Privacy Policy
How Vidrplay processes personal data
Last updated
October 13, 2026
Introduction
This privacy policy explains what personal data Vidrplay collects, why, and how we protect it.
Personal data is any information that can be linked to a person, such as a name, an email address or an IP address. Wirelabs AS (org. no. 936 541 186), Øvre Bjørkåsen 13, 5228 Nesttun, Norway, is the data controller for the personal data described here.
For questions about how we process your personal data, contact us at support@vidrplay.com.
What We Collect and Why
We never sell your personal data, and we do not use it for advertising.
Your account
Name, email address and a securely hashed password, so you can log in and we can contact you about your account.
Billing
Your plan, billing address, VAT number and payment history. Card details are handled by Stripe and never reach us.
Your content
Videos, titles, descriptions, player settings and allowed domains, to host and play your videos.
Technical data
- While you are logged in, your session stores your IP address and browser type to keep the session secure. Sessions expire after inactivity.
- IP addresses are used briefly to limit abuse, for example repeated login attempts. These counters expire within minutes.
- Server logs used for security and troubleshooting are kept only as long as needed for that purpose.
People who watch your videos
The embedded player and share pages set no cookies and do not track viewers. To deliver a video, our content delivery network receives the viewer's IP address and the address of the page the video is embedded on. We count how many times a video is played, without storing who played it.
Legal Basis
- Contract: to provide the Service, manage your account and handle billing (GDPR Art. 6(1)(b)).
- Legal obligation: to keep accounting records as required by Norwegian bookkeeping law (Art. 6(1)(c)).
- Legitimate interest: to keep the Service secure, prevent abuse and send essential service messages (Art. 6(1)(f)).
Data Processors and Location
We use carefully selected providers, bound by data processing agreements, to run the Service:
- bunny.net (BunnyWay d.o.o., Slovenia, EU): application hosting, database and backups in Sweden with a backup copy in Germany, and video storage, encoding and delivery.
- Stripe (Stripe Payments Europe Ltd., Ireland, EU): payments, invoices and VAT calculation.
- Resend (Resend, Inc., USA): sending account emails such as verification and password reset.
Your account data is stored in the EU/EEA. To play videos quickly worldwide, video files may be cached at delivery locations outside the EEA. Where personal data is transferred outside the EEA, the transfer is protected by the European Commission's Standard Contractual Clauses or an adequacy decision.
How Long We Keep Data
- Account and content: until you delete them or your account. Deleted data disappears from our backups within 30 days.
- Billing records: for five years, as required by Norwegian bookkeeping law, even after the account is deleted.
- Sessions and abuse counters: from a few minutes up to the end of your session.
Your Rights
You have the right to access, correct and delete your personal data, to restrict or object to its processing, and to receive your data in a portable format. You can update your name and email and delete your account yourself in Settings. For anything else, contact us at support@vidrplay.com; we respond within 30 days.
Access
See what data we hold about you
Correction
Correct inaccurate information
Deletion
Have your data deleted
If you believe we process your personal data unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet).
Cookies
Vidrplay only uses cookies that are strictly necessary for the Service to work:
- Session cookie keeps you logged in and expires when your session ends.
- XSRF-TOKEN protects forms against cross-site request forgery.
Your light or dark mode preference is stored in your browser only. We use no analytics, advertising or tracking cookies, so we do not ask for cookie consent.
Security
All traffic is encrypted with HTTPS, passwords are hashed, and video playback uses signed links that expire. Access to production systems is restricted, and the database is backed up every night.
Changes
If we change this privacy policy, we publish the updated version here with a new date, and notify you by email about material changes.