Legal
Privacy notice
Operator notice: This page describes the analytics built into NoirStream. The operator must add its legal identity, contact details, hosting providers, lawful basis, and jurisdiction-specific privacy rights before public launch.
Information NoirStream records
When you enter and use NoirStream outside Private Session, the server records your IP address, approximate country, a rotating IP-derived pseudonymous identifier, a random browser identifier, an account identifier when signed in, a random session identifier, the active profile identifier and chosen nickname, timestamps, searches and selected filters, result counts, videos displayed and their positions, video opens, favorites and unfavorites, “More like this” and “Not for me” feedback, Recently Viewed use and deletion actions, provider-link opens, approximate time that the NoirStream player window remains open, and reported API, thumbnail, empty-result, and embed-loading failures.
NoirStream also records a coarse device class, browser family, and referrer hostname. It does not use GPS, canvas fingerprinting, cross-site advertising identifiers, or the complete browser user-agent string in its analytics database. Player-window time and a “meaningful open” of at least 30 seconds are interaction estimates; the embedded provider does not give NoirStream exact watch progress or completion data.
Why this information is used
The operator uses these records to authenticate registered accounts, reconnect a guest browser to temporary viewing profiles, isolate each profile's state, rank videos that are popular within a country during a rolling seven-day period, personalize general discovery from that profile's searches, favorites, history, and explicit feedback, improve search, identify catalog gaps, measure the discovery funnel and retention, diagnose service failures, prevent abuse, and operate the service.
IP protection and retention
Raw IP addresses are encrypted with AES-256-GCM and stored in a table separate from searches and viewing events. Analytics rows retain a pseudonymous IP-derived identifier that rotates monthly plus the random anonymous-browser identifier. Raw IP records and exact analytics search rows are configured for 30-day retention, granular interaction events for 90 days, country-level daily aggregates for 365 days, inactive guest profiles for 365 days, and Recently Viewed for 90 days or 200 unique videos per profile. Registered accounts remain until the user deletes the account or the operator acts under an applicable policy. The operator can shorten analytics periods, purge expired records, or delete stored analytics from the private dashboard.
Accounts, browser storage, and cookies
NoirStream keeps a local age-confirmation flag, a local profile-state cache, filter-panel state, and a session-scoped discovery seed in browser storage. For registered accounts, the private server database stores the account email address, a timestamp recording the adult-age attestation, and a salted one-way password hash. Passwords are never stored in browser storage or returned by the API. A first-party HttpOnly, SameSite=Lax authentication cookie normally lasts 30 days, is marked Secure over HTTPS, and contains a random session token rather than the password. Changing the password closes other active sessions.
A separate signed browser cookie supports guest profiles and analytics attribution. Without authentication, recognition remains browser-specific. Registering from a guest session claims the current browser profiles into the new account; later sign-ins make those profiles available on other devices. NoirStream does not join accounts or guest identities by IP address.
Deleting a registered account removes its email, password hash, authentication sessions, profiles, favorites, history, recent searches, feedback, and exact event/search rows linked to the account or its profile identifiers. Previously accumulated country-level daily aggregate counts may remain because they no longer contain the account or profile identifier.
Default discovery filtering
General browsing, recommendations, category cards, and default predictive suggestions suppress content when provider-supplied titles or keywords explicitly label it Black, ebony, BBC, interracial, or mixed race. This rule is enforced by the server for every profile and is not presented as a profile setting. A deliberate matching search or intentional related action can return matching results. Classification uses text metadata only; NoirStream does not analyze faces, skin tone, thumbnails, or video imagery. Provider metadata can be incomplete or inaccurate, so the rule can occasionally miss or hide a video incorrectly.
Deleting a profile permanently clears that profile’s current favorites, Recently Viewed list, recent-search cache, settings, and recommendation feedback. Previously recorded analytics remain only until the configured analytics retention period or an administrator purge.
Private Session
When Private Session is active, NoirStream does not send content analytics, add videos to Recently Viewed, save recent searches, or use stored personalization signals in the live ranking request. “Not for me” is temporary for that browser session, “More like this” can open an immediate related search without teaching the profile, and favorites cannot be changed until Private Session ends. Basic requests still use the applicable account or guest profile and continue applying the server-wide discovery rule.
Third-party video provider
Search requests are sent through this website’s server to Eporner. When you play an embedded video or open the provider website, that provider may receive technical information and apply its own privacy practices.
Optional title translation
If the operator enables English title translation, provider-supplied video titles—not your saved favorites or browser-storage data—are sent from the NoirStream server to the configured DeepL API. Update this notice and the processor agreement before public use.
Approximate location
Country detection is performed automatically and locally from the visitor IP or accepted from a country header supplied by an explicitly trusted reverse proxy. NoirStream does not request precise device location or expose a manual region override. Discovery and regional analytics both use the detected country.
Backups and access
The private database is outside the public website directory. Automatic backups are encrypted and retained in a private server directory. Analytics reports require administrator authentication and do not display raw IP addresses or password hashes.
Contact
Replace this section with the operator’s privacy email, mailing address, request process, and applicable privacy-rights instructions before deployment.