Privacy Policy

Last Updated: June 25, 2026

This Privacy Policy explains how TanuPlay ("we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website, short-drama viewing service, account dashboard, membership subscriptions, payment flows, and related APIs (collectively, the "Services").

If you do not agree with this Policy, please do not use the Services.

1. Scope

This Policy applies to:

• The TanuPlay website and related pages.
• Account access via email-based authentication.
• Subscription purchase and payment flows.
• Membership access and paid-episode entitlement flows.
• Customer support communications.

This Policy does not govern third-party websites, apps, or services that we do not control (for example third-party payment services).

2. Information We Collect

We collect information in the following categories.

2.1 Information You Provide

• Email address used to purchase and/or sign in.
• Plan selection.
• Messages sent to support ([email protected]).

2.2 Payment and Transaction Information

• Order number and order status.
• Payment service identifiers and related payment, order, customer, or subscription IDs.
• Payment status and timestamps (pending, processing, paid, failed, canceled, expired, refunded).
• Plan type, price ID, currency, amount fields.

We do not store full card numbers or card security codes in our systems. Payment processing is handled by third-party payment services.

2.3 Account and Authentication Data

• Supabase Auth user ID and email.
• Session/auth status needed to protect dashboard and claim APIs.
• Account linkage data used to bind purchases to the authenticated user.

2.4 Membership and Viewing Data

• Membership plan and status (for example non-member, active, canceled but still valid, expired, processing, or abnormal status).
• Membership validity period and renewal status.
• Drama and episode access checks needed to determine whether paid episodes can be played.

2.5 Device, Network, and Usage Data

• IP address and user agent from API requests.
• Request metadata used for fraud prevention and troubleshooting.
• Basic technical logs (including webhook processing and API error logs).

2.6 Data from Third Parties

We receive limited data from service providers, including:

• Payment service webhook events about subscription lifecycle and payments.

3. How We Use Information

We use collected information to:

• Create and manage orders, subscriptions, and membership status.
• Provide access to free and paid drama episodes based on account and membership status.
• Enable authenticated dashboard access, subscription management, and cancellation flows.
• Prevent abuse (for example rate limiting sensitive requests and protecting paid-episode access).
• Send transactional emails (purchase/renewal/login-related notifications).
• Provide customer support and resolve disputes.
• Meet legal, accounting, tax, and compliance obligations.

4. Legal Bases (Where Applicable)

Depending on your jurisdiction, our legal bases may include:

• Performance of a contract (providing subscriptions, memberships, and drama access you purchase).
• Legitimate interests (security, fraud prevention, and diagnostics).
• Compliance with legal obligations.
• Consent (where required for specific processing activities).

5. Cookies and Similar Technologies

We use cookies or local storage mechanisms to:

• Keep sessions and state.

You may adjust browser settings to block cookies, but some functions may not work correctly.

6. How We Share Information

We may share data with service providers strictly to operate the Services:

• Third-party payment services (payment and subscription processing)
• Supabase (authentication and database infrastructure)
• Resend (transactional email delivery)
• Cloudflare R2 / Cloudflare (video storage, delivery, hosting, security, CDN, and infrastructure)

We may also disclose data:

• To comply with law or legal process.
• To protect rights, safety, and integrity of users and Services.
• In connection with merger, financing, acquisition, or asset transfer (subject to applicable law).

We do not sell personal information for money.

7. International Transfers

Your information may be processed in countries where our providers operate. We take reasonable steps to ensure appropriate safeguards consistent with applicable law.

8. Data Retention

We retain information for as long as needed to:

• Provide services and maintain account/order history.
• Support claims, dispute handling, tax/accounting records, and legal obligations.
• Enforce our Terms of Use and prevent fraud/abuse.

Retention periods vary by data type and legal requirements. When data is no longer needed, we delete or anonymize it where feasible.

9. Security

We implement technical and organizational measures intended to protect data, including:

• Access controls and service-level authentication.
• Webhook verification and server-side validation.
• Rate limiting on sensitive operations.
• Restricted operational access to production systems.

No online service can guarantee absolute security.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Access personal information.
• Correct inaccurate data.
• Request deletion of certain information.
• Object to or restrict certain processing.
• Receive a portable copy of certain data.
• Withdraw consent where processing is based on consent.

To exercise rights, contact: [email protected].

We may need to verify identity and may decline requests where lawful exceptions apply.

11. Children

The Services are not directed to children under the age required by applicable law to consent independently to data processing in their jurisdiction. If you believe a child provided data inappropriately, contact us.

12. Third-Party Links

Our Services may link to external services, including app/deep-link targets. Their privacy practices are governed by their own policies.

13. Membership and Viewing Privacy Notes

• Membership status, payment event, and access-check history may be retained for auditability, troubleshooting, fraud prevention, and customer support.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will:

• Update the Last Updated date at the top of this page.
• Provide additional notice if required by law or if changes are material.

Your continued use of the Services after the effective date of an updated Policy means the updated Policy applies, to the extent permitted by law.

15. Contact Us

For privacy questions or requests:

• Email: [email protected]