Uscreen and GDPR / UK GDPR
Uscreen is designed to help our publishers comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA).
Under the GDPR, you are the data controller of your subscribers' personal information, so you decide how it's collected and used. Uscreen acts as your data processor, handling subscriber information on your behalf and at your direction, as set out in our Data Processing Agreement.
The platform includes technical controls that support compliance: account deletion, opt-in and opt-out marketing flags, encryption in transit, and PCI DSS-compliant payment processing. Uscreen does not sell or share your data or your subscribers' data. Our Data Processing Addendum (https://www.uscreen.tv/dpa/) sets out how we process personal data on your behalf. It applies automatically as part of our Publisher Terms. If you need a countersigned copy, email privacy@uscreen.tv.
Because GDPR compliance also depends on how you configure and operate your store, what you collect at checkout, what marketing emails you send, and who your sub-processors are, we recommend you consult a qualified privacy lawyer to confirm your full compliance posture.
For data-subject requests or privacy questions, contact privacy@uscreen.tv.
📝 NOTE: This article is informational and does not constitute legal advice.
Compliance
Uscreen provides tools and infrastructure designed to help you, the Store Owner, comply with data-protection laws that apply to your business and your end users.
End users can permanently delete their accounts, supporting the data-subject rights granted under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). As the Store Owner, you remain the data controller for your end users and are responsible for your overall compliance program.
ℹ️ INFO: The GDPR is a law in the European Union that oversees what companies can do with clients' personal information from the European Economic Area (EEA). The CCPA gives California consumers more control over their personal information and what businesses collect about them.
Account Deletion Process
Members can permanently delete their accounts, or ask you to delete their accounts from the People area. Deletion has two stages.
Immediately, Uscreen replaces the member's name and email with "Deleted User" and a number, removes their phone number, bio and admin notes, removes them from your connected Mailchimp and Drip lists, and cancels their active subscriptions.
30 days later, Uscreen permanently deletes the member's account history, avatar, comments, community posts, registered devices and stored ad-attribution identifiers. If payments ran through Uscreen's payment processing, Uscreen also deletes the member's customer record there.
Uscreen keeps non-identifying records, such as invoices and sales history, so your reports stay accurate. These records show "Deleted User" and a number instead of the member's name.
If you use your own payment gateway account (for example, your own Stripe or PayPal account), or you receive member data through webhooks, Zapier or other integrations, delete the member there as well. Uscreen cannot delete data in systems you control.
To delete an account, users will have to:
Sign in to their account on your website
Navigate to the User Dashboard: Profile page
Scroll down to the Danger Zone
Click Delete My Account
Confirm and complete the process
🔗 Learn more about Deleting a User's Account
📝 NOTE: For members who purchased via mobile apps, you should advise them to cancel their in-app subscription first before deleting their account, as app store subscriptions are managed separately.
GDPR Compliance Guidelines
If you run an online business, odds are you have already heard and read about the GDPR, even if you are not in Europe. After this breakthrough law came into effect, other laws like Brazil's LGPD and California's CCPA have been brought forward as well, modeled largely after the GDPR, but each with its own differences.
ℹ️ INFO: As your service provider (data processor), Uscreen builds and maintains the tools you need to manage your store's data, including personally identifiable information. Compliance responsibility, including determining lawful bases, responding to data-subject requests, and meeting transfer requirements, sits with you as the Store Owner (data controller).
End-users' accounts can be deleted, and their information anonymized, aka the "right to be forgotten", from the People area, or the customer can delete their account directly from the Dashboard.
Emails
Emails comply with soft opt-in principles that allow you to send follow-up marketing emails to users who purchased on your site.
🔗 Learn more about the Soft Opt-in Principle
Users are opted into emails when purchasing on Uscreen, but can opt out of any email they receive or directly from their dashboard.
Marketing tools like our Email Broadcast, where a purchase is not made, will show an opt-in checkbox since a prior relationship has not been established.
🔗 Learn more about Email Broadcasts
📝 NOTE: The opt-in checkbox is part of the tooling Uscreen provides to support GDPR-aligned consent capture. It appears on flows where no purchase establishes a prior relationship, such as free purchases, freebie bundles, and lead-capture/giveaway funnels. It is not shown on paid checkouts, where the purchase itself opts the user in under soft opt-in principles. In lead-capture/giveaway funnels, the checkbox is required for visitors in GDPR/CCPA consent regions.
Double Opt-In
Double opt-in means a new subscriber confirms their signup, usually from a link in a confirmation email, before they’re added to your marketing list. It’s commonly recommended as a best practice in some regions.
Uscreen doesn’t currently offer a built-in double opt-in flow. Lead-capture tools such as Email Capture show a single consent checkbox to visitors in regions that require explicit consent. If you want a confirmation step, you can run it in an external email platform and keep the confirmation record there.
🔗 Learn more about Consent Records & Double Opt-In
Cookie Compliance
Uscreen sets these cookies on your site:
Essential cookies: login sessions, checkout, security and tax (country). The platform cannot work without them.
Analytics cookies: an anonymous visitor ID that Uscreen uses to measure and improve the platform.
Attribution cookies: campaign (UTM) parameters, the referring website and, when a visitor arrives from an ad link, ad-click identifiers. Uscreen uses these for your subscription-source reports and, if you connect them, your conversion integrations.
Uscreen's servers set these cookies, so a cookie consent tool cannot block them. Scripts that you add, such as Google Analytics, advertising pixels and code in your Head snippet, run in the visitor's browser. Most consent tools can block those.
Uscreen does not provide a built-in cookie consent banner. To add one, use a third-party tool.
🔗 Learn more about Adding a Cookie Consent Banner
For a complete list of cookies used by Uscreen, please refer to our Essential Cookies at Uscreen article.
Terms & Conditions
All stores have a default terms of service page that users must agree to before making purchases. When users sign up on your website, they must "agree to any terms & conditions" as part of the account creation process before they can continue and complete their purchase.
Similarly, when users sign up through your mobile apps with in-app purchases, they're required to agree to the Terms of Service and Privacy Policy during the account creation step.
🔗 Learn more about the Terms of Service Page
Data Storage and Security
Uscreen implements robust encryption and security protocols:
All data transferred between viewers and our servers is encrypted using the Transport Layer Security (TLS) protocol
Your storefront URL is secured by SSL certificates, ensuring all connections between web servers and customer browsers are encrypted
We provide free SSL certificates for all domains, automatically renewing them
For payment security:
We're PCI DSS compliant and use validated third-party providers like Stripe and PayPal
We don't store, process, or transmit cardholder data on our systems
Additional content protection includes:
Token-signed URLs prevent unauthorized downloads
IP concurrent session limits reduce password sharing
reCAPTCHA protection on sign-in and checkout pages
🔗 Learn more about the Security Settings
Uscreen hosts the platform on Google Cloud in the United States. Uscreen's sub-processors are listed at trust.uscreen.tv. Transfers of personal data from the EU, UK and Switzerland are covered by the Standard Contractual Clauses in our Data Processing Addendum.
Additional Recommendations for Compliance
Update Your Privacy Policy and Terms of Service
Review and update your VOD's privacy policy and terms of service, and consult with legal counsel
Ensure your policy clearly explains how you handle user data and cookies
Review Your Subprocessors
Review third-party subprocessors you're sending data to and determine whether these services are compliant with the GDPR
Set up proper data processing agreements with these services
If you connect your own payment gateway, email platform or other integrations, make sure you can delete a member's data there when they delete their account
Implement a Cookie Consent Banner
Add a cookie consent pop-up to inform your customers about tracking cookies
Ensure your banner is visible, accessible, and provides clear choices for users
Create a Data Retention Policy
Establish clear guidelines for how long you retain user data
Regularly review and delete data that's no longer needed
Document Your Compliance Efforts
Keep records of your compliance measures
This documentation can be valuable if you ever face questions about your practices
For more information on GDPR Compliance and Uscreen, check out our Blog post.
📝 NOTE: Uscreen does not provide legal advice. You should consult qualified legal counsel to confirm your store's compliance obligations under GDPR, UK GDPR, CCPA, and any other applicable data-protection laws.
FAQs
Do I need to comply with GDPR if I'm not based in Europe?
Do I need to comply with GDPR if I'm not based in Europe?
Yes, if you collect and store any EU residents' personal data, that includes anything as simple as processing names and email addresses of customers signing up to your VOD service.
What happens to user data when an account is deleted?
What happens to user data when an account is deleted?
Uscreen removes the member's name and email immediately, and permanently deletes the rest of their personal data 30 days later. Invoices and sales records remain, shown as "Deleted User" with a number. Deletion cannot be undone. If you use your own payment gateway or send member data to other tools, delete the member there as well.
Can I disable specific cookies on my Uscreen site?
Can I disable specific cookies on my Uscreen site?
You can't turn off the cookies that Uscreen's servers set. You control the third-party scripts on your site: you choose which integrations to connect and what goes in your Head code snippet, and a consent tool can block those scripts until a visitor agrees.
Where is Uscreen user data stored?
Where is Uscreen user data stored?
Uscreen hosts the platform on Google Cloud in the United States, and delivers content through global CDNs. Our Data Processing Addendum (https://www.uscreen.tv/dpa/) includes the Standard Contractual Clauses for transfers from the EU, UK and Switzerland. Our sub-processors are listed at trust.uscreen.tv.