1. Scope
When this policy says “we,” “us,” or “our,” it means ONE PIXEL TECHNOLOGY LIMITED, which operates the Vireos-branded Service at https://vireos.net. The policy covers processing tied to the Service, including support tickets, marketing preferences, and security logs.
If you need the formal registered name and postal address of the data controller for your region, write to legal@vireos.net. General privacy questions may go to support@vireos.net.
Dispute-resolution, governing law, and court terms (including Hong Kong jurisdiction where our Terms provide) apply alongside this policy—see our Terms of Use.
2. Categories of information
We receive both information you actively submit and information generated automatically when you interact with the Service.
2.1 Information you provide
Examples include account registration fields, customer-support conversations, survey answers, and uploads you attach to your Profile. A typical Profile contains identifiers such as display name, username, birth date, and email, plus optional biography or media you choose to add.
You can review many Profile fields inside the product. Some identifiers (for example legal name, birth date, or login email) may require staff assistance to change for fraud-prevention reasons. Please avoid publishing payment card numbers, government ID numbers, private phone numbers, or other high-risk data in public areas of the Service. Sensitive categories (health, religion, etc.) should only appear if you knowingly choose to make them public to other viewers.
2.2 Information collected automatically
Usage telemetry. We log interactions such as titles viewed, watch time, feature taps, and diagnostic events so we can measure performance and fix defects.
Device and network signals. Depending on permissions, we may read coarse location, language, time zone, IP address, operating system build, hardware identifiers, and referral URLs. Camera or photo-library access is requested only when you initiate an upload.
Commerce metadata. We store purchase timestamps, SKU or coin packs, currency, and masked payment descriptors. Full card numbers are handled exclusively by certified payment partners.
Advertising partners. Third-party ad vendors may set cookies or read device advertising IDs when they deliver campaigns on our behalf. Their use of data is governed by their own notices.
2.3 Minors
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a minor has created an account, contact support@vireos.net so we can investigate and delete inappropriate records.
3. Purposes of processing
We process personal information to:
- Operate, authenticate, and personalize the Service;
- Complete purchases, deliver entitlements, and send transactional receipts;
- Detect abuse, investigate security incidents, and enforce our agreements;
- Communicate operational notices (billing, safety alerts, policy updates) that you cannot disable while you remain a customer;
- Send optional newsletters or promotions when you have opted in, and honor opt-outs;
- Measure product quality, run experiments, and build analytics models;
- Deliver or measure advertising, including using GAID/IDFA where consent and platform rules allow;
- Provide customer care through email, chat, or phone channels you initiate.
If we begin a materially new processing activity, we will describe it in-product, in this policy, or through direct notice where legally required before relying on previously collected data.
4. Legal bases (EEA/UK visitors)
For visitors located in the European Economic Area or United Kingdom, we rely on one or more of the following, depending on the scenario: (a) performance of a contract with you; (b) our legitimate interests (for example securing the platform or improving features) where those interests are not overridden by your rights; (c) consent where we expressly request it; or (d) compliance with a legal obligation.
5. Marketing and interest-based ads
Inside the Service you may see third-party promotions, including rewarded formats. Those partners receive limited campaign reporting (such as impressions or conversions) according to their contracts with us.
We also run acquisition campaigns on external sites. To measure them we may deploy pixels, cookies, or hashed identifiers and share aggregated statistics with vendors such as Google Ads or analytics providers. Industry programs like the NAI and the DAA offer browser-level opt-outs for participating networks.
There is no consistent industry response to “Do Not Track” browser flags; we therefore do not treat those signals as an opt-out on their own.
You may opt out of certain third-party ad personalization by adjusting in-product settings, contacting support@vireos.net, or using the industry tools linked above. Transactional emails may continue even if you opt out of marketing.
6. Retention
We keep personal information only as long as needed for the purposes above, unless a longer period is required for tax, payment, anti-fraud, or regulatory reasons. After you delete an account we may retain minimal records to demonstrate compliance or resolve disputes.
7. Sharing and onward transfers
We disclose information only on a need-to-know basis: (i) with vendors who host infrastructure, transcode video, send email, or analyze telemetry under confidentiality terms; (ii) to payment processors and fraud-screening services; (iii) when you direct us to share (for example public Profile fields); (iv) to professional advisers or acquirers in a merger or asset sale; or (v) to regulators, courts, or law enforcement when we believe in good faith that disclosure is legally required or necessary to protect people’s safety.
8. Cross-border processing
We may process or store information in countries outside your own, including the United States. Where European law requires safeguards for transfers that are not covered by an adequacy decision, we implement mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent UK addenda.
9. External sites
Links inside the Service may lead to merchants, social networks, or advertisers we do not operate. Their privacy statements—not this document—control how they handle data collected on their pages.
10. Security
We combine administrative, technical, and physical controls (including TLS for data in transit and access reviews) designed to reduce risk. No online platform can be perfectly secure, so you should protect your password, enable multi-factor authentication when offered, and avoid reusing credentials from other sites.
11. Updates to this policy
We may revise this Privacy Policy periodically. Material changes will be highlighted through the Service or email before they take effect when the law requires. Continued use after the effective date constitutes acceptance of the revised policy unless applicable law says otherwise.
12. Your rights and supervisory complaints
Depending on where you live, you may have rights to access, rectify, delete, restrict, export, or object to certain processing of your personal information, and to withdraw consent where processing was consent-based. Email legal@vireos.net with the subject “Privacy Rights,” describe the request, and we will verify your identity before responding.
If you are located in Hong Kong, you may have rights under the Personal Data (Privacy) Ordinance (Cap. 486). You may also contact the Office of the Privacy Commissioner for Personal Data (PCPD) if you have questions about our practices after you have first raised them with us.
If you reside in the EEA, UK, or Switzerland and believe we have infringed applicable privacy law, you may also lodge a complaint with the supervisory authority responsible for your habitual residence, place of work, or place of the alleged infringement.
13. Contact
For day-to-day privacy questions: support@vireos.net
For formal data-protection correspondence: legal@vireos.net