FAQ

Security questions, answered.

If someone is searching how to download protected videos or how to screen record protected videos from your page, AtomicPlayer's four-layer defense stops them: (1) domain lock so only whitelisted domains can embed, (2) signed URLs with time-limited tokens per playback session, (3) Widevine + FairPlay DRM to encrypt premium content at the browser level — blocking attempts to download protected videos or screen record protected videos — and (4) geo-blocking to refuse playback by country.

Widevine, FairPlay, SSO, and audit log are on the $249/mo Scale plan.

If you're asking what is a signed URL (or what is signed URL / what is a pre signed URL), it's a playback URL that carries a cryptographic token valid only for a specific viewer, IP, or time window — typically 5–60 minutes.

Even if someone copies a signed URL, it expires and cannot be shared to unauthorized viewers. AtomicPlayer generates signed URLs automatically on every play for Pro and Scale customers, making it one of the simplest implementations of pre signed URL security for video.

If you're asking what is domain lock or what is a domain lock, it's a whitelist that restricts a video to load only on domains you approve — so a stolen embed code refuses to play on any other site.

In AtomicPlayer, domain lock is configured per video. Combined with signed URLs, a domain lock means even a copied embed plus URL cannot be replayed off your pages. Domain lock is available across paid plans as the first of the four anti-piracy layers.

Understanding what is DRM (digital rights management) starts with the two standards that matter for video: Widevine DRM and FairPlay DRM.

Widevine DRM is Google's system for Chrome, Android, and Firefox. FairPlay DRM is Apple's system for Safari and iOS. Together they cover every modern browser, encrypting what is DRM video content at the browser level so it can't be captured by standard downloaders. For creators who want to go DRM free on some content while protecting premium assets with digital rights management, AtomicPlayer ships both Widevine and FairPlay together on the $249/mo Scale plan, alongside SSO and an audit log.

Yes.

Geo blocking lets you allow or refuse playback based on the viewer's country, which is useful for licensing limits, regional launches, or blocking regions where piracy is concentrated. In AtomicPlayer, geo blocking rules sit alongside domain lock, signed URLs, and DRM as the fourth anti-piracy layer, and refused plays never load the video stream at all.

Trust

Security

Last updated: June 24, 2026.

Security is foundational to AtomicPlayer. Operators trust us for secure video hosting — to hold their videos and measure the attention that drives their revenue — and we treat that responsibility seriously. This page summarizes the practices we use to protect your account, your videos, and your data, including private video hosting, video access control, and password protected video options. It complements our Terms of Use and Privacy Policy.

Infrastructure and hosting

AtomicPlayer runs on established cloud infrastructure providers, with video delivered through a global content delivery network (CDN) for performance and resilience. Personal data and other information may be stored and processed on servers located in Brazil or abroad, as described in our Privacy Policy.

We design for availability and isolate production environments from development and testing environments.

Encryption

Data is encrypted in transit using TLS (HTTPS) across the application, the player, the API, and our dashboards. Data at rest is stored in secure systems with encryption applied by our infrastructure providers — the foundation of secure video hosting.

Access control

Access to production data is restricted to authorized personnel with the appropriate credentials, on a least-privilege basis. Those individuals are bound to maintain the confidentiality of information and not to use it improperly. On your side, granular video access control and password protected video options keep each upload private; your account is protected by your password, the knowledge of which is exclusive to you.

Sub-processors and vendors

To operate the platform we rely on a limited set of service providers — for example, hosting and CDN, data backup, fraud prevention, email delivery, databases, payment processors and gateways, and invoicing. We require these providers to include, in their contracts, provisions guaranteeing due protection, secrecy, and confidentiality in the processing of data.

Data retention and deletion

We retain personal data only as long as necessary for the purpose for which it was processed, and to meet legal and regulatory obligations. Key windows include:

  • Account data is generally stored for a minimum of 12 (twelve) months, or longer where required by law or judicial/administrative order.
  • On request, registration data you provided is definitively deleted within a maximum of 15 (fifteen) days.
  • Access logs (IP addresses), if any, are discarded once they reach 180 (one hundred and eighty) days of storage.
  • After account cancellation, videos and related data are retained for up to 30 (thirty) days, after which they may be deleted.

Monitoring, backups, and resilience

We monitor the platform for availability and integrity and maintain data backups to support recovery. In the event of a serious, proven infrastructure failure, our Terms of Use describe the applicable remedies.

Your role in security

Security is a shared responsibility. You agree to keep your login and password secure and out of reach of third parties, not to allow your account to be used by others, and to keep your own device environment secure using available tools such as antivirus and firewall. With features like password protected video and domain-locked embeds, you stay in control. Please notify us immediately of any unauthorized use of your account or unauthorized access by third parties at [email protected].

Compliance

Our processing of personal data is governed by Brazilian law, principally the Civil Rights Framework for the Internet (Law No. 12.965/2014) and the General Data Protection Law (Law No. 13.709/2018 – LGPD). AtomicPlayer maintains a Data Protection Officer (DPO), who can be reached at [email protected].

Reporting a vulnerability

If you believe you have found a security vulnerability, we want to hear from you. Please report it responsibly to [email protected] with enough detail to reproduce the issue, and allow us reasonable time to investigate and remediate before any public disclosure. We appreciate the work of the security community in helping keep AtomicPlayer safe.

This Security overview is provided for transparency and complements our Terms of Use and Privacy Policy, whose original Brazilian-Portuguese versions are controlling. Security questions: [email protected].