Privacy Policy

Last updated: 10 Mei 2026

1. Who We Are

DramaPetir is a drama aggregator service operated independently. We index publicly available drama listings from third-party platforms (DramaBox, ShortMax, ReelShort, PineDrama, GoodShort) and stream them with Indonesian subtitle support. We do not own the underlying content.

2. Data We Collect

We minimize data collection. Depending on how you sign up, we may store:

  • Email address (email signup or Google login)
  • Telegram user ID + username (Telegram MiniApp login only)
  • Display name and avatar URL (auto-populated from your OAuth provider)
  • Watch history, My List bookmarks, and Likes (locally + synced to server when logged in)
  • Browser fingerprint (anonymous guest ID) — only to attach VIP/watch history to your account on later signup
  • Payment metadata (amount, plan, payment ref code, paid timestamp). Card/bank details are NEVER stored on our server — Saweria handles the transfer.
  • Referral commission ledger (audit trail for earned/withdrawn amounts)

3. How We Use Your Data

  • Provide and operate the service (authentication, VIP gating, watch sync)
  • Process payments and grant VIP entitlements
  • Send transactional emails (receipts, account verification, payout confirmations)
  • Calculate referral commissions and process cashouts
  • Investigate fraud, abuse, or terms violations

We do NOT sell your data. We do not run third-party advertising trackers. We do not share data with marketing partners.

4. Third-Party Services

We use the following third parties strictly to operate the service:

  • Saweria — QRIS payment processing. Saweria sees your name + email at checkout but the email is a proxy address — your real email reaches us, not them.
  • Resend — Transactional email delivery (receipts, OTP).
  • Google OAuth — Sign-in only. We only receive your Google account ID, email, name, and avatar.
  • Telegram — MiniApp authentication + bot DM notifications.
  • Upstream drama sources — When you stream a video, the HLS/MP4 segments are fetched from the upstream CDN. They see your IP.

5. Cookies

We use a single HttpOnly session cookie (`dp_session`) to keep you logged in, plus a short-lived `dp_ref` cookie to remember referral codes between landing and signup. We do not use third-party tracking cookies.

6. Your Rights (Indonesia PDP Law)

Under Law No. 27/2022 on Personal Data Protection, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your account and associated data ('right to be forgotten')
  • Withdraw consent for data processing at any time
  • Lodge a complaint with the data protection authority

To delete your account, open Profile → Account & Security → 'Delete Account'. Deletion is processed immediately and irreversibly.

7. Data Retention

Active account data: as long as your account exists. Payment audit records: 5 years (Indonesian tax/accounting law). Anonymized usage logs: 12 months. After account deletion, your personal identifiers are removed; payment audit entries are anonymized but retained for compliance.

8. Children

DramaPetir is not directed at children under 13. We don't knowingly collect data from anyone under 13.

9. Changes to This Policy

We may update this policy as the service evolves. Material changes will be announced via email and on the home banner. Continued use after the effective date means you accept the updated policy.

10. Contact

For questions about this policy or to exercise your rights, contact support@dramapetir.com.