PrivateByRight VPN — operated by MSC Play-Streaming Inc.
Effective Date: 9 April 2026 | Last Updated: 9 April 2026
1.1. This Privacy Policy ("Policy") explains how MSC Play-Streaming Inc., a company incorporated in the U.S. under company registration number 2739844, with its registered office at 273 Oak Hill Drive Trophy Club, TX 76262, USA, ("MSC Play-Streaming", "we", "us", or "our"), trading as PrivateByRight VPN, collects, uses, shares, and protects your personal data when you use our Service.
1.2. This Policy applies to all interactions with us, including through:
(collectively, the "Service")
1.3. MSC Play-Streaming Inc. is responsible for the collection, use, disclosure, retention, and protection of personal information as described in this Privacy Policy and in accordance with applicable United States federal and state privacy laws.
1.4. Our core commitment: We are a privacy-first VPN provider. We do not log your browsing activity, DNS queries, traffic data, connection timestamps, originating IP addresses, or bandwidth usage. This Policy is designed to be transparent about what minimal data we do collect and why.
2.1. For all data protection enquiries, requests, or complaints, you may contact us at:
MSC Play-Streaming (trading as PrivateByRight VPN)
Email: support@privatebyright.com
Support Centre: https://support.privatebyright.com
Postal Address: 273 Oak Hill Drive Trophy Club, TX 76262, USA
3.1. We do not collect, store, log, or process any of the following data at any time:
| Data Type | Collected? |
|---|---|
| Browsing history or visited URLs | No |
| DNS queries | No |
| Traffic data or content of communications | No |
| Connection timestamps or session durations | No |
| Your originating (source) IP address when connected to the VPN | No |
| Assigned VPN IP address linked to your identity | No |
| Bandwidth usage or data transfer volumes per user | No |
| Files downloaded or uploaded | No |
3.2. Our VPN servers operate on a RAM-only architecture wherever technically feasible, meaning data is automatically erased when a server is powered down or restarted. This infrastructure is designed to ensure that even in the event of physical server seizure, no user activity data can be extracted.
3.3. Our no-logs policy is subject to independent third-party security audit. When completed, audit results and the auditor's findings will be published in our Transparency Reports at www.privatebyright.com/transparency-hub.
3.4. We maintain a warrant canary as part of our Transparency Reports to communicate whether we have or have not received certain types of government requests.
We collect only the limited categories of personal information necessary to provide, maintain, secure, and improve the Service. We do not collect browsing history, DNS queries, VPN traffic, connection logs, or any other information covered by our No-Logs Policy described in Section 3.
When you create an account, we collect information necessary to establish and administer your subscription, including:
| Information Collected | Purpose |
|---|---|
| Email address | Account creation, authentication, service communications, password recovery, and billing notifications |
| Hashed password | Secure authentication |
| Account creation date | Account administration and fraud prevention |
| Subscription plan and account status | Service provisioning, subscription management, and customer support |
When you purchase a subscription, we collect limited billing information necessary to process your payment and maintain financial records. This may include:
| Information Collected | Purpose |
|---|---|
| Payment method type (e.g., card brand and last four digits) | Billing administration and fraud prevention |
| Billing history and invoice records | Accounting, tax compliance, refunds, and dispute resolution |
| Billing country or billing address information | Tax calculation and payment processing |
Important: We do not store complete payment card numbers, security codes (CVV), or card expiration dates on our systems. Payment transactions are processed by authorized third-party payment processors, including Stripe, Inc., which process payment information in accordance with their own privacy policies and applicable security standards.
If you contact our support team, we may collect:
| Information Collected | Purpose |
|---|---|
| Support requests and correspondence | Providing customer support and resolving technical issues |
| Email address used for support | Responding to your enquiries and verifying your account where necessary |
| Attachments voluntarily provided | Diagnosing reported issues and responding to your request |
We collect only the information you choose to provide when communicating with us.
To maintain the security, stability, and reliability of the Service, we may collect limited technical information that does not identify your VPN activity. This may include:
| Information Collected | Purpose |
|---|---|
| Application version | Compatibility and update management |
| Operating system and device type | Technical support and troubleshooting |
| Anonymous crash reports (only if enabled by you) | Improving application stability |
| Aggregated server performance statistics | Capacity planning and infrastructure optimisation |
Technical diagnostic information is not associated with your browsing activity, VPN usage, or online communications.
When you visit our websites, we may collect limited website usage information through cookies or similar technologies where permitted by applicable law or with your consent where required. Analytics information may include:
5.1. We use the data described in Section 4 for the following purposes only:
5.2. We do not use your data for:
7.1. We do not sell, rent, trade, or otherwise commercially share your personal data with any third party.
7.2. We may share limited personal data with the following categories of recipients, solely for the purposes described in this Policy:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe, Inc. | Payment processing | Payment method details, billing address country, transaction amounts |
| Infrastructure providers (hosting, CDN) | Service delivery and website hosting | Aggregate technical data only; no personally identifiable user activity data |
| Email service provider | Transactional email delivery (account confirmations, billing receipts, security alerts) | Email address, name (if provided) |
All service providers are bound by data processing agreements that require them to process data only on our instructions, implement appropriate security measures, and not use the data for their own purposes.
7.3. We may disclose personal data if we are required to do so by law, regulation, legal process, or enforceable governmental request, including:
7.4. In the context of our no-logs policy, we are technically unable to provide any browsing activity, traffic data, DNS queries, connection timestamps, or IP address data in response to any legal request, because we do not collect or store such data. Any legal requests we receive and our responses are documented in our Transparency Reports.
7.5. In the event of a merger, acquisition, reorganisation, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred to the successor entity. We will notify you of any such transfer and any changes to this Policy that may result.
Cookies are small text files and similar technologies that are stored on your device when you visit our websites. They help websites function properly, remember your preferences, improve website performance, and understand how visitors use our websites.
We use the following categories of cookies and similar technologies:
| Category | Purpose |
|---|---|
| Strictly Necessary Cookies | Required for the operation, security, authentication, and core functionality of our websites, including maintaining secure sessions, preventing fraud, and remembering your privacy preferences. |
| Functional Cookies | Remember your preferences, such as language, region, or other settings, to enhance your experience. |
| Analytics Cookies | Help us understand how visitors use our websites by collecting aggregated and, where possible, de-identified information such as page visits, browser type, device type, and website performance metrics. |
We do not use cookies for targeted advertising, behavioural advertising, or cross-site tracking.
Depending on your location and applicable law, you may be presented with a cookie banner or similar preference tool that allows you to manage the use of non-essential cookies. You may also control or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of portions of our websites.
Where required by applicable law, we honour browser-based privacy preference signals, including the Global Privacy Control (GPC) signal, as a request to opt out of the sale or sharing of personal information where such rights apply. Our websites may also recognize other browser privacy settings where technically feasible. However, because there is currently no universally accepted standard for Do Not Track (DNT) signals, our websites do not respond to DNT signals unless required by applicable law.
We may use trusted third-party service providers to assist with website analytics and performance monitoring. These providers may place cookies or similar technologies on our behalf solely to provide services to us and are contractually restricted from using the information for their own independent purposes.
9.1. MSC Play-Streaming Inc. is headquartered in the United States. In order to provide the Service, your personal information may be collected, processed, stored, or accessed in the United States and in other countries where we or our trusted service providers operate.
9.2. Our VPN infrastructure operates across multiple countries to provide secure and reliable connectivity. However, consistent with our No-Logs Policy, we do not collect, store, or transfer records of your browsing activity, DNS queries, VPN traffic, connection timestamps, or other VPN usage data.
9.3. The categories of personal information that may be processed outside your country of residence include:
9.4. Where personal information is transferred to third-party service providers located in another jurisdiction, we take reasonable measures designed to ensure that such information receives an appropriate level of protection. These measures may include contractual obligations, technical safeguards, organizational security controls, encryption, and access restrictions appropriate to the nature of the information.
9.5. By using the Service, you acknowledge that your personal information may be transferred to and processed in countries whose data protection laws may differ from those of your country or state of residence.
9.6. If you have questions regarding our international data processing practices, you may contact us using the information provided in Section 18 of this Privacy Policy.
10.1. Depending on your state of residence and applicable law, you may have certain rights regarding the personal information we collect, use, disclose, and retain about you. These rights may include the right to:
To submit a privacy request, please contact us
using one of the following methods:
Email: support@privatebyright.com Mail: MSC Play-Streaming Inc. 273 Oak Hill Drive Trophy Club, TX 76262 United States Please specify the nature of your request and provide sufficient information to enable us to verify your identity and locate your records.
To protect your personal information, we may take reasonable steps to verify your identity before processing your request. If we are unable to verify your identity using commercially reasonable methods, we may request additional information or decline your request where permitted by applicable law.
Where permitted by applicable law, you may designate an authorized agent to submit a privacy request on your behalf. We may require the authorized agent to provide written authorization signed by you and may also require you to verify your identity directly with us.
We will respond to verified privacy requests within the time required by applicable law. If additional time is reasonably necessary, we will notify you of the reason for the extension where required.
If applicable law provides you with the right to appeal our decision regarding your privacy request, you may submit an appeal by contacting us at support@privatebyright.com. We will review your appeal and respond within the timeframe required by applicable law.
11.1. We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests. The table below summarizes our standard retention periods:
| Category of Personal Information | Standard Retention Period | Purpose |
|---|---|---|
| Account Information (email address, hashed password) | Duration of your account and up to thirty (30) days following account deletion | Service administration and reasonable account recovery |
| Subscription, Payment, and Billing Records | Up to seven (7) years from the date of the transaction, or longer if required by applicable law | Compliance with applicable accounting, tax, auditing, and legal requirements |
| Customer Support Communications | Up to two (2) years after resolution of the support request, or for the duration of the account if longer | Customer support, quality assurance, and dispute resolution |
| Anonymous Crash Reports | Up to ninety (90) days | Application stability and troubleshooting |
| Aggregated Website Analytics | Up to twenty-six (26) months, or a shorter period where configured | Website performance analysis and improvement |
| Cookie Preferences | Up to twelve (12) months, after which consent preferences may be requested again where applicable | Remembering your privacy choices |
11.2. Upon expiration of the applicable retention period, personal information is securely deleted, anonymized, or otherwise disposed of in accordance with our internal data retention and information security practices, unless a longer retention period is required or permitted by applicable law.
11.3. Consistent with our No-Logs Policy, we do not retain VPN browsing activity, DNS queries, traffic content, connection logs, originating IP addresses, or other VPN usage data because such information is not collected in the first place.
12.1. We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, including:
12.2. While we implement industry-standard security measures, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your data.
13.1. The Service is not directed at children under the age of sixteen (16). We do not knowingly collect personal data from children under 16.
13.2. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that data as soon as reasonably practicable.
13.3. If you believe that a child under 16 has provided us with personal data, please contact us immediately at support@privatebyright.com.
14.1. Our Service and websites may contain links to third-party websites, applications, or services that are not operated or controlled by MSC Play-Streaming. This Privacy Policy does not apply to any third-party services.
14.2. We are not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party service before providing them with your personal data.
14.3. The inclusion of a link to a third-party service does not imply endorsement by MSC Play-Streaming.
15.1. We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law.
15.2. Material changes will be communicated to you via email to the address associated with your account and/or by prominent notice within the Service at least thirty (30) days before they take effect.
15.3. Non-material changes (such as formatting, clarifications, or typographical corrections) may be made without advance notice and will be reflected by an updated "Last Updated" date at the top of this Policy.
15.4. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should discontinue use of the Service and delete your account.
15.5. Previous versions of this Privacy Policy are available upon request by contacting support@privatebyright.com.
If you are a California resident, you may have certain rights under the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), subject to applicable exceptions and limitations. Depending on applicable law, these rights may include the right to:
To exercise your CCPA/CPRA rights, please contact us at support@privatebyright.com.
PrivateByRight VPN does not sell personal information and does not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. Accordingly, we do not offer a "Do Not Sell or Share My Personal Information" mechanism because our data practices do not constitute the sale or sharing of personal information under applicable California law.
We use sensitive personal information only as reasonably necessary to provide the Service, process payments, maintain account security, detect fraud, comply with legal obligations, and for other purposes expressly permitted by applicable law. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about consumers.
California residents may exercise their privacy rights by contacting us at:
Email: support@privatebyright.com
Mail: MSC Play-Streaming Inc., 273 Oak Hill Drive, Trophy Club, TX 76262, United States
We may take reasonable steps to verify your identity before responding to your request.
California residents may designate an authorized agent to submit a request on their behalf. We may require proof of the agent's authority and may also require verification of the consumer's identity before processing the request.
We will not discriminate against you for exercising any privacy rights provided under applicable California law.
We endeavour to comply with applicable data protection laws in all jurisdictions where we operate. If you have questions about your rights under the laws of your jurisdiction, please contact us at support@privatebyright.com.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
MSC Play-Streaming (trading as PrivateByRight VPN)
Company Registration Number: 2739844
Registered Address: 273 Oak Hill Drive Trophy Club, TX 76262, USA
Email: support@privatebyright.com
Support Centre: https://support.privatebyright.com
Website: https://www.privatebyright.com
By using PrivateByRight VPN, you acknowledge that you have read and understood this Privacy Policy.