Privacy Policy
About NostalgiaNow and your privacy
NostalgiaNow is an independently operated online video discovery, restoration and community platform. We are committed to protecting personal information and explaining how it is collected, used, stored and protected. NostalgiaNow determines the purposes and methods of processing personal information through the service. If you have questions about our privacy practices, the operation of the platform or your information and rights, please contact NostalgiaNow through the designated privacy contact channel, which will be published before the policy takes effect. We will provide relevant information in response to legitimate enquiries, subject to applicable legal requirements, appropriate identity checks and other people’s privacy and security. Any controller identity, contact or supervisory-authority details that the law requires to appear in this notice must still be provided before publication.
Information we collect
Depending on your activity, we may process usernames, permanent account IDs, names, email addresses, private dates of birth, account registration and verification status, authentication and recovery events, IP addresses and browser/security records, video progress, watch history, favourites, playlists, restoration requests, votes, chat content, reports, appeals, preferences and administrative actions. Some features remain planned.
Date of birth, eligibility and profile visibility
Members must be at least 16, subject to any additional applicable eligibility rules. Date of birth is private by default and access to the underlying record is restricted to specifically authorised staff for legitimate purposes. When public profiles become available, members may choose to show no birth information, day and month only, or, for adults aged 18 or over, their full date of birth. Public visibility is entirely optional, can be withdrawn, and does not alter restricted administrative access. Future controls must enforce age protections on the server and assess whether full DOB retention remains necessary.
Purposes and lawful bases
Information is used to create and protect accounts, provide requested viewing features, administer community activities, moderate misconduct, handle support and privacy requests, maintain justified security and accountability records, comply with law and send optional communications where consented to. The lawful basis for each processing purpose (which may include contractual necessity, legal obligation, legitimate interests or consent) must be documented before publication. Accepting website terms is not consent to every form of processing.
Viewing history, favourites and preferences
Signed-in members may have video progress, Continue Watching, Watch History, favourites, playlists and site preferences associated with their permanent account ID. Personal viewing history is intended to remain until the member clears it or the account is deleted, unless a distinct lawful retention requirement applies. Ordinary private history is not displayed on public profiles.
Public profiles, restoration requests and votes
Profiles will be private by default. Future profile visibility settings are member-controlled; email and security information are never ordinary public profile fields. Members may choose whether their usernames appear publicly alongside votes when a poll allows attribution. Legitimately authorised staff may access underlying vote records for integrity and anti-abuse investigations. Restoration requests and other public contributions may be visible and moderated as described in the Community Guidelines.
Chat and related communications
The intended standard retention period for chat messages, edits, removals, reports and related moderation events is 12 months from the relevant event. Removing a message from public view does not necessarily remove it from restricted internal records immediately. A documented investigation or legal duty may justify a limited exception with periodic review. The automatic 12-month deletion system must be built and verified before this is presented as an operational guarantee.
Username, email and account-change history
NostalgiaNow intends to record changes to usernames, email addresses and other account details against permanent account IDs, including relevant former values, timestamps, responsible actors and administrative reasons. Username reuse must not merge unrelated users. Password changes and resets may be logged as events, but passwords, temporary credentials and password hashes must never be copied into audit records. Long-term or permanent identifiable records remain subject to a documented necessity and retention assessment.
Staff audit records and investigations
Significant staff actions affecting users, videos, permissions, moderation and platform configuration are intended to be recorded with staff IDs, affected IDs, timestamps, changed fields and reasons. Sensitive logs and investigation evidence are restricted to specifically authorised staff; access should itself be logged where appropriate. Indefinite retention of identifiable details must not occur without a lawful purpose, minimisation and review, even where durable accountability records are desired.
Cookies, YouTube and external services
Strictly necessary account and security technology may be used where lawful. Optional tracking must be controlled by appropriate consent. Loading embedded YouTube videos can transmit technical information to Google and may involve cookies or similar technologies. YouTube use is subject to applicable Google/YouTube policies; actual embed behaviour and consent requirements must be audited. More detail belongs in the Cookies Policy.
Sharing, service providers and international transfers
Information should be shared only when necessary to host and operate the service, deliver account emails, embed media, secure the platform, handle legal obligations or respond to legitimate official requests. Potential recipients include hosting, email, security and YouTube/Google providers. NostalgiaNow does not intend to sell members' personal information. Actual service providers, recipient locations, transfer safeguards and processing arrangements must be verified before publishing.
Security, administrator access and recovery
NostalgiaNow aims to apply appropriate technical safeguards, permission-based access, audit controls and secure authentication. Planned staff controls include mandatory MFA, custom access roles, additional approval for critical actions and authorised access to investigations. Account recovery may use expiring generated temporary passwords followed by mandatory replacement. These protections must not be described as deployed until independently tested.
Inactive accounts and notice schedule
After 12 consecutive months without a successful member sign-in, an eligible account may enter an inactivity review and deletion process. The intended schedule is reminders at 12 months, two weeks later and four weeks later, with deletion considered at approximately six weeks from the first notice. Signing in cancels the routine process. Members should have an appropriate chance to export their data. Investigation holds, delivery issues and other lawful exceptions require special handling; automation must be tested before activation.
Account deletion and justified exceptions
Members may request account deletion without a mandatory recovery waiting period. Eligible information will be erased or anonymised as soon as reasonably practical, subject to lawful, limited exceptions for investigations, legal duties or claims. Account closure does not automatically justify keeping all associated personal data. Remaining data must have a stated purpose, restricted access and proportionate retention.
Personal data rights and full exports
Subject to applicable law, individuals may request access, correction, erasure and other available data-protection rights, object to certain processing or withdraw consent where relevant. A future My Account → Privacy & Data dashboard is intended to offer export of all eligible personal data, including profile details, viewing history, playlists, votes and community records. Other people's protected information may require redaction. Until self-service tools launch, an appropriate manual privacy contact must be available.
Promotional emails and content choices
Promotional emails will require a separate affirmative opt-in, unchecked by default, and may be stopped at any time. Essential security and account notices are separate. Members will also be able to opt in or out of eligible public-submission use in NostalgiaNow promotion; the default is off. Withdrawing optional permission prevents new promotional uses subject to applicable rights and practical limits concerning material already lawfully distributed.
Ordinary security logs and backups
The intended retention for ordinary IP-address and security logs is 12 months, distinct from justified investigation records. Rolling backups are intended to expire after 30 days, but the actual hosting provider schedule and any restore copies must be confirmed before making this a binding promise. Backups require access controls and procedures that prevent deleted data being improperly restored to active use.
Breaches, complaints and policy changes
NostalgiaNow will investigate relevant data breaches and meet applicable notification duties. Members can raise privacy concerns through the published contact route and may complain to the competent supervisory authority where applicable. Material changes to this Policy will be notified appropriately; renewed consent will be obtained for consent-dependent processing where required. Mandatory controller identity, legal contact and regulatory disclosures must be completed before this policy takes effect.