These policies apply to TeraPlay services at teraplayer.online. Last updated 2026-06-03. Site: https://teraplayer.online. Questions: legal@teraplayer.online.
Privacy policy
Who we are
TeraPlay operates https://teraplayer.online, a browser-based resolver and in-page player for publicly shared TeraBox links. We provide link-resolution, playback, quota, account, history, and bookmark features. We do not upload or host video files on our servers and we are not affiliated with TeraBox or its owners.
Regional scope
TeraPlay is primarily intended for users in India, Pakistan, and the broader Asia region. Users from Europe, the United Kingdom, the United States, California, or other regions may still have local privacy rights where those laws apply, but those regions are not the primary target market unless we later market there directly.
What we collect
We collect account email, password hash, email-verification and password-reset data, account status, plan/quota data, play and download history metadata, bookmarks, canonical link hashes, guest quota identifiers, admin audit events, support messages you send, and technical logs such as IP-derived rate-limit keys, user-agent data where enabled, timestamps, and security events. We do not intentionally collect government ID, payment card data, or special-category data unless you voluntarily include it in a message to us.
Why we process data
We use this data to operate paste-and-play, resolve links through authorized providers, enforce quotas, authenticate users, deliver account and security emails, remember history and bookmarks, prevent abuse, protect admin tools, respond to copyright and lawful requests, troubleshoot service issues, and handle account deletion or data requests.
Legal bases (EEA/UK users)
Where EEA or UK data-protection law applies, our legal bases are contract performance for account and playback features; legitimate interests for security, abuse prevention, service logs, quota enforcement, and product reliability; legal obligation for valid legal, copyright, tax, or regulatory requests; and consent where required for optional cookies, analytics, marketing, or advertising.
Retention
We keep personal data only as long as needed for the purposes above. Signed-in playback history is designed to be pruned after the configured retention period, currently 90 days when the maintenance worker or equivalent job is running. Expired playback sessions and security audit events are rotated by maintenance jobs; audit events may be kept longer for security and abuse investigations. Deleted accounts are marked deleted, login is disabled, profile data is removed or anonymized, and related history and bookmarks are removed according to the account-deletion flow. Backup, log, legal, and abuse-prevention records may remain for a limited period where necessary.
Sharing and processors
We use service providers to run the site: Render for hosting and key-value infrastructure, Supabase for Postgres database hosting, Resend for transactional email, and xAPIverse or another configured resolver provider for authorized TeraBox link resolution. We may also disclose information when required by law, to enforce our Terms, to respond to copyright notices, or to protect users, the service, and upstream providers.
International transfers
Our providers may process data in the United States and other countries outside your country of residence. Where data-transfer laws require safeguards, we rely on provider data-processing terms, Standard Contractual Clauses, UK transfer safeguards, or other lawful transfer mechanisms made available by the provider.
Your rights
Signed-in users can delete their account from /account. You may request access, correction, deletion, restriction, portability, objection, or withdrawal of consent where applicable by emailing legal@teraplayer.online. For India-linked users, we will handle data-principal requests and grievances through this contact while DPDP Act compliance is implemented. EEA/UK users may lodge a complaint with their supervisory authority where GDPR/UK GDPR applies. California residents, where the CCPA/CPRA applies, may request to know, access, correct, delete, and opt out of sale or sharing. We do not currently sell personal information or share it for cross-context behavioral advertising.
Cookies and similar tech
We use essential HttpOnly cookies such as tp_session for signed-in sessions, tp_guest for guest quota, and tp_admin_mfa for admin security. These are necessary to provide the requested service and protect the site. We do not currently use third-party advertising cookies. Before adding non-essential analytics, advertising, or tracking cookies, we will update this policy and, where required, ask for opt-in consent before setting them.
Children
The service is not directed to children under 13 and is not intended for users who are too young to form a binding contract or use this type of service under local law. If you are under the age of majority, use the service only with permission from a parent or legal guardian. We do not knowingly collect personal information from children under 13. If you believe a child provided data to us, contact legal@teraplayer.online and we will take appropriate deletion or restriction steps.
Changes
We may update this policy as the service, providers, laws, or business model changes. Material changes will be posted on this page with an updated date. Continued use after changes means you accept the updated policy where permitted by law.
Contact
Privacy questions: legal@teraplayer.online.