TollywoodTunes

Privacy Policy

Last updated: June 2026

This Privacy Policy explains what information TollywoodTunes ("we", "us", "our") collects when you visit tollywoodtunes.com and its subdomains (bollywood.tollywoodtunes.com, tollywood.tollywoodtunes.com, devotional.tollywoodtunes.com, auth.tollywoodtunes.com), and how that information is used and protected. The site is owned and operated by Tekcaliber.

1. Information we collect

We collect the following categories of information:

  • Account information. If you create an account, we store your email address and a one-way Argon2id hash of your password. We never store passwords in plaintext.
  • Authentication tokens. When you sign in, we issue an HTTP-only cookie containing a signed JWT and a refresh token. These cookies are scoped to .tollywoodtunes.com so they work across our subdomains for single sign-on. They are not accessible to JavaScript on the page.
  • Activity logs. Our server records the IP address, timestamp, requested URL, referrer, and user agent for each request, primarily for security auditing, abuse detection, and capacity planning. Audio play events are logged to help editors understand which content is popular.
  • Editorial submissions. If you submit a "Report this ad" form, we store the page URL, the reason you selected, any free-text details you provided, the slot identifier, the network, and your IP address, so an editor can review the report.

2. How we use this information

We use the information we collect to:

  • Authenticate you across our subdomains using a single sign-on flow.
  • Maintain the security and integrity of the service — including detecting brute-force login attempts and abuse.
  • Operate, maintain, and improve the site.
  • Respond to support requests and editorial enquiries.
  • Comply with our legal obligations and enforce our Terms of Service.

We do not sell your personal information.

3. Cookies and similar technologies

We use cookies for the following purposes:

  • Authentication cookies (tt_at, tt_rt) — required to keep you signed in across subdomains. HTTP-only, Secure, SameSite=Lax.
  • Session cookies (tt_session) — used to protect form submissions against cross-site request forgery (CSRF).
  • Advertising cookies set by our advertising partners (see section 4). These are governed by the partners' own privacy policies.

You can clear cookies at any time through your browser's settings. Clearing the authentication cookies will sign you out.

4. Third-party advertising

We display advertising on parts of our site to support our editorial operations. We work with two advertising partners:

  • Google AdSense. Google, as a third-party vendor, uses cookies to serve ads on our site. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and other sites on the Internet. You may opt out of personalised advertising by visiting Google's Ad Settings. For more information, see how Google uses information from sites that use its services.
  • Media.net. Media.net is a contextual advertising network that may use cookies and similar technologies to serve relevant ads. For details, see the Media.net Privacy Policy.

We do not run pop-ups, pop-unders, push notifications, or interstitial advertising. We do not work with low-quality ad networks. Each ad slot on our site carries a "Report this ad" link; if you encounter an ad that is misleading, offensive, or otherwise problematic, please report it and an editor will review it within a few business days.

5. Server logs

Our hosting provider (Hostinger) and our content-delivery layer keep standard server access logs containing IP addresses, request timestamps, URL paths, response codes, and user-agent strings. These logs are retained for a limited period (typically 30 days) for security and capacity-planning purposes.

6. Data retention

Account data is retained for as long as your account is active. Refresh tokens expire 30 days after issuance and rotate on each use. Audit logs are retained for one year. Ad-report submissions are retained for 90 days after they are marked resolved.

7. Children's privacy

TollywoodTunes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at info@tekcaliber.com and we will delete the information.

8. Your rights

You may at any time:

  • Request a copy of the personal information we hold about you.
  • Request correction or deletion of that information.
  • Withdraw consent to non-essential data processing.

To exercise any of these rights, email us at info@tekcaliber.com. We will respond within 30 days.

9. Security

We protect your information using industry-standard measures: passwords are stored as Argon2id hashes; authentication cookies are HTTP-only and Secure; database connections are encrypted in transit; refresh tokens rotate on every use and trigger session revocation on reuse-detection. No system is perfectly secure; if you suspect your account has been compromised, change your password and contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we update the "Last updated" date at the top. Material changes will be announced on the site. Continued use of the site after a change indicates your acceptance of the revised policy.

11. Contact

Privacy questions and data-rights requests:

Tekcaliber
Email: info@tekcaliber.com