The video is never public. Playback runs on a signed link that expires in seconds, so a copied URL is worthless almost immediately.

Metering follows real playback. Heartbeats are sent only while the video is genuinely playing, so a paused tab consumes nothing.

The server can stop you mid-play. If access is refunded or the window closes while watching, the next heartbeat ends playback.