Privacy Policy
Effective Date: October 25, 2026
This policy is provided in English; translations, if any, are for convenience only.
Thank you for choosing LOD Player. This Privacy Policy explains transparently how LOD Player collects, uses, stores, synchronizes, and safeguards your information across mobile devices, smart TVs, and our web portal.
1. Data Controller & Contact
The data controller responsible for the processing of your personal data under this Privacy Policy is:
Data Controller: LOD Digital (Developer Representative), Istanbul, Turkey
Contact & Privacy Inquiries: support@lodplayer.com
2. Local-Only Use (Without an Account)
You are not required to create an account to use the core media playback features of LOD Player. When using LOD Player without logging into a cloud account:
- Playlists & Media Credentials: Your playlist URLs, Xtream API usernames, passwords, and custom playlist configurations reside exclusively in local encrypted storage on your device.
- Playback History & Preferences: Your watch history, resume timestamps, favorites, subtitle/audio selections, channel sorting, and hidden channels remain strictly on your physical device.
- Offline Downloads: Downloaded VOD media files are stored locally in your device's protected internal app storage and are accessible only through the LOD Player app.
3. Optional Cloud Synchronization (With an Account)
If you choose to register an account, LOD Player provides an optional cloud sync service powered by Google Firebase Realtime Database (hosted in the EU / Belgium). This enables you to synchronize your IPTV playlists, playback progress, and preferences across up to 5 authorized personal devices.
| Data Category | Purpose of Processing | Legal Basis (GDPR / KVKK) |
|---|---|---|
| Email Address & User ID (UID) | Account creation, authentication, password recovery, and multi-device identity linking. | Performance of Contract (Art. 6(1)(b)) |
| Account Password | Account security. Passwords are securely hashed by Google Firebase Authentication; LOD Digital never sees or stores plain-text passwords. | Performance of Contract (Art. 6(1)(b)) |
| Playlist Details (Server URL, Username, Password, Name, Refresh Frequency) | Synchronizing your configured IPTV playlists across your authorized devices so you do not have to re-enter them manually. | Performance of Contract (Art. 6(1)(b)) |
| Playback State (Favorites, Recent Items, Resume Seconds, Channel Sorting, Hidden Channels) | Allowing you to pick up where you left off on another device, preserve your favorite channels, and sync custom channel arrangements. | Performance of Contract (Art. 6(1)(b)) |
| Linked Device Registry (Device ID, Device Name, Platform, OS, Timestamps) | Enforcing the fair-use limit of up to 5 simultaneous linked devices per account and preventing unauthorized account takeover. | Legitimate Interests (Art. 6(1)(f)) |
| Temporary TV Pairing Data (Room Code, Temporary Playlist Payload, Expiry) | Transferring playlist credentials from mobile or web portal to a smart TV without typing credentials with a remote controller. | Performance of Contract (Art. 6(1)(b)) |
| Anonymous Session ID | Authorizing temporary TV pairing rooms and web portal transfers without requiring full account credentials. | Legitimate Interests (Art. 6(1)(f)) |
| Subscription & Entitlement Status | Validating Premium features and ad-free playback status across your active devices via RevenueCat. | Performance of Contract (Art. 6(1)(b)) |
| Crash & Diagnostic Logs | Identifying and fixing app crashes, memory leaks, and TV hardware incompatibilities via Firebase Crashlytics. | Legitimate Interests (Art. 6(1)(f)) |
| Advertising Identifier (Free Version Only) | Serving contextual and personalized advertisements to fund the free tier of the application. | Consent (Art. 6(1)(a)) / Legitimate Interests |
4. Data Retention & Auto-Deletion Policy
We retain data only as long as strictly necessary to deliver the service and comply with applicable laws. Please note that automated dormant account cleanups are client-triggered upon inactivity milestones, and we aim to delete data according to the following schedule:
| Data Type | Retention Period | Deletion Mechanism |
|---|---|---|
| Temporary TV Pairing Rooms | ≤ 10 minutes | Permanently deleted immediately upon pairing completion or upon 10-minute expiry. |
| Unverified Accounts | 7 days | Accounts whose email is not verified within 7 days of registration are permanently deleted along with any associated database records. |
| Anonymous Auth Tokens | 30 days | Temporary tokens automatically expire. |
| Cloud Sync Data (Playlists & Progress) | 365 days of inactivity | We aim to delete cloud sync data if no synchronization activity occurs for 365 consecutive days. |
| Dormant Accounts | 730 days of inactivity | We aim to delete dormant accounts after 730 days of complete account inactivity. |
| User-Initiated Account Deletion | Immediate (0 days) | Instant permanent purge of all cloud sync data and Firebase credentials. No backup copies are maintained. |
| Crashlytics Logs | ≈ 90 days | Automatically purged by Google Firebase. |
| Purchase & Billing Records | Statutory periods | Retained strictly by Apple App Store / Google Play Store pursuant to tax and commercial regulations. |
5. Security & Encryption
We implement industry-standard administrative, physical, and technical measures to protect your information:
- Encryption in Transit: All communications between the app, web portal, and Firebase servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
- Strict RTDB Security Rules: Realtime Database paths are locked down with server-enforced rules. Only authenticated users with verified email addresses can access or modify their personal synchronization tree.
- Local Storage Encryption: On-device data is stored using high-performance encrypted MMKV storage with AES encryption.
- Five-Device Enforcement: Accounts are hardware-restricted to a maximum of 5 concurrent active device slots to prevent credential sharing and abuse.
6. Your Privacy Rights (GDPR, UK GDPR, CCPA-CPRA, KVKK)
Depending on your jurisdiction, you possess specific legal rights regarding your personal data:
- Right of Access & Portability: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You may update or correct your email address and profile credentials at any time.
- Right to Erasure ("Right to be Forgotten"): You have the absolute right to delete your account and all associated cloud data permanently.
- Right to Restrict or Object to Processing: You may object to data processing carried out under our legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent (such as personalized advertising), you can withdraw consent at any time without penalty.
- Right to Lodge a Complaint: You have the right to file a complaint with your local data protection supervisory authority (e.g., KVKK in Turkey, the ICO in the UK, or relevant EU Data Protection Authorities).
How to exercise your rights: You can delete your account instantly within the mobile/TV app by navigating to Settings > Account > Delete Account, visit our dedicated Account Deletion Page, or email our privacy team at support@lodplayer.com. We respond to all formal data subject requests within 30 days.
7. Third-Party Services & International Transfers
We engage trusted third-party service providers to facilitate infrastructure, subscription billing, and stability monitoring:
- Google Firebase (Google LLC): Cloud database infrastructure (hosted in europe-west1 / Belgium), user authentication, and Firebase Crashlytics crash reporting.
- RevenueCat, Inc.: In-app purchase management and receipt validation for Premium tier subscriptions.
- Advertising Partners: ironSource LevelPlay, Unity Ads, and Google Mobile Ads (used exclusively in the free ad-supported version).
- Platform App Stores: Google Play Store and Apple App Store for app distribution and payment processing.
Where data is transferred outside the European Economic Area (EEA), United Kingdom, or Turkey (such as to servers in the United States), transfers are executed under approved legal transfer mechanisms, including the European Commission's Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework (DPF).
8. Advertising & Consent Management
We use ironSource LevelPlay to display advertisements in our free version. LevelPlay and its advertising partners (including ironSource, Unity Ads, and Google) may use device identifiers, cookies, and IP addresses to serve and measure advertisements.
- Personalized Ads & CMP: In regions where required (such as the EEA, UK, and Switzerland), we deploy a certified Consent Management Platform (CMP) to collect your explicit consent before collecting your device's Advertising ID. On iOS devices, we adhere strictly to Apple's App Tracking Transparency (ATT) framework.
- Opting Out: You can manage or reset your advertising identifier and opt out of personalized tracking at any time through your device system settings (e.g., "Opt out of Ads Personalization" or "Delete advertising ID" on Android, or "Allow Apps to Request to Track" on iOS). Upgrading to LOD Player Premium completely removes all advertisements.
9. Device Permissions
LOD Player requests specific permissions only when essential to deliver features locally:
- Storage & Foreground Service: Required for offline VOD downloading and media caching on mobile devices. Downloads operate while the app is active or executing through foreground notifications.
- Microphone (Speech-to-Text): Requested strictly to provide the voice search function. Speech recognition is processed completely offline and locally on your device; we never record or transmit your voice data to remote servers.
10. Children's Privacy
LOD Player is not directed at children under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal information from children. Children under these ages are prohibited from creating a cloud account. If you believe a child has provided us with personal data, please contact us at support@lodplayer.com, and we will promptly delete the data.
11. Web Sync Portal Privacy
When using our web synchronization portal (lodplayer.com/sync), no tracking cookies or persistent third-party analytics are stored on your browser. Temporary authentication state is maintained strictly within your current browser tab's sessionStorage. The playlist details you input are transmitted exclusively to the designated TV pairing room and are removed after pairing.
12. Content Disclaimer & User Responsibility
LOD Player is strictly an independent media player software application. We do not provide, host, distribute, broadcast, or sell any playlists, live television channels, movies, or video content of any kind. Users must supply their own legally obtained streams and credentials.
Any playlist information you save to your cloud account is processed solely to provide synchronization services across your authorized devices. LOD Digital holds no affiliation with third-party IPTV providers and disclaims all liability for the nature or legality of content streamed by users.
13. Changes to This Policy & Contact
We may update this Privacy Policy periodically. In the event of material modifications, we will notify you through an in-app notice or prominent banner. Continued use of LOD Player following notification signifies acceptance of the updated terms.