Summary
- There are no accounts, ads, analytics or viewing tracking.
- For licensing (Android, Android TV, LG webOS and Samsung apps only) we keep an irreversible hash of your device identifier and your trial/licence dates; we never record what you watch. The iPhone and iPad app uses no licence, trial or device identifier and sends us no personal data.
- Your playlist and login details stay on your device only and are not sent to GUIDE PLAYER LLC. If you use "Upload list" on this website, they travel end-to-end encrypted; we cannot read them and delete the ciphertext within 15 minutes.
- The app loads content directly from the service you add, which is not ours.
- This website uses no cookies or trackers.
- If you e-mail us, we use it only to reply.
1. Controller and scope
This policy covers the GUIDE PLAYER Android TV, LG webOS, Samsung Tizen, Android and iOS apps (the "App") and this website (the "Site"). The controller of your personal data is:
GUIDE PLAYER LLC
264-410 3rd St, Shoshoni, WY 82649, USA
E-mail: [email protected]
This policy was prepared with regard to the EU General Data Protection Regulation ("GDPR"), the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, other data protection laws.
2. Information handled in the App
You don't need to give us any personal data to use the App. The following is created and stored only on your device; GUIDE PLAYER LLC has no access to it:
- Playlist name, server address, username and password (the password is encrypted with the device's secure key store),
- Favourites, watch history, resume positions, profiles and settings,
- Caches of playlists, guides and artwork downloaded from your service.
This data is excluded from Google and iCloud backups and is removed when you uninstall the App. If you create a backup file in the TV app, where you keep it is under your control.
Send to TV
With "Send to TV", details are transferred directly between your two devices on the same local network, protected by a PIN. The transfer does not pass through GUIDE PLAYER LLC's servers.
Upload list (website to TV)
With "Upload list" you type your list details on this Site and they are delivered to your TV. How it works:
- The TV app creates a one-time key pair for each code. The private key stays in the TV's memory only and is discarded when you leave the screen.
- The Site encrypts the details in your browser with that TV's public key (ECDH P-256, AES-256-GCM) before anything is sent. Our relay server (a Cloudflare Worker) only ever receives unreadable ciphertext.
- The relay stores the code, the TV's public key, a hash of the TV's access token and the ciphertext, and deletes them as soon as the TV collects the details or after 15 minutes at the latest. These records are not linked to any person or account and are not logged by us.
- Like any website, Cloudflare technically processes your IP address to deliver the request and to limit abuse (see section 5).
Because we cannot decrypt the details, we cannot view, recover or disclose them. The details only take effect after you confirm them on the TV.
Licence and trial
To manage the trial and your licence, the App contacts our licence server (a Cloudflare Worker) on first launch and periodically afterwards. This processes:
- an irreversible SHA-256 hash of the device's Android identifier (Android ID); the identifier itself is not sent,
- the device code shown to you, device type (TV/phone), trial end date, licence type and end date, and time of the last check,
- if you place a request on the activation page: your email address, (optionally) your name, the chosen plan and the request date.
Your playlist details, viewing history or what you watch are never sent to the licence server.
Remote settings
On launch the App downloads a small, digitally signed settings file from our website (feature switches, service announcements, maintenance notices, minimum supported version). This is a plain file request: no account, device identifier, playlist or viewing information is sent with it, and nothing about you is recorded. As with any web request, Cloudflare technically processes your IP address to deliver the file (see section 5).
Permissions
The App only uses the permissions needed for the related feature: internet access, local network access (Send to TV), camera (only when you choose to scan a QR code) and notifications/background playback. Camera images are not stored and never leave the device.
3. The content service you add
The App loads playlists, programme guides and streams directly from the server you enter. That service provider can see your IP address, device details, account details and viewing activity. It is an independent third party, its own privacy terms apply, and it is responsible for that processing.
4. Third-party services
Some optional features send requests directly to the services below. Your account details and viewing history are never included, but each service can technically see your IP address.
| Service | Purpose | When |
|---|---|---|
| The Movie Database (TMDB) | Movie and series details, artwork, trailer links | When you open movie/series details in the TV app (requests may be relayed through an intermediary server) |
| OpenSubtitles | Subtitle search and download | Only when you sign in with your own account and search |
| YouTube (Google) | Trailer playback | Only when you choose to watch a trailer; YouTube's terms and Google's Privacy Policy apply |
| Open-Meteo, ipapi.co | Weather and approximate (city-level) location | Only if weather is turned on in the TV app |
| Connectivity check | When the TV app checks your connection | |
| Google, Cloudflare or Quad9 | Secure DNS resolution | Only if you turn it on in settings |
5. This website
The Site uses no cookies, ads, analytics, social plug-ins or third-party fonts. It is hosted on Cloudflare, Inc. infrastructure. When you visit, Cloudflare processes technical records such as your IP address, browser details and request time to deliver pages and protect against abuse and attacks, acting as our processor. See the cookie policy.
6. When you contact us
When you e-mail us, your name, e-mail address, message and anything you attach are used only to answer your request, review legal notices and, where necessary, meet our legal obligations. Please do not send your login details or password in support requests.
7. Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Site technical records | Deliver and secure the Site | GDPR Art. 6(1)(f) legitimate interests; KVKK Art. 5(2)(f) |
| Upload list relay | Deliver the encrypted details you send to your TV | GDPR Art. 6(1)(b) (the service you request); KVKK Art. 5(2)(c) |
| Licence and trial records, activation requests | Provide the trial and the licence you bought, match payments, bookkeeping | GDPR Art. 6(1)(b) and (c); KVKK Art. 5(2)(c) and (ç) |
| Support correspondence | Answer your request | GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f) |
| Legal notices and requests | Review notices, protect rights | GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(ç) and (e) |
We do not use personal data for automated decision-making or profiling, do not sell it and do not share it for advertising.
8. Recipients and international transfers
Personal data may be shared only with our infrastructure providers (Cloudflare for hosting, our e-mail provider) and, where legally required, with competent authorities. These providers may process data outside Türkiye and the European Economic Area. Such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the safeguards set out in KVKK Art. 9.
9. Retention
- Site technical records: not retained by us beyond Cloudflare's short-lived security logs.
- Licence record: for the life of the licence and up to 1 year after it ends; trial records without a licence up to 2 years after the last check.
- Activation requests and sales records: as long as tax and bookkeeping rules require (up to 7 years).
- Support correspondence: up to 2 years after the request is closed.
- Legal notices: for the applicable limitation periods.
- Upload list ciphertext and code: deleted when the TV collects it, and in any case within 15 minutes.
After that, data is deleted, destroyed or anonymised.
10. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with your local supervisory authority.
Under KVKK Art. 11 you may ask whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties it is transferred to, request correction or erasure, request notification of these actions to recipients, object to adverse results of solely automated analysis, and claim compensation for unlawful processing.
Under US state laws (e.g. California CCPA/CPRA): we do not sell personal information or share it for targeted advertising.
Send requests to [email protected]. We reply free of charge within 30 days and may ask for information to verify your identity. As App data exists only on your device, you can delete it yourself by uninstalling the App; we have no access to it.
11. Security
In the App, passwords are encrypted with the device's hardware-backed secure key store. The Site is served over HTTPS only. No method is perfectly secure; keep your device's screen lock and system updates on. If your service offers an unencrypted (http) connection, the security of that connection depends on the provider.
12. Children
The App and Site are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us data, contact us and we will delete it.
13. Changes
We may update this policy. The current version is published on this page with its "last updated" date. We will announce significant changes on the Site and, where possible, on the app store listing.
14. Contact
Privacy questions: [email protected]
GUIDE PLAYER LLC, 264-410 3rd St, Shoshoni, WY 82649, USA