Privacy Policy
Last updated: October 30, 2026
At LustWatch, your privacy matters. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data. This policy applies to lustnight.com and all related services.
1. Who We Are
LustWatch is a digital streaming platform operating from Uganda and serving users across East Africa. For the purposes of applicable data protection laws (including the Uganda Data Protection and Privacy Act 2019), LustWatch is the data controller for the personal data described in this policy.
2. Information We Collect
We collect the following categories of information:
a. Information you give us
- Account details: username, email address, password (stored securely hashed — we never see your actual password).
- Payment details: phone number used for mobile money payments. We do not store your PIN or full mobile money account details.
- Communications: messages you send us via WhatsApp, email or support forms.
b. Information we collect automatically
- Device and browser: browser type, device type, operating system.
- IP address and approximate location (country level).
- Watch activity: which movies you watch, when you watch, where you pause or stop.
- Session data: for enforcing device limits, we record when and from which device you log in.
c. Payment data (processed by third parties)
Payments are processed by PesaJet and mobile money providers (MTN, Airtel). They receive your phone number and payment amount. LustWatch receives a transaction confirmation, not your full payment credentials.
3. How We Use Your Information
We use your data to:
- Create and maintain your account.
- Provide access to purchased, rented and subscription content.
- Process and verify payments.
- Track viewing history so you can continue watching across devices.
- Recommend movies based on what you've watched.
- Enforce device limits and detect account sharing.
- Respond to your support questions.
- Improve our catalogue and service based on aggregate usage patterns.
- Comply with legal obligations.
4. Cookies and Tracking
LustWatch uses cookies and similar technologies for:
- Session cookies: to keep you signed in.
- Security cookies: to prevent cross-site request forgery.
- Analytics cookies (if enabled): Google Analytics to understand which pages are popular.
You can disable cookies in your browser settings, but doing so will prevent you from logging in and using the Service.
5. Who We Share Data With
We share data only where necessary:
- Mux: video processing and playback. Mux receives playback tokens that include your user ID but not your name or email.
- PesaJet and mobile money providers: to process payments.
- Our hosting provider (Namecheap/cPanel): to store our servers and databases.
- Google Analytics (if enabled): anonymized usage data for traffic analysis.
- Law enforcement: if required by a valid legal order or to protect our users.
We never sell your personal information to anyone.
6. Data Retention
We keep your data for as long as your account is active. If you delete your account:
- Your personal information is deleted within 30 days.
- Payment records are retained for 7 years to comply with tax and financial regulations.
- Anonymized viewing statistics (aggregated, not tied to you) may be retained for improving recommendations.
7. Your Rights
Under the Uganda Data Protection and Privacy Act (and similar laws in Kenya and Tanzania), you have the right to:
- Access the personal information we hold about you.
- Correct any inaccurate information.
- Delete your account and personal data.
- Object to certain types of processing (e.g., marketing emails).
- Data portability: request a copy of your data in a machine-readable format.
- Complain to the relevant data protection authority.
To exercise any of these rights, contact us at the email below. We respond within 30 days.
8. Data Security
We protect your data using industry-standard practices:
- Passwords are hashed using bcrypt — we never store plain-text passwords.
- All traffic to and from LustWatch is encrypted with HTTPS.
- Payment credentials are handled by PesaJet's PCI-compliant infrastructure — we never see your full card or PIN.
- Administrative access to the database is restricted and logged.
No system is perfectly secure. If a data breach occurs that affects your personal data, we will notify you within 72 hours as required by law.
9. Children's Privacy
LustWatch is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have collected such data, please contact us and we will delete it promptly.
10. International Data Transfers
Some of our service providers (like Mux, Google, and PesaJet) store or process data outside East Africa. When data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify users via email or an in-app notice. The "Last updated" date at the top of this page always reflects the current version.
12. Contact Us
For any privacy-related questions or to exercise your data rights:
13. Complaints
If you are not satisfied with our response to a privacy concern, you may file a complaint with:
- Uganda: Personal Data Protection Office (PDPO) under NITA-U.
- Kenya: Office of the Data Protection Commissioner (ODPC).
- Tanzania: Personal Data Protection Commission.