Effective date: August 4, 2026
R18 Entertainment, operating the OhFuckOhYeah brand from Ontario, Canada, is responsible for the personal information described in this Privacy Policy. This policy covers the public website, checkout process, customer portal, licence service, installation coordination, and qualifying private issue forms. It does not govern the independent video platforms operated by software customers.
1. Information we collect
Depending on how you interact with the site, we may collect:
- account information such as name, email address, password hash, account status, and verification records;
- order information such as product, price, currency, order number, payment status, payer account-holder name, provider reference, billing details supplied by the payment service, and transaction events;
- licence information such as licence key hash, encrypted licence record, authorized domain, product version, activation status, installation identifier, validation timestamps, IP address, and user agent;
- download records, including the release downloaded, date, IP address, and user agent;
- installation information such as domain, hosting environment details, scheduling status, credentials the customer chooses to provide for the work, and technical notes;
- issue-form messages, attachments, replies, and related account or order references;
- website and security logs, including request time, page, IP address, browser information, failed login attempts, and suspected abuse signals.
2. Payment-card information
Payment processing will be handled by the payment provider selected for OhFuckOhYeah sales. R18 Entertainment does not need to store complete card numbers or card security codes in the customer portal. The processor may provide transaction status, customer identifiers, limited billing details, fraud signals, and payment references under its own privacy policy.
3. Why we use information
We use information to present the website; process and verify orders; create and secure customer accounts; deliver purchased releases; issue, activate, and validate one-domain licences; coordinate paid installations; respond to eligible private issues; maintain audit and security records; prevent fraud, piracy, abuse, and chargebacks; comply with legal obligations; enforce agreements; and improve the reliability of the portal and licensing service.
4. Legal grounds
Depending on the jurisdiction and context, processing may be necessary to perform a contract, take steps requested before a contract, comply with law, protect legitimate interests in security and fraud prevention, establish or defend legal claims, or act with consent where consent is required.
5. Cookies and sessions
The public site may use limited functional storage. The customer and administrator portals use essential session cookies to authenticate users, protect forms, and maintain account security. We do not need advertising cookies to provide the purchase and licence portal. If analytics or additional cookies are introduced, this policy and any required consent mechanism should be updated before use.
6. When information is shared
Information may be shared with service providers that support payment processing, hosting, email delivery, security, backups, professional advice, or installation work; with financial institutions and payment networks; with authorities where legally required; in connection with a business transfer; or with other parties when necessary to investigate fraud, piracy, security incidents, or legal claims. Providers receive only the information reasonably necessary for their function and are subject to their own obligations.
7. International processing
The site is offered worldwide. Service providers and customers may be located outside Ontario or Canada, and information may therefore be processed in other jurisdictions with different laws. We use reasonable contractual, technical, and organizational measures appropriate to the service and information involved.
8. Retention
We retain information for as long as reasonably necessary for active accounts, licence validation, order records, tax and accounting obligations, fraud prevention, dispute evidence, legal claims, backups, and enforcement. Some records may remain after account closure where retention is required or reasonably necessary. Credentials provided solely for an installation should be removed or rendered inaccessible when no longer needed for the agreed work.
9. Security
We use measures appropriate to the portal, including password hashing, access controls, session protection, encrypted storage for recoverable licence records, prepared database queries, CSRF protection, audit logging, and restricted private files. No online system can guarantee absolute security. Customers must protect their credentials and promptly report suspected account compromise through the qualifying private form.
10. Your choices and rights
Subject to applicable law, you may request access, correction, or deletion of certain personal information; object to or restrict certain processing; withdraw consent where processing depends on consent; or request information about service providers and international transfers. Some information cannot be deleted while needed for contract performance, licence enforcement, tax, fraud prevention, dispute resolution, or legal obligations.
11. Customer-operated video platforms
A business using OhFuckOhYeah software is independently responsible for the privacy practices of its own platform, subscribers, content, cookies, processors, analytics, and integrations. R18 Entertainment does not become the operator or controller of a customer's video business solely by licensing or installing the Software.
12. Children's information
OhFuckOhYeah.com is a business-to-business software sales site and is not directed to children. We do not knowingly invite children to purchase software or create customer accounts.
13. Changes and contact
We may update this policy prospectively and will post the current effective date. Privacy and legal enquiries may be sent to sales@ohfuckohyeah.com. Product support is routed through the FAQ and qualifying private issue form.