Account protection
Passwords are stored only as secure hashes. Two-factor authentication with recovery codes, rate-limited sign-in and remote sign-out of other sessions are built in.
Security
Unreleased cuts, client films and internal video don’t belong on a public platform. VodSpot is built so your videos are seen only by the people you send them to — and only for as long as you decide.
✓ 7-day free trial 5 GB included No credit card
Safeguards
Passwords are stored only as secure hashes. Two-factor authentication with recovery codes, rate-limited sign-in and remote sign-out of other sessions are built in.
There is no public profile, no search and no recommendations. Delivery and share pages are excluded from search engines.
Every delivery can have a password, an expiry date and download access you control. Revoking a delivery disables the link immediately.
Client links use long random identifiers, and password attempts are rate-limited to stop guessing.
Video streams and original downloads are served through signed URLs that expire within minutes, so a copied file address quickly stops working.
Embeds play only on the domains you approve. Opening the embed address directly or placing it on another site shows nothing.
Storage and transport
Originals and streaming files are stored in Cloudflare R2 object storage, which encrypts all data at rest. Uploads go straight from your browser to storage over HTTPS in short-lived signed parts, and every page, stream and download is served over HTTPS.
Payments are processed by our payment provider. Card details never reach VodSpot servers.
Access inside your team
Workspace roles separate responsibilities. Owners and Admins manage settings, billing and members; Editors create projects, upload and prepare deliveries; Viewers can only watch. Removing a member ends their access to the workspace immediately.
Every team member signs in with their own account and can protect it with two-factor authentication — no shared passwords.
Your data
VodSpot shows no ads and doesn’t sell viewer data. Analytics are limited to what matters for delivery — views, watch time, completion and downloads.
You decide how long content lives here: delete a video, a project or an entire workspace from the dashboard at any time.
Responsible disclosure
Found a security issue? Send it with the steps to reproduce, the affected URLs and the likely impact. Test only against your own account and data, and give us reasonable time to fix the issue before disclosing it.
Report suspected vulnerabilities with reproduction steps and affected URLs. Do not access data that is not yours.
Questions about personal data, privacy, and requests to exercise your data rights.
FAQ
Yes. Videos have no public side, every delivery can be protected with a password and an expiry date, media is served through short-lived signed URLs, and accounts support two-factor authentication.
No. There is no public catalog, and delivery and share pages are excluded from search engines.
A client can forward the link, but a password stops anyone who doesn’t know it. You can also set an expiry date or revoke the delivery at any time.
Yes. Files are encrypted at rest in storage and transferred over HTTPS.
Original downloads are available only when you enable them for a delivery. Like any web player, VodSpot can’t prevent screen recording.
Not yet. Each team member signs in with their own account protected by two-factor authentication.
Guides
Private sharing
Choose the right access controls, package the viewing experience, and test every client path before you send the link.
Read the guideVideo security
Passwords are one useful layer. Good private delivery also depends on expiry, revocation, clear communication, and sensible recipient access.
Read the guideResearch & Insights
Cloud storage was designed for document collaboration, not video delivery. The data on accidental exposure, forwarding cascades, and unrevoked access tells a clear story.
Read the guidePrivate from the first upload
Start with seven days and 5 GB. No credit card required.