Privacy Policy

How OhPlayer collects, uses and protects personal data when you use Oh Player.

Last updated: 11 September 2026.

1. Who is responsible

Oh Player is operated by OhPlayer, a business registered in Poland (“OhPlayer”, “we”, “us”), the controller responsible for the personal data described here.

Registered address: aleja Grunwaldzka 472B, 80-309 Gdańsk, Poland.

Privacy and data contact: hello@ohplayer.com.

Oh Player is a business-to-business service and is not directed at consumers.

2. Information we process

• Account data — name, verified email address and Google account identifier, provided through Google sign-in.
• Content — videos you upload, captions, thumbnails and the player settings you configure.
• Usage and service data — upload and encoding status, viewer events, integration deliveries, and connection or technical data needed to operate the service and diagnose failures.
• Billing data — plan, subscription status and payment-processor identifiers. Card details are handled by Stripe; we do not store full card numbers.

3. Why we process it

We process personal data to perform our contract with you (providing the service, hosting and delivering your videos, managing your account and subscription); for our legitimate interests (securing the service, preventing abuse, diagnosing failures and improving the product); and to meet legal obligations such as tax and accounting. Where we rely on consent, you can withdraw it at any time.

4. Service providers

• Google — sign-in.
• Stripe — subscription billing and payment processing.
• Cloudflare — DNS, private original-video storage, public playback storage and CDN delivery, and external uptime checks.
• Neon — database: accounts, sessions, video metadata, jobs and recovery.
• OVHcloud — API and video encoding server.
• PostHog EU — product analytics, error tracking and service-health monitoring.

Originals and playback buckets use Cloudflare's EU jurisdiction; Neon is in EU Frankfurt and the OVH server is in Warsaw. Playback uses a global CDN. EU resource locations do not by themselves mean every provider operation or transfer stays within the EU. Where data is transferred outside the EEA, we rely on appropriate safeguards such as standard contractual clauses.

5. Public video delivery

Original uploads are private. Published playback files and embeds are public: anyone with their URL may view or share them. Restricting studio access does not make published playback private.

6. Cookies and monitoring

Secure cookies maintain login and protect sign-in. PostHog records product usage and errors; error reporting filters sensitive exception details. We do not claim that all monitoring is anonymous, and session replay is not enabled.

7. Retention and deletion

Login sessions expire after seven days; expired sessions and sign-in state are cleaned periodically. Temporary encoding files are removed after jobs and on worker restart. You can delete videos and your account, which removes stored originals and playback files. Backup copies follow the configured recovery window and are removed as it rolls over. Copies already downloaded by others cannot be recalled. You can request deletion at hello@ohplayer.com.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to a supervisory authority. Contact hello@ohplayer.com; we respond within the time required by applicable law.

9. Security

We use access controls, encrypted storage for private originals, hashed session tokens, rate limiting and monitoring. No method of transmission or storage is completely secure.

10. Changes

We may update this policy. Material changes are communicated through the service or by email before they take effect.