Privacy Policy
Placeholder — replace before launch. Should disclose:
what we collect (email + hashed password via Supabase Auth; watch history and watchlist if signed in; standard server logs; ad-network cookies); why; third-party processors (Supabase, Cloudinary, the ad networks, the video hosts whose players you load); cookie use; data-retention and deletion requests; and the contact address for privacy requests.