measurement may still be processed where permitted; advertising-platform measurement is enabled only after the applicable consent and data-processing review.
Cookies and browser storage
We use cookies and browser storage for sign-in, security, guest progress, caption preferences, checkout and sign-in return state, acquisition continuity, and your analytics choice. PostHog storage is used only when optional analytics is enabled. Blocking essential storage may prevent account recovery, saved progress, or Checkout return from working correctly. You can control storage through your browser and can change your analytics choice by clearing the Episetta analytics preference and choosing again.
When we share information
We disclose information only as needed to operate Episetta, complete your request, protect the service, or comply with law. Providers can include Convex for application hosting and functions; Cloudflare for website delivery and security; Bunny for video delivery; Google, Apple, and Better Auth-supported systems for identity; Stripe for Checkout, tax, receipts, refunds, and disputes; Resend for transactional and opted-in promotional email; PostHog for consented product analytics; and Meta or TikTok for approved advertising measurement. We may also disclose information to professional advisers, authorities, or a successor in a corporate transaction where legally permitted.
Retention
We keep personal information only for as long as its purpose, our agreements, and applicable law require. PostHog identifiable events are configured for 13 months. Marketing consent, withdrawal, and keyed suppression evidence is kept for up to three years after the last commercial message or withdrawal unless a legal hold applies. Account deletion removes viewing progress, acquisition sessions, and the current marketing address and replaces the application profile with a minimized deletion record when deletion completes. We may retain minimized purchase, tax, fraud, refund, dispute, consent-suppression, and audit evidence for required legal, accounting, security, and dispute periods.
Account deletion
You can request deletion in Account. The request blocks new playback authorization and Checkout, revokes sessions, withdraws active marketing consent, and starts account cleanup. Deleting an account is irreversible and may make purchased access unrecoverable. Stripe and other providers may retain records under their own legal obligations, and Neon Fox may retain the limited evidence described above.
International processing
Episetta and its providers may process information in Canada, the United States, and other countries where they operate. Those countries may have different privacy laws, and information may be available to courts, law enforcement, or regulators under local law. We use contractual, security, and provider controls appropriate to the information and applicable requirements.
Your choices and rights
Account lets you download an application-data export, manage promotional email, sign out, and request deletion. Depending on your location, you may also ask to access, correct, delete, restrict, or receive a copy of personal information, object to certain uses, or withdraw consent. Withdrawing consent does not affect earlier lawful processing. We may need to verify your identity and may retain or withhold information where law permits.
Age
Episetta is intended for people aged 16 and older and is not directed to children. We do not knowingly collect a full date of birth. If you believe a child has provided personal information contrary to this notice, contact us so we can review and take appropriate action.
Security
We use access controls, short-lived playback authorization, provider credential separation, rate limits, audit records, and data minimization to protect information. No internet service can guarantee absolute security. Contact us promptly if you believe your account or personal information has been compromised.
Contact and complaints
Email hello@episetta.com to ask a privacy question, exercise a privacy right, request correction, or make a complaint. We will respond in line with applicable law. If we do not resolve your concern, you may have the right to complain to the Office of the Privacy Commissioner of Canada or the privacy regulator where you live.
Changes to this notice
We may update this notice as Episetta, our providers, or legal requirements change. We will change the date above and provide additional notice where a material change or applicable law requires it.