Privacy Policy

Rovidx Media & Consulting, Inc, doing business as MediaBlaster ("MediaBlaster," "we," "us," or "our"), publishes the website at www.mediablaster.io (the "Site") and the free MediaBlaster WordPress plugin (the "Plugin"). This Privacy Policy explains how we handle information in both contexts. If you do not agree, please do not use the Site or the Plugin.

1. Two contexts: Site vs. Plugin

The Site is our marketing, documentation, and store presence. It provides product information, documentation, a blog, community links, optional email-list signup, customer accounts, and checkout for app templates and related products. We operate the Site directly.

The Plugin is software you install on a WordPress website you control. The Plugin runs on that server, stores data in that WordPress database, and may connect to third-party services (such as Vimeo or Stripe) from your site. Unless stated otherwise below, the site owner who installs the Plugin — not MediaBlaster — decides what personal data is collected from visitors and subscribers on that WordPress site.

2. Information we collect on the Site

When you use mediablaster.io, we may collect:

• Newsletter signup. If you join our email list through a public signup form (for example, the footer or homepage drawer), we collect your first name and email address. Submissions are processed by our server and stored in our Mailchimp audience with a website-newsletter tag.
• Store account. If you sign in or check out, we collect your email address to create and manage your customer account, deliver magic-link sign-in, and provide access to downloads, licenses, and support. Account data is processed through our store backend and session cookies on the Site.
• Marketing opt-in (accounts). If you choose to subscribe to MediaBlaster updates from your account settings, we add your account email to our Mailchimp audience with a mediablaster tag. This is optional and separate from creating an account or completing a purchase.
• Purchase information. When you buy a product, we process payment and order details (product, license type, amount, and status) to fulfill your purchase. If you are subscribed to our Mailchimp audience, completed purchase data may also be synced to Mailchimp for marketing analytics and segmentation.
• Technical and usage data. Our hosting provider and server logs may record your IP address, browser type, referring URL, pages viewed, and similar diagnostic information when you access the Site.
• Theme preference. The Site may store your light/dark theme choice in your browser's local storage so the setting persists between visits.

Checkout and payment processing are handled through third-party providers such as Stripe. Links to book a call, join our Skool community, or download the Plugin from WordPress.org may take you to other third-party services governed by their own policies.

3. How we use Site information

We use Site information to:

• Operate, secure, and improve the Site and documentation.
• Send MediaBlaster product updates and related email if you opted in to the newsletter or account email preferences (you may unsubscribe via Mailchimp links in those emails).
• Fulfill store purchases, provide downloads and licenses, and operate customer support for products you buy on the Site.
• Respond to inquiries you send us directly by email.
• Protect against abuse, spam, and unauthorized activity.

We do not sell your personal information collected through the Site.

4. Site service providers

We use trusted vendors to run the Site, including:

• Hosting and infrastructure (for example, Vercel) to serve pages and API routes such as newsletter signup.
• Mailchimp (Intuit Mailchimp) to manage the email list, audience tags, and — when you are a list member — e-commerce purchase analytics for store orders.
• Google Analytics (GA4) to measure site traffic, page views, and store conversion events when you accept analytics cookies.
• Stripe to process store payments when you checkout on the Site. Stripe is the only customer-facing payment method for new purchases.
• Resend to deliver passwordless sign-in, support-related transactional email, and requested OTT project estimate emails from the cost calculator.
• WordPress as the content source for public blog posts displayed on the Site (fetched server-side; we do not receive visitor credentials for your visit to our blog pages).

These providers process data on our behalf under their terms and privacy policies. We share only what is needed for the service they provide.

5. OTT Platform Cost Calculator

The OTT Platform Cost Calculator at /tools/ott-platform-cost-calculator collects project planning answers and an email address so we can send a requested estimate.

• Resend delivers the estimate email you request.
• An internal copy of the estimate and answers is sent to Rovidx / MediaBlaster so we can respond to the request.
• Mailchimp receives your email only when you separately consent to marketing on a dedicated step. Marketing consent is optional. You can receive the quote without joining the marketing list.
• Basic anti-abuse information such as IP address may be processed for rate limiting.
• Calculator progress may temporarily use browser session storage while you answer questions. Submitted email addresses are not stored in browser local storage.

6. The WordPress Plugin — overview

MediaBlaster is a WordPress plugin that helps site owners publish video libraries, podcasts, RSS feeds, and headless media apps. The Plugin stores configuration and content metadata in the WordPress database on the server where it is installed. The Plugin does not transmit your site's content or subscriber lists to mediablaster.io by default.

If you are a visitor to a third-party website that uses MediaBlaster, contact that website's operator for their privacy policy. The sections below describe what the Plugin can process so site owners understand their obligations.

7. Data the Plugin may process on your WordPress site

Depending on which features you enable, the Plugin may store or process:

• Media and podcast content. Titles, descriptions, media URLs, artwork, episode metadata, RSS enclosure data, and related post meta for movies, videos, series, episodes, and podcast shows.
• Vimeo integration (optional). If enabled, OAuth client credentials and access tokens in WordPress options, plus Vimeo video metadata imported into post meta. API calls go between your server and Vimeo.
• Subscriptions (optional). If enabled via wp-config.php, internal subscription tiers, access groups, subscriber records, payment-provider references, webhook logs, and REST API bearer tokens. Stripe Checkout and webhooks operate between your site, your visitors, and Stripe — not through mediablaster.io.
• REST API and apps. When subscriptions and API access are enabled, the Plugin may expose authenticated endpoints and store tokens used by apps or headless clients you authorize.
• Standard WordPress data. User accounts, sessions, and cookies managed by WordPress and your hosting stack when visitors log in or use subscription shortcodes on your site.

8. Plugin third-party integrations

Site owners who enable optional Plugin features connect directly to:

• Vimeo — for OAuth and video import when Vimeo integration is turned on.
• Stripe — for subscription checkout and webhooks when the subscriptions module is enabled and Stripe is configured.
• CDN and media hosts — URLs you configure for HLS, MP4, or podcast audio files.

Each provider's privacy policy applies to data they receive. You are responsible for disclosing these integrations to your visitors and obtaining any required consents on your WordPress site.

9. Site owner responsibilities

If you install the Plugin, you act as the data controller for personal data collected on your WordPress site. You should:

• Publish a privacy policy on your site that covers MediaBlaster features you use (podcasts, subscriptions, Vimeo, REST API, etc.).
• Configure Stripe, Vimeo, and access controls according to your legal and contractual obligations.
• Secure WordPress admin access, API tokens, and webhook secrets.
• Honor data subject requests for information you hold about your users and subscribers.

10. Cookies and local storage

On the Site

We use minimal client-side storage. Theme preference may be saved in local storage. A dismissible marketing prompt on the dashboard may remember dismissal in local storage. Store sign-in uses an HttpOnly session cookie. Affiliate sign-in uses a separate HttpOnly affiliate session cookie. Analytics cookies from Google Analytics are used only if you accept them in our cookie banner; until then, Google Consent Mode keeps analytics storage denied. Your choice is saved in local storage so we can remember it on return visits. You can change your choice by clearing site data for mediablaster.io in your browser. Our hosting provider may set essential cookies required to deliver the Site.

Affiliate referral cookie

When you visit the Site with a valid affiliate referral parameter (?ref=), we may set an essential first-party HttpOnly cookie (for example mb_affiliate_ref) that stores only a signed payload containing the affiliate code, a server-generated click UUID, and an expiration time. The cookie is Secure in production, SameSite=Lax, and is not readable by client-side JavaScript. It is used solely to attribute eligible Stripe purchases to an approved affiliate and is not controlled by the analytics cookie banner.

When a referral click is recorded, our Store Manager backend may also process the landing path, referrer host, allowlisted UTM campaign parameters, and privacy-conscious hashes of IP address and user-agent for fraud prevention and attribution integrity. We retain referral click and cookie data for the program attribution window (commonly 60 days, as configured) and related commission accounting periods. Aggregated performance metrics (such as clicks and commissions) may be shared with the referring affiliate in their dashboard. We do not expose raw customer emails, full order payloads, IP addresses, or Stripe secrets to affiliates.

Analytics attribution storage

If you accept analytics cookies, we may store campaign fields (UTMs), landing path, and referrer hostname in local storage (mb-attribution) to measure marketing performance. This storage is separate from the essential affiliate referral cookie and is not written when analytics consent is denied.

In the Plugin

WordPress and optional subscription features may set session and authentication cookies on sites where the Plugin is installed. Cookie behavior depends on your WordPress configuration and which Plugin features are active.

11. Data retention and security

We retain newsletter and account marketing opt-in data for as long as you remain subscribed or as needed to comply with law. Store account and purchase records are retained as needed to provide access, support, and legal compliance. Server logs are kept for a limited period appropriate for security and operations.

Plugin data retention is controlled by the WordPress site owner (database backups, subscriber records, webhook logs, etc.). We use reasonable safeguards on the Site, but no Internet transmission or storage is completely secure.

12. Children's privacy

The Site and Plugin are not directed to children under 13. We do not knowingly collect personal information from children under 13 on the Site. If you believe we have, contact us and we will delete it promptly.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data we hold about you through the Site (for example, newsletter or account marketing data). To exercise these rights, email us at hello@mediablaster.io. For data held on a WordPress site using MediaBlaster, contact that site's operator.

14. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page with a revised "Last updated" date. Continued use of the Site after changes constitutes acceptance. Material changes to Plugin-related practices will be reflected here and, where appropriate, in Plugin release notes.

15. Contact

Questions about this Privacy Policy:

Rovidx Media & Consulting, Inc (MediaBlaster)
Email: hello@mediablaster.io