Official Policy

Last updated: October 12, 2026

Privacy Policy

Last updated: October 12, 2026

Your privacy and data protection are fundamental to our mission at wexioStream Network Inc. ("we", "us", "our"). This Privacy Policy explains how we collect, process, store, and safeguard your personal data when you use our website, public media player, file gateways, creator dashboard, and APIs.

1. Who We Are (Data Controller)

wexioStream Network Inc. is the designated data controller for the personal information processed under this policy.

If you have questions regarding this Privacy Policy, your privacy choices, or need to exercise your statutory rights under the EU/UK General Data Protection Regulation (GDPR) or similar frameworks, reach out directly to our Data Protection Office:

Data Protection Officer & Privacy Team: [email protected]
Legal Inquiries: [email protected]

2. Information We Collect

We collect information directly from you, automatically through your browser or device interactions, and from verified payment and infrastructure partners.

A. Account & Identity Information

Account Profile: Username, email address, registration timestamps, and account status.
Secure Credentials: Passwords stored strictly as one-way salted hashes (using modern Argon2 / Bcrypt algorithms)—we never possess or log plaintext passwords.
Payout Details: Cryptocurrency public wallet addresses or payout merchant IDs if you participate in creator monetization.

B. Uploaded Content & Metadata

Files, video streams, audio tracks, preview thumbnails, subtitle files, titles, descriptions, and file hashes.

C. Device, Browser & Anti-Fraud Fingerprinting Signals

To protect the creator monetization ecosystem against bots, multi-accounting, and fake view inflation, our edge nodes collect transient client signals exposed by your browser:

Canvas and WebGL rendering profile and GPU hardware descriptor.
Web Audio API latency and audio-stack hardware characteristics.
Available CPU hardware concurrency, platform architecture, touch/pointer input type.
Screen resolution, color depth, pixel density, timezone offset, and system language preference.
System font availability and speech synthesis voice lists.

Security Notice: These browser characteristics are combined into an anonymous, hashed device identifier. We do not access, scan, or read any local files, documents, or private storage on your computer or mobile device.

D. Network & Connection Diagnostics

Client IP address and derived autonomous system number (ASN) / subnet.
Connection classification (residential, cellular, datacenter proxy, or known VPN endpoint).
Low-level TLS/TCP protocol negotiation fingerprints used to combat distributed DDoS attacks and automated scraping bots.

E. Cookies & Local Identifiers

Essential Session Cookies: First-party encrypted tokens to keep you signed in securely.
Device Integrity Token (ws_did): A persistent first-party security cookie used to recognize authorized browsers and prevent credential stuffing.

F. Playback, Usage & Engagement Events

Video view sessions, playback duration, watch progress, buffering events, engagement interactions, and referral sources.

G. Financial & Payout Records

Lifetime earnings balances, payout ledger entries, transaction hashes, and payout status histories.

We process your data strictly under lawful legal bases under Article 6 of the GDPR:

Processing Purpose	Categories of Data	Legal Basis
Operate Platform & Media Delivery	Account profile, uploaded files, playback tokens	Performance of a Contract (Art. 6(1)(b))
Anti-Fraud & View Integrity	Device fingerprint, IP, connection type, playback events	Legitimate Interests (Art. 6(1)(f))
Monetization & Payout Processing	Balance ledger, wallet address, tax receipts	Contract & Legal Obligation (Art. 6(1)(c))
Third-Party Advertising	Aggregated view impressions, non-essential cookies	Consent (Art. 6(1)(a))
Security & Incident Response	Server logs, protocol headers, audit trails	Legitimate Interests & Legal Obligation

4. Cookies, Fingerprinting & Browser Storage

Strictly Necessary Technologies: Session tokens, authentication cookies, CSRF protection, and anti-fraud device integrity identifiers (ws_did) are strictly essential to provide the service and prevent fraud. Under ePrivacy directives, these do not require prior consent.
Optional Technologies: Analytic measurement and advertising cookies are only activated with your informed consent in jurisdictions where required (such as the EU/UK).
You can clear or block cookies via your browser preferences; however, authentication, playback sessions, and creator dashboards may become unavailable.

5. Third-Party Advertising & Ad Partners

Certain public download and streaming surfaces display advertisements delivered by verified third-party programmatic networks (e.g., Google AdSense / Ad Exchange, OpenRTB demand partners).

These partners may utilize their own cookies or device identifiers to measure ad viewability, prevent ad fraud, and—where permitted by your consent—deliver personalized advertisements.
Zero Identity Sale: We never share your account email, password hash, or personal identity with third-party advertisers. You can manage programmatic ad personalization via Google's Ad Settings or through industry opt-out portals (such as EDAA or NAI).

We do not sell, rent, or trade your personal information. We only share data under strict contractual confidentiality with:

Infrastructure & CDN Providers: Global edge routing, computing nodes, and distributed object storage providers operating under Data Processing Agreements (DPAs).
Payment & Cryptocurrency Processors: Required data necessary to execute authorized creator payouts.
Law Enforcement & Public Safety: Competent authorities when compelled by lawful subpoenas, court orders, or to immediately suppress illegal child exploitation material (CSAM).
Corporate Restructuring: In the event of a merger, acquisition, or asset reorganization, with prior notification to registered users.

7. International Data Transfers

wexioStream operates global distributed infrastructure. Your personal data may be processed on servers located outside your country of residence, including outside the European Economic Area (EEA) and the United Kingdom. When transferring data internationally, we employ approved transfer mechanisms such as the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.

8. Data Retention Schedule

Active Accounts & Uploads: Kept while your account remains active. Content deleted upon user request or after account closure is purged from primary storage within thirty (30) days and from offline backup cycles within ninety (90) days.
Earnings & Financial Ledgers: Retained for seven (7) years to satisfy legal accounting, audit, and tax compliance requirements.
Security & Device Diagnostic Logs: Raw network access logs, IP records, and security telemetry are retained for up to ninety (90) days, after which they are purged or aggregated into non-identifiable statistics.

9. Automated Decision-Making & Human Review

We deploy automated algorithmic scoring (utilizing device consistency, playback duration, and network ASN traits) to flag automated bot views, click farms, and fraudulent earnings manipulation.

While automated flags may temporarily freeze payout processing, any significant adverse decision—such as account ban or total revenue forfeiture—is subject to mandatory human review by our Trust & Safety team.
You have the right to contest automated decisions, present evidence of legitimate audience traffic, and request human re-evaluation by contacting [email protected].

Depending on your geographic location, you enjoy the following rights:

Right of Access: Request copies of personal data we maintain about you.
Right to Rectification: Request correction of inaccurate profile data.
Right to Erasure ("Right to Be Forgotten"): Request permanent deletion of your account and personal records, subject to legal financial retention limits.
Right to Restrict Processing: Limit processing during active dispute resolution.
Right to Data Portability: Receive your structured data in a machine-readable JSON format.
Right to Object: Object at any time to processing based on legitimate interests or direct communications.
Right to Withdraw Consent: Revoke previously granted cookie or advertising consent.

To exercise any of these rights, email [email protected]. We process and fulfill verified requests within thirty (30) calendar days.

11. Data Security Measures

We implement multi-layered technical and organizational safeguards:

Encryption in transit via modern TLS 1.3 and strict HSTS policies.
Encryption at rest for databases and media volumes utilizing AES-256.
Principle of least privilege for engineering and support personnel.
Automated rate-limiting, anomaly detection, and continuous vulnerability scans.

12. Protection of Minors

wexioStream is strictly restricted to users aged 18 and older. We never knowingly collect information from minors. If you believe a minor has registered an account or provided personal details, please contact us at [email protected] for immediate account removal.

Questions & Data Requests

Reach out to our Data Protection Office anytime at [email protected] or visit our Contact Page.

Legal & Policies