Privacy Policy

1. Introduction

Welcome to Secret Mens Business (“SMB”, “we”, “our”, or “us”), accessible via https://hni.hippos.ltd, https://smb.hippos.ltd, and https://staging.hippos.ltd. We respect your privacy and are committed to protecting the personal data of our creators, subscribers, viewers, and guest visitors.

This Privacy Policy describes how we collect, store, process, and protect your information when you access our short-form video streaming service, creator tools, digital tipping features, and web application interfaces.

2. Information We Collect

• Account & Identity Data: When you register or sign in via email, Google OAuth, TikTok, or Facebook, we collect your verified email address, display name, profile avatar, and unique Clerk authentication identifier.
• Creator Content & Media: Videos, captions, sound selections, shoppable hotspots, tags, and thumbnails that creators upload for publication on the platform.
• Interactions & Virtual Wallet: Likes, follows, comments, bookmarks, tips, and credit ledger balance transactions stored in our double-entry accounting ledger.
• Technical & Device Data: IP address, browser user-agent, operating system, and Cloudflare edge connection attributes for CSAM safety, anti-bot filtering, and stream performance optimization.

3. On-Device Interest Graph & Privacy Protection

When guest visitors browse the feed, your session progress and interaction preferences remain local until you choose to authenticate. Upon sign-in, your local interest vectors are merged securely into your account profile.

4. How We Use Your Information

• To transcode, host, and deliver low-latency adaptive short-form video streaming via Cloudflare Stream and edge CDNs.
• To maintain your creator profile, subscriber feeds, notifications, and direct messaging channels.
• To process virtual credit transactions, creator tips, digital asset unlocks, and creator payout ledgers.
• To protect the platform against fraud, bot abuse, spam, and unlawful content via Cloudflare Turnstile and CSAM security gates.

5. Third-Party Infrastructure

We rely on audited infrastructure partners to power Secret Mens Business:

• Cloudflare Inc.: Global Edge CDN, Serverless SSR Workers, D1 Databases, R2 Object Storage, and Analytics Engine.
• Clerk Inc.: Enterprise identity management, multi-factor authentication, and OAuth social sign-in.
• Wasabi Technologies: Secure staging media storage for creator video processing.

6. Cookies & Local Storage

We use first-party, secure cookies and browser storage strictly required for application functionality:

• hni_session: Encrypted, HttpOnly authentication token issued upon sign-in.
• __session: Clerk client session token for seamless multi-subdomain authentication across hippos.ltd.
• astryx_theme: Remembers your dark / light theme preference.
• IndexedDB (interest_graph): Stores your on-device content vector affinities.

7. Retention & Security

We enforce transport-layer security (TLS 1.3 / HTTPS), encrypted object storage, and strict least-privilege database access policies. Account data is retained for the active lifecycle of your account. If you choose to delete your account, your published videos, comments, and personal identifiers are permanently purged or anonymized.

8. Your Privacy Rights

Depending on your location (including under GDPR in Europe and CCPA/CPRA in California), you have rights regarding your personal information:

• Right of Access & Portability: Request a machine-readable export of your profile, media uploads, and credit ledger history.
• Right to Rectification: Update or correct your profile data at any time via Settings.
• Right to Erasure (“Right to be Forgotten”): Delete your account and associated personal data.
• Right to Opt-Out: Reset your on-device interest graph vectors directly in Settings.

9. Children's Privacy

Secret Mens Business is not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately to have the account removed.

10. Contact Us

If you have questions, privacy requests, or data deletion inquiries regarding Secret Mens Business, please contact our Data Protection Officer: