Effective date: 17 September 2026

Privacy notice

Last updated: 2 November 2026

Aron Ásberg Björnsson operates AdPlayr from Hafnarbraut 12A, Kópavogur, Iceland and is responsible for personal information used to administer the service. Contact support@adplayr.com with privacy questions or requests.

Information we use

We process your account and contact details, company memberships and roles, uploaded media, menu board designs, product descriptions, photos and prices, playlists, schedules and shared calendar notes, screen identifiers, last-contact information and alert preferences, billing references and support messages. Technical and security logs help us investigate faults and protect accounts. Paddle handles payment details entered in its checkout; AdPlayr uses transaction and subscription references to manage access and billing information.

Why we use it

We use information to provide the service and respond to support requests, relying on performance of a contract where applicable. Our legitimate interests in operating a secure, reliable service support security, troubleshooting and business account administration, subject to your rights. We retain legally required records to meet applicable obligations. Where optional processing requires consent, we must obtain it before that processing starts.

If a customer uploads personal information in display content, that customer generally decides why it is used. AdPlayr processes it to provide the requested service. The customer is responsible for having an appropriate basis and permissions to upload and display it. Company members with access can see shared company information, and connected screens receive the content assigned to them. Contact us before uploading personal data that requires a customer data processing agreement so that the necessary terms can be arranged.

Screen connection alerts

Offline and recovery email alerts are enabled by default for company owners and admins and sent to their verified account email address. We use screen last-contact information and saved alert preferences to identify an outage and avoid duplicate notifications. Alert emails include the company name, screen name and last-contact or recovery time. Offline alerts also include the last known local IP address when available. A recovery email is sent after a notified outage when the player resumes checking in. You can turn these alerts off or change the delay in Settings under Screen connection alerts. These are service notifications, not marketing emails.

Service providers

• Supabase: account authentication and database services. Our project’s database region is Ireland (eu-west-1).
• Vercel: application hosting and associated technical logs.
• Cloudflare R2: uploaded media storage and delivery.
• Cloudflare Turnstile: security checks on account forms to help prevent automated sign-ups and abuse, under Cloudflare’s privacy policy.
• Namecheap Private Email: support mailbox and correspondence.
• Resend: account verification, password-reset and screen offline alert email delivery.
• Paddle: payment, subscription and invoice services, under its own privacy notice.
• Google: optional Google sign-in, if you choose Continue with Google, under Google’s privacy policy.

Where information is processed

The main application database is hosted in Ireland. Our providers operate international infrastructure, and hosting, delivery, email, support and payment processing may involve other countries, including the United States. An Irish database region does not mean all information stays in Iceland or the European Economic Area (EEA).

Transfers outside the EEA must have a lawful basis, such as an applicable adequacy decision or appropriate contractual safeguards. Our providers’ published data processing terms describe their transfer arrangements, including standard contractual clauses where applicable. You can contact support@adplayr.com for information about the safeguards relevant to your data and how to obtain a copy. Paddle separately explains its processing and transfers in its privacy notice linked above.

Cookies and device storage

We use cookies and similar storage to provide the service and remember settings you choose. AdPlayr does not currently use advertising cookies or optional audience-analytics trackers. We do not show an “Accept all” banner for the functional and security uses described below. Optional tracking would need a separate consent choice before being enabled where consent is required.

• Sign-in and company selection: Supabase authentication cookies keep your session signed in, and an AdPlayr cookie remembers the company you select.
• Language: when you choose a language, a cookie remembers that choice for up to one year.
• Invitations and offers: after you follow an offer’s sign-in or signup flow, a cookie can remember the invitation for up to 30 days so it can be completed after authentication.
• Requested preferences: local browser storage remembers your chosen theme, calendar filters and dismissed alerts. Dismissing an alert hides that incident for 24 hours in that browser.
• Security and payments: Cloudflare Turnstile checks account forms for abuse. Paddle’s checkout may use storage for the payment service you request, under its own privacy notice linked above.

Website fonts and the product-tour video are hosted by AdPlayr; viewing them does not load Google Fonts or an embedded third-party video player.

The Windows player saves monitor assignments on the player computer. Independently paired displays keep separate browser profiles for pairing and downloaded content. Those profiles share browser resources, while their pairing and content storage remain separate. Turning a local player off retains its saved data; disconnecting a screen on the website revokes its access.

Player device storage supports screen pairing, settings, software-update checks and saved playback content. Your browser controls cookies and local storage. Clearing them can sign you out, reset your preferences, remove pairing or remove offline content. Blocking necessary storage can prevent sign-in or playback from working.

Retention and deletion

Company media remains available in storage when a subscription expires; cancellation does not itself delete it. Deleting a login does not automatically delete shared company data. You can delete your account in My account, and company owners can delete eligible companies in Settings. Account deletion requires another active, verified owner for each company you own, unless that company is deleted separately. Companies linked to billing or a pending checkout require support review. Contact support@adplayr.com if you need help with deletion or a privacy request.

Deleted media is queued for physical removal from storage. Removal is delayed and retried if it fails, so it is not immediate. Previously saved copies can remain on player devices. Deletion from the application does not erase original files or other copies you or your team hold.

How retention is determined

• Account, membership and company information is kept while the account or shared company needs it to use the service. Deletion requests are assessed separately where other members still use the company.
• Support correspondence is kept to handle the enquiry, follow-up issues and any related dispute. Information no longer needed for those purposes should be deleted or anonymized.
• Billing and transaction records are kept for applicable accounting and tax requirements and for resolving payment disputes. Paddle also retains records under its own legal obligations and privacy notice.
• Security and audit records are kept as needed to investigate incidents, prevent misuse and establish what happened when account or company access changes. Provider log retention also depends on the service and account configuration; there is no single retention period for all logs.
• Limited trial history, including a hashed email identifier, can remain after account deletion to enforce the one-trial-per-customer rule. Deleted-file identifiers can remain to prevent accidental reuse of a storage key. These records are distinct from the deleted media files.

Retention may be extended where information is needed for a legal obligation or an unresolved claim. Any remaining backup copies are subject to their own retention and replacement cycles; removal from the active service does not mean immediate removal from every copy. Contact us for details relevant to a particular deletion request. AdPlayr is not a backup service; keep your original media separately.

Your rights

Depending on applicable law, you may request access, correction, erasure, restriction or portability of your personal information, object to certain processing, and withdraw consent where we rely on consent. We may need to verify your identity before responding. Email support@adplayr.com to make a request.

You may also complain to Persónuvernd, the Icelandic Data Protection Authority. This notice does not restrict mandatory rights. Material updates will be communicated as required.