Effective date: October 31, 2026
R18 Entertainment LLC, operating the OFOY brand, is responsible for the personal information described in this Privacy Policy. This policy covers the public website, checkout process, customer portal, licence service, installation coordination, and qualifying private issue forms. It does not govern the independent video platforms operated by software customers.
1. Information we collect
Depending on how you interact with the site, we may collect:
- the email address you submit to Join Waitlist, sent to our support team to handle your request for software availability updates; this does not create a customer account or purchase;
- account information such as name, email address, password hash, account status, and verification records;
- order information such as product, price, currency, order number, payment status, Stripe customer and transaction identifiers, discounts, limited billing details supplied by the payment service, and transaction events; historical orders may retain the provider references needed for accounting and replay prevention;
- licence information such as licence key hash, encrypted licence record, authorized domain, product version, activation status, installation identifier, validation timestamps, IP address, and user agent;
- download records, including the release downloaded, date, IP address, and user agent;
- installation information such as domain, hosting environment details, scheduling status, credentials the customer chooses to provide for the work, and technical notes;
- issue-form messages, attachments, replies, and related account or order references;
- website and security logs, including request time, page, IP address, browser information, failed login attempts, and suspected abuse signals.
2. Payment-card information
When OFOY checkout is configured and enabled, card information is entered in Stripe-hosted payment fields over HTTPS. R18 Entertainment LLC does not receive or store complete card numbers or card security codes in the customer portal. Stripe may provide signed transaction status, customer and payment identifiers, limited billing details, discounts, dispute information, and fraud signals under its own privacy policy. This description does not claim that Stripe has approved a customer's independent business or that R18 Entertainment LLC has obtained a certification beyond the obligations applicable to its integration.
3. Why we use information
We use information to present the website; process and verify orders; create and secure customer accounts; deliver purchased releases; issue, activate, and validate one-domain licences; coordinate paid installations; respond to eligible private issues; maintain audit and security records; prevent fraud, piracy, abuse, and chargebacks; comply with legal obligations; enforce agreements; and improve the reliability of the portal and licensing service.
4. Legal grounds
Depending on the jurisdiction and context, processing may be necessary to perform a contract, take steps requested before a contract, comply with law, protect legitimate interests in security and fraud prevention, establish or defend legal claims, or act with consent where consent is required.
5. Cookies and sessions
The public site may use limited functional storage. The waitlist, customer and administrator forms use essential session cookies to protect submissions and, where applicable, authenticate users and maintain account security. The waitlist also keeps keyed email and IP-address hashes with submission timestamps to limit abuse and avoid duplicate notifications. We do not need advertising cookies to provide the purchase and licence portal. If analytics or additional cookies are introduced, this policy and any required consent mechanism should be updated before use.
6. When information is shared
Information may be shared with service providers that support payment processing, hosting, email delivery, security, backups, professional advice, or installation work; with financial institutions and payment networks; with authorities where legally required; in connection with a business transfer; or with other parties when necessary to investigate fraud, piracy, security incidents, or legal claims. Providers receive only the information reasonably necessary for their function and are subject to their own obligations.
7. International processing
Service providers and customers may be located in different jurisdictions, and information may therefore be processed under different laws. We use reasonable contractual, technical, and organizational measures appropriate to the service and information involved.
8. Retention
We retain information for as long as reasonably necessary for active accounts, licence validation, order records, tax and accounting obligations, fraud prevention, dispute evidence, legal claims, backups, and enforcement. Some records may remain after account closure where retention is required or reasonably necessary. Credentials provided solely for an installation should be removed or rendered inaccessible when no longer needed for the agreed work.
9. Security
We use measures appropriate to the portal, including password hashing, access controls, session protection, encrypted storage for recoverable licence records, prepared database queries, CSRF protection, audit logging, and restricted private files. No online system can guarantee absolute security. Customers must protect their credentials and promptly report suspected account compromise through the qualifying private form.
10. Your choices and rights
Subject to applicable law, you may request access, correction, or deletion of certain personal information; object to or restrict certain processing; withdraw consent where processing depends on consent; or request information about service providers and international transfers. Some information cannot be deleted while needed for contract performance, licence enforcement, tax, fraud prevention, dispute resolution, or legal obligations.
11. Customer-operated video platforms
A business using OFOY software is independently responsible for the privacy practices of its own platform, subscribers, content, cookies, processors, analytics, and integrations. R18 Entertainment LLC does not become the operator or controller of a customer's video business solely by licensing or installing the Software.
12. Children's information
ohfuckohyeah.com is a business-to-business software sales site and is not directed to children. We do not knowingly invite children to purchase software or create customer accounts.
13. Changes and contact
We may update this policy prospectively and will post the current effective date. Privacy, legal, customer-service, and suspected account-compromise enquiries may be sent to the monitored address support@ohfuckohyeah.com. Existing customers may also use the qualifying private issue form. sales@ohfuckohyeah.com sends automated transactional messages and is not monitored; do not reply to it.