Privacy Policy

1. What it is for. This page describes what TheVRHouse records about you when you use this website, why we record it, how long we keep it, who else handles it, and what you can ask us to do with it. It is written to be read, not to be survived.
2. Who is responsible for it. This website and the store on it are run by the operator of this website, a limited liability company formed in the State of Wyoming, United States (“we”, “us”, “our”). We decide what is collected here and why, and we are the party you deal with about any of it.
3. Adults only. Use of this website is expressly and strictly limited to people who are at least eighteen (18) years old, or the age of majority where they live if that is higher. Anyone under that age is forbidden from using it, and we do not knowingly seek or collect anything from them. See People under 18.
4. What it is read with. This page is read together with our terms. Where a report about content is involved, the content removal and copyright pages describe what happens to what you send us.

You can browse the catalog, search it, and watch trailers without an account and without telling us anything. What that costs you, stated exactly:

1. We run no analytics on this website. There is no analytics service, no advertising tag, no tag manager, no tracking pixel and no session recorder on any page of this store. We do not measure which scenes are popular by watching you, and we do not build a profile of what you like. This is not a setting we leave switched off — there is no such code on the page to switch on.
2. What a web server unavoidably sees. To send you a page at all, our server has to receive your request: the address you asked for, your browser's IP address and the details it announces about itself. That is how the web works and no website can avoid it.
3. What we then keep, which is less. Our application logs are built to exclude the IP address, and the exclusion is enforced in the logger itself rather than left to whoever writes the next log line. We do not keep a record of which pages you looked at, in what order, or for how long — there is nothing that writes one.
4. The network in front of us. This site sits behind a network provider that handles DNS, encryption and attack mitigation before a request reaches us. It necessarily processes your connection, including your IP address, and keeps its own operational records of that under its own policy. See Who else handles it.
5. One cookie, before anything else. Confirming your age sets a cookie so you are not asked again on every page. That is the only thing stored on your device before you sign in. See Cookies.

This store sets three cookies. All three are strictly necessary for something you asked for, which is why there is no consent banner on this site — there is nothing here to consent to that you have not already asked for by confirming your age or signing in.

1. kfp_age_ok. Remembers that you confirmed you are an adult, so the door is not put in front of you on every page. It holds a marker and nothing else — no identifier, nothing about you — and it lasts 30 days.
2. kfp_sid. Keeps you signed in between visits. It is httpOnly, so no script in your browser can read it, and it is sent only to this site's own session endpoint rather than with every request. It expires, and it is replaced each time it is used.
3. kfp_at. The short-lived token that authorises each action while you are signed in. Also httpOnly, and scoped so it is sent only to this site's own gateway. It expires in minutes and is renewed silently.

There are no analytics cookies, no advertising cookies and no third-party cookies. Nothing else is written to your device: this store keeps nothing in local storage.

You can clear these at any time in your browser. Clearing them signs you out and asks your age again. Nothing you own is lost — your purchases and your balance live in your account, not on your device.

1. What we ask for. An email address and a password. That is the whole registration. We do not ask for your name, a username, a date of birth, a postal address or a phone number, and there is nowhere in this store to add them.
2. What we do with the address. It identifies the account, it is how you sign in, and it is how we reach you about your account — a confirmation link, a password reset, or a problem with something you bought.
3. Your password is not stored. What we store is a one-way Argon2id hash of it. We cannot read your password, we cannot recover it for you, and we will never ask you for it. A reset replaces the hash.
4. Confirming the address. We email a single-use link when you register. The account stays inactive until you open it, and the link expires on its own.
5. What a session records. Signing in creates a session record so you stay signed in. It holds a hash of the session token, when it was created and when it expires — and deliberately nothing else. There is no IP address in it and no device or browser fingerprint. The one place a keyed hash of your network and device does live, for thirty days and for a single purpose, is the next clause.
6. Recognising an account opened to get around a suspension. When you create an account, sign in, or open a card top-up — and at no other moment — we take your IP address, the name your browser gives itself, and a fingerprint your browser computes from its own characteristics on that screen, and we store a keyed hash of each: a value that cannot be turned back into the address or the device without a key that never leaves our server. These hashes exist for one purpose. When an account is suspended for payment fraud, they let us notice a new account opened from the same network or the same device, and switch card payments off for it. Nothing else changes for that account, and nobody is told. They are deleted thirty days after we last see them, they are never joined to what you watch or buy, and they are never shared. Our legal basis is our legitimate interest in preventing payment fraud; the fingerprint is computed only on those three screens, as a security measure, and is not used to follow you around the site.
7. There is nothing here for anyone else to see. The store has no public profiles, no comments, no messages between users and no social features of any kind. What you buy, what you save and what you watch is not shown to anyone, because there is nowhere for it to be shown.

1. What we record. Which scenes you bought and when; every movement in and out of your balance, with what caused it; and how many of a scene's downloads you have used. A purchase is permanent, so the record of it has to be.
2. This store never sees a card. Scenes are paid for from your balance. Topping it up sends you to a payment page run by an outside provider, on their own site, under their own privacy policy — you enter your payment details there. No card number, bank detail or wallet address reaches this store, and none is stored here. What comes back to us is that an amount was paid against a reference; a person matches it to your account by hand.
3. What you save. The scenes you like, save for later or put in the cart are recorded against your account so they are there when you come back. They are private to you. Nothing you save is shown to anyone else or used to advertise anything to you.
4. We do not email you about a purchase. There is no receipt email and no top-up email. Your purchases, your balance and your downloads are visible in your account when you sign in, and that is the only place they appear.

1. What the form asks for. Our contact form asks for an email address, a subject line and your message. You do not need an account to use it.
2. It is not stored in the store. Nothing you send through that form is written to this store's database. It is delivered as an email to a mailbox we read, and it lives there like any other correspondence — which means we can find it later to answer you, and it is deleted when it is of no further use.
3. What you choose to put in it. Please send what is needed to answer you and no more. If you are reporting content, the content removal page says exactly what is useful — and be aware that a report about unlawful material may be passed to an authority, which is set out in When we hand something over.
4. A limit on the form, and what it costs you. The form accepts a few submissions per sender in a short window, so that nobody can bury the mailbox. That counting is transient and nothing about it is written down.

Everything above is used for these things, and we do not find new uses for it quietly:

• to run your account and keep you signed in;
• to give you what you bought — playback, downloads, and an honest count of how many downloads are left;
• to keep your balance correct, and to work out what happened when it is not;
• to answer you when you write to us;
• to keep the store working and safe: to stop abuse, to limit automated traffic, and to investigate fraud or a payment we cannot rely on;
• to meet a legal obligation, or to establish, exercise or defend a legal claim.

And these are the things we do not do:

• We do not sell your information. We do not rent it, and we do not trade it.
• We do not build a profile of what you like in order to advertise to you. There are no adverts on this store and no advertiser receives anything about you.
• We do not combine what we hold about you with other buyers' information and pass the result to anyone for marketing.
• We do not run a marketing list. The only email we send is about your account or something you did. If we ever want to send you store news, we will ask you first and send it only if you say yes.

Running a store means using outside providers. Each of these handles what it needs to do its job, on our instructions, and nothing beyond that:

1. Video delivery. When you play a scene or a trailer, your browser fetches the video from our content delivery network using a signed link that expires. That network therefore sees your IP address and which file you are streaming. It does not learn who you are: the link carries no account and no name.
2. Images, which work differently. The pictures on these pages are fetched by our own server and served to you from this domain. The delivery network does not see your browser for those — only for video.
3. Email. The four emails this store can send go out through an email provider, which processes the address and the message in order to deliver it.
4. The network in front of the site. A network provider handles DNS, encryption and protection against attacks. It sees the connections it routes, including IP addresses, and keeps its own operational records.
5. Top-up payments. Handled entirely by an outside payment provider on its own site, under its own privacy policy. See Buying, your balance and your downloads.
6. Headset apps are not ours. Opening a scene in DeoVR or HereSphere hands it to an application on your own device that we do not run and do not control. What that application does with anything is covered by its own terms, not by this page.

If you want to know which providers we currently use for any of the above, ask through the contact form and we will tell you. We name them on request rather than in this text because a provider named here becomes wrong the day it changes, and a privacy page that is quietly out of date is worse than one that says where to ask.

Apart from the providers above, we disclose what we hold in these situations only:

• where the law requires it, including a valid order from a court or an authority;
• to enforce our terms or any other agreement with you;
• to protect the rights, property or safety of us, of a buyer, or of anyone else — including reporting to the police or another authority;
• to establish, exercise or defend a legal claim;
• to act on a report about content. Where somebody reports material as unlawful, we may pass what we hold to the relevant authority and to anyone whose rights are involved, without notice to the person concerned.

If the business is ever sold or transferred, what we hold moves with it, and whoever takes it on is bound by this page until they publish their own and tell you.

1. Your account. For as long as the account exists. See What you can ask us to do for closing it.
2. Purchases and balance movements. Kept as a permanent record, and kept even if the account goes. They are money records: a business has to be able to account for what it took and what it gave back, and a purchase that grants permanent access has to be provable for as long as that access lasts. The history is never rewritten — a correction is posted as a new entry rather than as an edit of an old one.
3. Sessions. A session expires on its own and stops working the moment it does. Signing out ends it immediately. The session record itself keeps no history of where you signed in from.
4. Fraud signals. The keyed hashes described under Your account are deleted thirty days after we last see them, automatically, every day. When an account is suspended, a copy of its hashes is kept for 180 days so that a replacement account can be recognised; that copy expires on its own, and is removed at once if the suspension is lifted.
5. Email you send us. For as long as we would keep any correspondence — long enough to answer you, to handle what follows from it, and to show what we did about a report. Then it is deleted.
6. Cookies. The durations are in Cookies, and you can clear them yourself at any time.
7. Traffic records. There are none to keep. See Visiting without an account.

These are offered to everyone who uses this store, wherever you live, and we do not ask you to prove that a particular law entitles you to them:

• ask what we hold about you, and get a copy of it;
• have something corrected if it is wrong;
• have your account closed, and everything we are able to delete removed with it;
• object to something we are doing with it, and have us stop where stopping is possible;
• ask us anything about this page and get an answer from a person.

Where the law where you live gives you more than the above, that law applies and this page does not cut it down. Tell us what you are asking for and we will deal with it.

1. In transit. Everything between your browser and this site travels encrypted.
2. At rest. Passwords are stored as one-way Argon2id hashes. Session tokens are stored as keyed hashes — the token itself is never in our database, and the key is held outside it, so a copy of the database alone cannot be matched back to anybody's session. The cookies that keep you signed in cannot be read by any script in your browser and are scoped so they are not sent with every request.
3. Who can reach it. Access to what we hold is limited to the people who run the store and need it to do so.
4. Your part of it. If you have a password that reaches your account, keep it to yourself and do not reuse it anywhere else. Anyone who has it can reach your account, your balance and everything you bought. Tell us immediately if you think somebody has.
5. The limit, stated plainly. We use commercially reasonable technical and organisational safeguards, but transmission over the internet is never completely secure and no one can guarantee it. We cannot warrant the security of anything you send us, and you send it at your own risk.

1. They may not be here at all. This website is for adults. Use of it is strictly limited to people aged eighteen (18) or over, or the age of majority where they live if that is higher. Anyone under that age is forbidden from using it.
2. We do not collect anything from them knowingly. We do not seek or knowingly collect information from anyone under that age. If we learn that an account belongs to someone under it, we close the account and delete what we are able to delete.
3. Tell us if you know of one. If you believe a minor has an account here, or that a minor's information has reached us, write through our contact form and we will act on it.
4. The door is a statement, not a check. Confirming your age when you arrive is something you tell us and we rely on it. It is not an identity check and we do not present it as one — see the terms. Where a jurisdiction requires a stronger check, we may introduce one.
5. Everyone in our productions is an adult. Every performer in every scene in this catalog was over eighteen at the time of production, and the records that prove it are held as our record-keeping statement describes. Those records are the producer's own compliance files. They are not part of this website and nothing in them is collected from you.

1. When this page changes. We change it when what we do changes, and the date at the top changes with it. That date is the version in force — it is what anyone can point to when asking what was true at a given moment, which is why it is a stated date rather than one this site works out for itself.
2. Where it applies. This page covers this website and the store on it. It does not cover another company's site you reach from here, or an application on your own device — those have their own policies, and Who else handles it says which parts of your visit reach them.
3. How to reach us. Our contact form is the channel for everything on this page — questions, requests under What you can ask us to do, and complaints about how we handled either. It reaches a mailbox a person reads, and it is the only channel this store has.