Privacy Policy

Scope

This policy covers the HONG LUO website (https://hongluo.co), its member services, and the player pages embedded on partner websites.

The service is only for users aged 18 or older.
We do not knowingly collect personal data from anyone under 18. If we find that we have, we delete it immediately.

Account data: email address, display name, and password (stored only as a hash).
Google sign-in: when you sign in with Google, we receive the email address, name, and Google account ID that Google provides. We never receive your Google password and do not access any other Google data.
Payments and billing: order number, amount, currency, payment method, payment and refund status, and coin transactions. Credit card and Alipay payment details are handled by the payment providers; we never receive or store card numbers.
Usage: watch history and progress, your list, unlocked episodes, and membership periods.
Devices and connections: device type, IP address, and sign-in and playback times.
Referrals: referral relationships, commission and withdrawal records, and the payout details you enter.

To provide video playback, coin unlocks, monthly membership, and the referral program.
To process payments and refunds, recover coins after payment refunds, and reconcile accounts.
To determine your region from your IP address and show the payment methods offered there (this is done on our own servers and is not shared with third parties).
Account security: limits on simultaneous sign-ins and playback, account watermarks on the player, and detection of unusual use.
To answer member enquiries and resolve disputes.

Payment providers: the order data needed to complete payments and refunds.
Google: only when you choose to sign in with Google, to verify your identity on Google’s side.
Hosting, video storage, and delivery providers: to store and deliver site data and videos.
When required by law or by a competent authority.
We do not sell members’ personal data.

Sign-in cookie: valid for 7 days and removed when you sign out.
Google sign-in cookie: used only during sign-in and expires after 10 minutes.
Language cookie: remembers the interface language you chose, valid for 1 year.
Local browser storage: your referral code (30 days) and whether the “add to home screen” tip has been shown.

Account data: kept until the account is deleted.
Orders, payments, and billing records: kept as required for accounting and tax purposes.
Security records: partner API logs are kept for 90 days; video key request logs for 24 hours.

The site uses HTTPS throughout, stores passwords only as hashes, streams videos encrypted, and limits back-office access to data by role.

You can ask to access, correct, or delete your personal data, withdraw consent, or restrict or object to certain processing.
Access and correction: after signing in, view and edit your account details and password under “Account” and “Account security”.
Other requests (including account deletion): email pornmangocom@gmail.com from your registered email address.