Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared.

Last updated: August 24, 2026

This Privacy Policy describes how your personal information is collected, used, and shared when you visit prestoplayer.com, when you use Presto Player on a site we operate, and when you install the Presto Player plugin on a WordPress site of your own.

When a video or audio player built with Presto Player appears on someone else’s website, that website’s owner decides what their site collects from its own visitors and is responsible for their own privacy policy. This policy covers our own sites, and it covers the specific points where our own services or the third-party video platforms Presto Player connects to sit in the data path on a site you run. Those points are described under Using Presto Player On Your Own Website below.

Who We Are

We are Presto Made Inc, 651 N Broad St, Suite 206, Middletown, DE 19709, USA. You can find more information about us, including our full address, on our company website.

Contact for all privacy matters: [email protected]

What Personal Information We Collect

When you visit our website, we automatically collect information about your device, including your web browser type, IP address, and time zone. As you browse the Site, we also collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site.

Cookies and Similar Technologies

Cookies are small data files placed on your device, often including an anonymous unique identifier. We use cookies and similar technologies (such as pixels and tags) across our sites for the following purposes:

• Essential required for core site functionality, including security, load balancing, and keeping the cookie-preference tool itself working
• Functional remember your preferences and settings
• Analytics help us understand how visitors use our sites and test improvements to site design
• Marketing used for advertising measurement and remarketing

Our consent system is configured to prevent non-essential analytics and marketing technologies from running until the required consent has been provided through our cookie preference banner (powered by SureCookie). Functional technologies are handled according to their purpose and the applicable consent requirements. You can change your preferences at any time by clicking Cookie Preferences in the footer.

We honor the Global Privacy Control (GPC) signal where required by law. If your browser or extension sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of your personal information.

Our Cookie Policy contains the current list of cookies and tracking technologies identified by our consent-management scans and configuration, linked from the cookie preference banner. The list is updated when scans or configuration changes identify new technologies. As of this writing it lists, among others: surecookie_session_id (essential); Cloudflare’s __cf_bm, Google Tag Manager’s gtm_auth, Google reCAPTCHA’s _GRECAPTCHA, and Vimeo’s player cookie (functional); _ga/_ga_*, Vimeo’s vuid, and Powerful Docs’ pfd_docs_views (analytics); and Facebook/Meta’s _fbp, Google’s _gac_gb_*, and Google Maps’ NID/1P_JAR (marketing).

Retention: Records of your cookie consent choices are retained for up to 365 days, or less if manually cleared sooner, so we can demonstrate compliance with applicable consent requirements and honor your prior preferences on return visits.

Cookies We Set Ourselves

Presto Player stores a small amount of information in your browser’s local storage not in cookies so the player can remember how you use it. None of this information is sent to Brainstorm Force. This includes your playback position, so you can resume where you left off; player preferences such as volume, mute, playback speed, quality, and caption settings; a cached copy of a video’s caption text used for in-video search; and a record that you have already responded to or dismissed an email prompt on a video. Playback-position data is automatically deleted when you finish the video. The other local-storage entries have no fixed expiry and remain until you clear your browser’s site data. Presto Player sets no cookies for site visitors.

Third-party services loaded on pages with an embedded player such as YouTube, Vimeo, or Bunny.net (depending on which video source the site owner has chosen), or Google reCAPTCHA (spam protection on lead-capture forms) may set their own cookies once they run, under their own privacy policies.

Third-Party Services Loaded On Our Pages

Some pages on our Site load files from other companies. When your browser fetches one of those files, that company receives your IP address and basic details about your browser. The services below load only on pages that use the feature they belong to.

Service	Why it loads	When it loads	Basis
Vimeo, Inc. vimeo.com, player.vimeo.com, *.vimeocdn.com, arclight.vimeo.com	Hosts and streams our own product-demo videos	Pages with an embedded Vimeo-sourced video (e.g., our homepage)	Loads only after marketing consent, per our Cookie Policy’s categorization
Google reCAPTCHA (Google LLC) gstatic.com, google.com	Spam and abuse protection on our contact and lead forms	Pages with a reCAPTCHA-protected form (e.g., blog comments, contact page)	Loads with the page, as fraud and abuse prevention
Google Tag Manager (Google LLC)	Loads and manages our other tags, and reads your consent status to decide which may run	Sitewide	Service provider; loads before you answer the banner in order to evaluate your choice (Google Consent Mode)
Google Analytics (GA4 and legacy Universal Analytics) (Google LLC)	Understand site usage	Sitewide, only after consent	Analytics, only after consent
Google Ads / remarketing (Google LLC)	Ad performance measurement and remarketing	Sitewide, only after marketing consent	Shared for cross-context behavioral advertising, only after consent
Meta Pixel (Meta Platforms, Inc.)	Ad performance measurement and remarketing	Sitewide, only after marketing consent (per the live Cookie Policy’s _fbp disclosure)	Shared for cross-context behavioral advertising, only after consent
Google Maps (Google LLC) maps.google.com	Displays an embedded map on the page	Pages with an embedded map, only after marketing consent	Loads only after marketing consent, per our Cookie Policy’s categorization of this embed
Powerful Docs app.powerfuldocs.com	Knowledge Base search widget and the “Ask AI” chat assistant	Sitewide	Service provider; the AI chat only sends your message content, and your name/email if you provide it, once you start a conversation
Google Fonts (Google LLC) fonts.googleapis.com, fonts.gstatic.com	Supplies typefaces used on the site	Sitewide	Loads with the page; treated as presentation, not tracking
WordPress.org s.w.org	Core WordPress functionality (emoji support, update checks)	Sitewide	Service provider
Cloudflare, Inc.	Site performance, security, bot mitigation (including the __cf_bm cookie served alongside Vimeo embeds), and anonymized Web Analytics	Sitewide	Service provider, not sold or shared
ConvertBox	Popup lead-capture / email opt-in widget	Sitewide, only after marketing consent	Shared for cross-context behavioral advertising, only after consent, per our Cookie Policy’s categorization; receives the visitor information submitted through the lead-capture form, such as name, email address, and any other fields configured by the site owner

These services are used only on pages where the relevant feature is enabled. Their loading behavior and consent treatment depend on the function they provide and our site configuration. We do not use these services ourselves for advertising or behavioral profiling unless separately disclosed in this policy.

Information We Send To Third Parties From Our Servers

Spam checks. When you submit a protected form, the token generated by reCAPTCHA is sent to Google to be verified, together with your IP address.

Payments. Payment details you enter to purchase or renew a Presto Player license are sent to our payment gateways, Stripe and PayPal, to process the payment, as described under Purchase below.

Forms You Submit On Our Site

When you submit a form on our Site (for example, a pre-sales or support request on our Contact page), we store the answers you gave. Alongside those answers we may also record technical details about the submission, so we can tell genuine submissions from spam and troubleshoot problems:

• The name of your browser and the operating system or device you used
• The address of the page the form was submitted from
• Your IP address, where IP logging is switched on for that form

Separately from the record we store, a copy of your IP address may be included in the notification email a form sends to us. Notification emails are retained with the rest of our email records.

We use your IP address for a short anti-abuse check on each submission. For that check, the address is converted using a one-way hashing process, and the original address used for that check is discarded within one minute. The hash is not stored with the form submission.

Comments

When you leave comments on our blog, we collect the data shown in the comments form, along with your IP address and browser user-agent string, to help with spam detection (this is why reCAPTCHA loads on blog pages).

An anonymized string created from your email address (a hash) may be shared with the Gravatar service to check if you are using it. Gravatar’s privacy policy is available here. After your comment is approved, your profile picture is visible to the public alongside your comment.

Contact Forms

Information submitted through contact forms on our Site is sent to our self-hosted support desk. We may collect information including (but not limited to) your first and last name and email address. This information may be shared with our email marketing services, including our self-hosted CRM.

Support

To help with our products, we may ask for temporary access to your website, either your live site or a staging copy, whichever you prefer, such as an admin login or FTP/database credentials. We may also ask you to share a license key, name, or email address.

Troubleshooting typically takes place directly on your site itself, and in these cases we do not transfer, export, or store your site’s data on our own servers. We recommend a staging copy where practical, but understand this is not always feasible for every customer.

In some cases, particularly for more complex issues, we may create a copy of your website on our own servers to investigate the problem. Any such copy is used only for that investigation and is deleted once the issue is resolved.

A few important points about access shared with our support team:

• We use any access you provide strictly for debugging your specific issue, on your site itself
• We do not copy or retain your site’s data on our own systems, except where you authorize us to create a temporary troubleshooting copy as described above
• We do not share access or data with anyone outside the company
• We cannot be held responsible for loss of private information from your database or website. If you are able to share a staging site and keep a working backup of anything shared with us, we recommend doing so

Retention: We retain support ticket records, including any screenshots, logs, or other materials shared as part of a ticket, for as long as necessary to resolve the related issue, respond to any follow-up, and analyze recurring problems to improve our products. Support ticket records are not shared with any third party.

Purchase

Our store runs on WooCommerce, and payments are processed by our payment gateways, Stripe and PayPal. Credit card details are not stored by us on any internal or external database accessible to us.

All direct payment gateways adhere to PCI-DSS standards, managed by the PCI Security Standards Council, which help ensure secure handling of card information.

When you make or attempt a purchase, we verify your card through a payment gateway and collect information including your name, billing address, payment information, email address, and phone number. We also record your IP address and browser user-agent on your order at the time of purchase, consistent with our store software’s standard behavior.

Retention: Billing and transaction records are retained for as long as your license remains active, including to support renewals. Because we are subject to tax, accounting, and audit-related legal obligations, financial records are retained for the period required by applicable law even after account deactivation or a data deletion request. Your IP address and browser user-agent, captured at the time of purchase, are stored with the order record itself and are currently retained indefinitely along with it, rather than on a separate deletion schedule.

Information We Receive When You Set Up the Plugin

When you complete the Presto Player setup wizard, and if you opt in at that step, the plugin sends us your email address, first name, last name, and the domain of the site you are setting up, which we receive at metrics.brainstormforce.com. We use this information to provide product onboarding and service-related communications. We only use it for promotional marketing where we have an appropriate basis to do so, including consent where required, as described under Newsletter Emails below.

Retention: These records are retained for as long as we have a relationship with you, and you can ask us to delete them at any time by writing to [email protected].

Usage Data From Your Website

Presto Player includes a usage-tracking option that is enabled by default during setup the checkbox ships pre-selected. Unless you turn this off, Presto Player sends us technical and product-usage information about your website; you can turn it off at any time from the plugin’s settings, which stops this information from being sent going forward. We receive:

• Your site and server setup your site and network URL, WordPress version, language, timezone, SSL status, Multisite status, debug settings, PHP version, operating system and configuration limits, server software, MySQL, cURL and SSL versions, available PHP extensions, object-cache information, content-directory writability, and BSF Updater version.
• Counts from your site the number of users, published posts, and published pages.
• Your active theme and plugins for each active theme or plugin, its name, version, slug, and the author’s name and website.
• Your administrator email address this is personal information and may be associated with your website.
• Your use of Presto Player Presto Player version, video counts by source, recently added videos, Media Hub items, enabled features and integrations, daily video-view counts, and milestone events such as installing or updating the plugin, activating a license, publishing or first playing a video, completing or skipping setup, and deactivating the plugin. If you provide a comment in the deactivation survey, that comment is also sent to us.
• Request metadata information included with the request, such as your site’s URL and WordPress version in the request headers, and your server’s IP address.

This information is sent to analytics.brainstormforce.com, operated by Brainstorm Force. We do not receive information about your site’s visitors or the content of your videos or other site content through usage tracking. The information we receive is limited to the technical configuration, counts, and Presto Player usage information described above.

Why We Collect This Information

We use this information to understand the environments in which Presto Player is used and to improve the product. Server and configuration data helps us understand which PHP, MySQL, WordPress, and hosting configurations our customers use so we can maintain compatibility. The active plugin and theme information helps us identify potential compatibility conflicts and investigate common support issues. Feature and integration information helps us understand which features are being used so we can prioritize development. Video and view counts help us understand the scale at which Presto Player is being used and plan for performance and reliability. Milestone events help us understand how customers progress through setup and use the product, so we can improve onboarding and the overall experience.

License Keys

A license key is required to validate your purchase and unlock benefits like automatic updates, support, and extra resources. When you activate or deactivate a license key, or when your site checks for updates, we receive your license key, the product it belongs to, and your site’s domain. We keep a record of every domain where the key has been activated so we can enforce the number of sites your license covers. As with any request your site makes, we also receive your site URL and WordPress version in the request headers, and your server’s IP address. We do not receive your name or email address through license activation.

Retention: License activation records are retained while the license is active and afterwards for the period reasonably necessary for account history, support, fraud prevention, and tax/accounting obligations.

Using Presto Player On Your Own Website

When you run Presto Player on a site of your own, you decide what your visitors see and you are responsible for the privacy policy shown to them. Most of what the plugin does stays entirely on your server. There are several points worth knowing about, some of which involve third parties we don’t operate or control:

• Video sources. Presto Player can play video from YouTube, Vimeo, Bunny.net, an HLS stream, or a file hosted directly on your own server. Whichever you choose, that video platform receives your visitor’s IP address and browser information directly, under its own privacy policy, when the video loads. We do not sit in that data path the connection is between your visitor’s browser and the video platform you picked.
• Captions & AI translation. If you use the Pro captioning tools, your site asks Bunny.net to transcribe or translate a video that is already hosted in your own Bunny.net library, using your own Bunny.net credentials. The request goes directly from your site to Bunny.net, and the resulting captions are stored in your Bunny.net account. Brainstorm Force does not receive the audio, transcript, or translated text, and no other AI provider is involved. This feature is only available for Bunny.net-hosted videos.
• Analytics & Reports. The Pro analytics dashboard (view time, drop-off, top videos, and top viewers) is built for your own site and stays in your own WordPress database we do not receive this data. Note that these reports record each viewer’s IP address, and viewer identities are based on logged-in WordPress users on your site, so you should disclose this in your own privacy policy. If you have connected Google Analytics, video events are sent to your own Google Analytics property. Unless you have turned off usage tracking, we receive a daily count of video views a single number with no information about individual videos, pages, or viewers.
• Lead capture & email marketing integrations. If you connect Presto Player’s lead-capture forms to Mailchimp, MailerLite, FluentCRM, ActiveCampaign, or a similar tool, the information a viewer submits goes directly from your site to your own account with that provider, using your own credentials. We do not receive a copy.
• LMS integrations. If you connect Presto Player to LearnDash, Tutor LMS, or LifterLMS to gate video content behind a course, that processing happens on your own server; we do not receive a copy of your course or student data.
• Setup. If you opt in during the Presto Player setup wizard, it sends us your own name and email address, and your site’s URL is included in the request, as described under Information We Receive When You Set Up the Plugin above. This is about you as our customer nothing about your site’s visitors is sent to us at any point during setup.

Who We Share Your Data With

We do not sell or trade your personal information for money.

Some of our advertising and analytics tools involve sharing personal information with third parties for cross-context behavioral advertising, as that term is defined under California law, meaning those partners may use information about your activity on our sites to show you relevant ads elsewhere. This sharing only happens for the categories marked below, and only after you have provided consent through our cookie preference banner, or is subject to your California opt-out rights described further down.

Category	Service (domain detected)	What they receive	Purpose	Sale / Share / Service Provider
Tag management	Google Tag Manager (googletagmanager.com)	IP address, browser and device information, page URL	Loads and manages our other scripts and tags, and reads your consent status	Service provider, not sold or shared
Website analytics	Google Analytics (GA4 and legacy Universal Analytics)	Page views, device and browser identifiers, cookies	Understand site usage	Shared for cross-context behavioral advertising once GA4 audiences feed Google Ads
Advertising / remarketing	Google Ads (via our tag manager container)	Device and browser identifiers, cookies, page views	Ad performance measurement, remarketing	Shared for cross-context behavioral advertising, only after consent
Advertising / remarketing	Meta Pixel (Meta Platforms, Inc.)	Device and browser identifiers, cookies, page views, and only with consent, hashed contact info via Advanced Matching	Ad performance measurement, remarketing	Shared for cross-context behavioral advertising, only after consent
Video hosting	Vimeo, Inc.	IP address, device and browser identifiers, cookies	Host and stream our product-demo videos	Shared, only after marketing consent (per the live Cookie Policy’s categorization)
Office map	Google Maps	IP address, browser information	Display a map	Shared, only after marketing consent (per the live Cookie Policy’s categorization)
Popup lead capture	ConvertBox	Visitor information submitted through the lead-capture form, such as name, email address, and any other fields configured by the site owner	Display targeted popups and capture leads based on the site’s configuration	Shared for cross-context behavioral advertising, only after consent (per the live Cookie Policy’s categorization)
Payments, checkout	Stripe, PayPal	Billing and payment details, IP address, browser user-agent	Take and process payments	Service provider, not sold or shared
Spam protection	Google reCAPTCHA	IP address, interaction/behavior signals	Fraud and abuse prevention	Service provider, not sold or shared
AI chat support & Knowledge Base	Powerful Docs (app.powerfuldocs.com)	Chat messages, name/email if provided	AI-powered support assistance and self-serve docs	Service provider, not sold or shared
Typeface delivery	Google Fonts	IP address, browser information	Serve typefaces used on the site	Service provider, not sold or shared
WordPress core services	WordPress.org (s.w.org)	Basic request metadata	Emoji support, update checks	Service provider, not sold or shared
Content delivery, security & analytics	Cloudflare	IP address, request metadata	Performance, security, bot mitigation (including on Vimeo embeds), anonymized Web Analytics	Service provider, not sold or shared
Email delivery	Amazon SES	Email address	Transactional and marketing email	Service provider, not sold or shared
Profile pictures	Automattic Inc. (Gravatar)	Hashed email address	Show a profile picture next to a blog comment	Service provider, not sold or shared

Cross-BSF-product tracking: Because Brainstorm Force operates multiple distinctly branded product sites (Presto Player, SureForms, SureDash, Astra, Spectra, SureMembers, CartFlows, OttoKit, and others), each site runs its own independent cookie consent tool. Your consent choice on one BSF site does not carry over to another. If you want to opt out across multiple BSF properties, you will need to do so on each site individually.

How Long We Keep Your Data

• Support ticket records are retained for as long as necessary to resolve the related issue and analyze recurring problems, as described under Support above.
• Cookie consent records are kept for up to 365 days.
• Setup and license records are kept for as long as we have a relationship with you, and afterwards for the period our tax and accounting obligations require.
• Purchase and license records are kept for as long as you hold a license with us, and afterwards for the period our tax and accounting obligations require. Your IP address and browser user-agent from the time of purchase are retained indefinitely with the order record.
• Copies of data delivered to a connected third-party service are retained by that provider under its own rules rather than ours.

You can ask us to delete your data sooner. See What Rights You Have Over Your Data below.

Where Your Data Is Processed

Because we and some of our providers operate internationally, personal information may be processed outside your country. Where a restricted international transfer applies, we use the transfer mechanism required for the relevant jurisdiction and provider, such as applicable contractual clauses, adequacy arrangements, or other legally recognized safeguards. You can contact [email protected] for information about the safeguard used for a particular transfer.

EU/UK Representative

Adam Preiser, at [email protected], or use [email protected], and we will route it.

California Privacy Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to know what personal information we collect, use, disclose, and if applicable sell or share, and to request a copy of it
• Right to delete personal information we have collected from you, subject to certain exceptions
• Right to correct inaccurate personal information we maintain about you
• Right to opt out of the sale or sharing of your personal information. Based on the categorization above, this specifically means opting out of the advertising/remarketing tools (Google Ads, Meta Pixel, Vimeo, Google Maps, ConvertBox as categorized) that involve cross-context behavioral advertising
• Right to limit the use and disclosure of sensitive personal information, where applicable
• Right to non-discrimination for exercising any of the above rights

The remaining recipients listed in this policy process data under service-provider or processor terms for the purposes described in the table above.

To opt out of the sale or sharing of your personal information, click Cookie Preferences in the site footer. We also honor Global Privacy Control (GPC) signals as a valid opt-out request.

To exercise your other rights, contact us at [email protected]. We will verify your request and respond within 45 days, as required by law, with a possible 45-day extension for complex requests.

Your Rights Under India’s Digital Personal Data Protection Act (DPDP)

If you are located in India, you have the following rights as a Data Principal under the Digital Personal Data Protection Act, 2023:

• Right to access a summary of the personal data we hold about you and how we process it
• Right to correction and erasure of your personal data
• Right to grievance redressal, as described below
• Right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity
• Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before your withdrawal

We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental consent, consistent with the DPDP Act’s requirements for children’s data.

Grievance Officer: Adam Preiser, [email protected]

If you have a grievance regarding how we handle your personal data, you may contact our Grievance Officer at the address above, or write to us at [email protected] and ask for your message to be passed to the Grievance Officer. We aim to acknowledge privacy grievances within 72 hours and provide an expected resolution timeline. We aim to resolve most matters within 30 days and, where additional investigation is required, within 90 days. These are our internal response targets and may be updated where applicable law requires a different timeline.

How Secure Is My Information

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. We do not receive or store your credit card information directly Stripe and PayPal process your payment details under their own security programs, using current TLS encryption, when you make a purchase.

What Rights You Have Over Your Data

To exercise applicable privacy rights, including access, correction, deletion, objection, restriction, or withdrawal of consent where available, contact [email protected]. Some requests may be subject to legal exceptions or may not apply to processing we must continue for legal, security, accounting, contractual, or other permitted purposes.

Legal basis for processing (EEA and UK visitors): Depending on the purpose, we process your data based on your consent (for example, non-essential cookies and marketing communications), the necessity of processing to perform our contract with you (for example, fulfilling a purchase), our legitimate interests (for example, improving our services, spam prevention, and fraud prevention), or compliance with a legal obligation.

If you believe we have not complied with applicable data protection laws, you have the right to lodge a complaint with your local data protection authority.

Children’s Online Privacy Protection Act Compliance

We do not knowingly collect personal information from children under the age of 13. If we determine we have collected personal information from a child under 13, we will take reasonable measures to remove it from our systems. If you are under 13, please do not submit personal information through the Site, service, or Software.

Third-Party Links

We may include or offer third-party products or services on our website. These third-party sites have separate, independent privacy policies, and we hold no liability or responsibility for their content or activities.

Affiliate Disclosure

Some third-party links on our site may be affiliate links, tracked through our affiliate program. We earn a referral fee when you buy services from companies we recommend. If you purchase after clicking an affiliate link, we receive a commission.

Affiliate tracking cookies are subject to the same consent preferences described in the Cookies section above.

Remarketing and Targeted Advertising

We work with third parties including Google Ads, Google Analytics, and Meta to provide targeted advertisements or marketing communications that may interest you, based on your browsing activity on our sites. This may include cross-context behavioral advertising as defined under California law. For more on how targeted advertising works, see the Network Advertising Initiative’s educational page.

You can opt out of targeted advertising through Google or Meta directly, or by clicking Cookie Preferences in the site footer.

Newsletter Emails

We send product announcements, software updates, and special offers by email where you have subscribed, selected a marketing option, or where another lawful basis permits us to contact you. Where consent is required, we will only send marketing after you have provided it. You can unsubscribe from marketing at any time using the unsubscribe link in every email.

Marketing email is separate from the transactional email we have to send you about a purchase, a license, or a support ticket. Unsubscribing from marketing does not stop those.

If you are in the EEA or the UK, we will only send you marketing email where you have given consent, and we will never make that consent a condition of buying or using our products.

Will This Privacy Policy Ever Change

We may update this Privacy Policy when our products, services, data practices, or legal obligations change. We will update the “Last updated” date when we do so and, where required, provide additional notice or request consent before a material change takes effect.

Contact Us

For questions about our privacy practices or to make a complaint, contact us by email at [email protected] or by mail:

Presto Made Inc, 651 N Broad St, Suite 206, Middletown, DE 19709, USA

If you are in India and want to raise a grievance under the DPDP Act, you can write to our Grievance Officer, Adam Preiser, at [email protected], or use [email protected], and we will route it.