Last updated 16 October 2026
This page states what Vertly does with personal information, in the CCPA’s own vocabulary, checked against the service’s database schema and its code. It has not yet been reviewed by a lawyer.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We never have. Both of those words have precise meanings under California law, and neither describes anything Vertly does.
So there is no opt-out switch on this page. Building one would mean building a control that turns off something that was never on, and a toggle that does nothing is worse than no toggle. What this page gives you instead is the disclosure, in full, and a real contact route.
The California Consumer Privacy Act names two different things, and a company can avoid one while doing the other. That is why it is worth being exact.
The companies that handle data for us are listed by name in the privacy policy: Supabase, Vercel, Bunny.net, Cloudflare, Stripe, Apple, Google and Resend. Each is engaged as a service provider under a contract that permits it to process only on our instructions, and forbids it from using what it processes for its own purposes. Handing information to a service provider on those terms is not a sale, and the CCPA says so.
We never disclose what you watch to an advertising platform. In the US, unless you opt out, pages on this site load the advertising tags of Meta, Google and TikTok, which tell those platforms a page was viewed or a checkout was started, as the cookie policy sets out. If your browser sends Global Privacy Control, or you choose No thanks under “Cookie settings” at the bottom of any page, we treat it as your request to opt out: the tags are not loaded, and nothing about your visit is reported to any advertising platform. We do not upload customer lists.
We advertise on Meta, Google and Apple. When somebody arrives from one of those ads and then signs up or buys, we report back that the event happened, because otherwise there is no way to tell which advertising works and which is wasted.
That report says a sign-up or a purchase occurred, with the click reference from the ad, the amount, and, to Meta, a hashed form of your email address so it can match the report to its ad. It does not carry your viewing history, what you searched for, or which series you follow. We name it here rather than leave it out, because it is the only outbound flow on this page that a reasonable person might want to look at closely. If it ever becomes more than that, this page changes before the flow does.
Set out in the CCPA’s own categories, for the last twelve months.
| Category | What it is, for us | Sold or shared |
|---|---|---|
| Identifiers | Your email address, your account identifier, your display name and country if you gave them, and the identifier Apple or Google returns if you sign in that way. | No |
| Commercial information | Coin packs and subscriptions bought, your coin and credit balances, every movement of them, and which episodes you have unlocked. | No |
| Internet or other network activity | Episodes started, progressed and finished, where you stopped watching, and IP addresses in short-lived server logs. | No |
Categories the CCPA names that we do not collect at all: biometric information, precise geolocation, professional or employment history, education records, and inferences drawn to build a profile about you. There is no advertising profile behind your viewing.
The CCPA gives you a right to limit how sensitive personal information is used. Almost nothing in that category reaches us. We do not collect government identifiers, precise location, racial or ethnic origin, religious beliefs, health data, sexual orientation, or the contents of your messages. We hold no financial account numbers, because Stripe, Apple and Google take the payment and we never see a card.
The one item that does touch us is your account credentials. We hold them to sign you in and for nothing else, which is a use the right to limit does not reach. There is therefore nothing here for that right to act on either.
Some browsers and extensions send a Global Privacy Control signal, which is a standing request to opt out of sale and sharing. We honour it automatically: the Meta, Google and TikTok tags are not loaded, the advertising cookie is not set, and no sign-up or purchase of yours is reported to an advertising platform. You do not need to do anything else.
We run no financial incentive programme, so there is no scheme here that pays you for your data or charges you for keeping it private.
Email support@vertly.tv from the address on your account and say which of the rights above you are using. One line is enough.
We aim to answer within 30 days. The law allows us 45, and a further 45 where a request is genuinely complex. If we ever need the extension we will tell you before the first period is up, and why.
How we check it is you. We match the request to the email address on the account, and we may ask you to confirm from that address. We will not ask you for identity documents we do not already hold, because collecting more data to answer a privacy request is the wrong direction. If we cannot verify you, we will say so rather than act on a request that might not be yours.
Authorised agents. Somebody may make a request for you if you have given them written permission. We may still ask you to confirm it directly, for the same reason.
These particular rights come from California law and belong to California residents. We answer requests of this kind from anyone, wherever they live. Splitting the answer by geography would be more work than simply doing the right thing once.