1 Introduction
Welcome to Xtream-Masters OTT Player ("we", "our", "the app"). This Privacy Policy explains
how our Windows desktop IPTV player application handles information. The app allows users to
configure and play their own IPTV playlists using either the Xtream Codes API format or an M3U URL.
The app does not require user accounts. There is no email/password login. Access is
based on a per-device licensing system with a free trial and paid activation.
2 Information We Collect
2.1 Device Information (for license registration)
When the app is first launched, the following technical identifiers are transmitted to our
licensing server to create a device record:
- Device ID — a one-way SHA-256 hash derived from your motherboard serial and
CPU ID. We cannot reverse this hash to obtain your actual hardware serials.
- MAC address — used to bind the license to your device.
- Computer hostname — used only for admin display purposes.
- Operating system info — Windows version and system architecture.
2.2 License Data (stored on our server)
- Device ID (as described above)
- Activation status (trial / active / expired / revoked)
- Registration timestamp and last-seen timestamp
- App version installed on the device
2.3 Locally Stored Data (never sent to our server)
The following data is stored only on your device, encrypted at rest, and is
never transmitted to us or any third party:
- IPTV playlist credentials (server URL, username, password)
- Favorites list
- Last-used playlist
- Player settings and resume positions
3 How We Use Your Information
The limited information we collect is used exclusively for:
- Verifying that a device holds a valid trial or paid license
- Preventing license abuse (e.g. one license being shared across many devices)
- Communicating app update availability
- Providing technical support if you contact us
We do not sell, rent, or share your information with any third parties for
marketing, advertising, or analytics purposes.
4 Data Storage and Security
- Server data is stored on our secure VPS and protected with HTTPS in transit
and access control at rest.
- Local data on your device (playlists, credentials, favorites) is encrypted
using industry-standard algorithms and stays on your machine.
- API responses from our license server are cryptographically signed (HMAC-SHA256)
so the app can detect tampering or fake responses.
5 Data We Do NOT Collect
We do not collect, store, or transmit any of the following:
- Personal information — no name, email, phone number, or address
- Viewing history or watch habits — we do not know what you watch
- IPTV content or stream data — streams flow directly from your provider to your device
- Location data (GPS, IP-based geolocation, etc.)
- Analytics events or usage telemetry
- Cookies — the app is not a website
- Third-party SDKs, advertising IDs, or trackers
6 Third-Party Services (Your IPTV Provider)
Xtream-Masters OTT Player is a media player only. We do not provide, host, distribute, or
resell any IPTV content, channels, or streams. Any playlist you load is served by a third-party
IPTV provider chosen by you.
- You are solely responsible for the legality of the playlists and content you access.
- We are not affiliated with any IPTV content provider, channel owner, or broadcaster.
- Communication between the app and your IPTV provider is a direct connection — we do not
proxy, log, or inspect that traffic.
- The privacy practices of your IPTV provider are governed by their policies, not ours.
7 Children's Privacy
This app is not directed at children under 13 years of age. We do not knowingly collect
information from children. If you are a parent or guardian and believe your child has provided
information to us, please contact us so we can remove it.
8 Data Retention
- Device and license records are retained while your license is active.
- Expired or revoked device records may be retained for up to 12 months for anti-abuse and
support purposes, then anonymized or deleted.
- Activity logs (register / check / activate) are retained for up to 6 months.
9 Your Rights
You have the right to:
- Access — request a copy of what device data we hold about your license.
- Delete — request permanent deletion of your device record and license history.
- Rectify — request correction of inaccurate data.
- Withdraw — uninstall the app at any time; local data on your device is
removed with the uninstall.
To exercise any of these rights, email us at the address in the Contact section with your
Device ID. We respond within 30 days.
10 Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective Date" at the top will reflect
the latest revision. Material changes will be announced in the app or on our website. Continued
use of the app after changes take effect constitutes acceptance of the revised policy.
11 Contact Us
Questions about this Privacy Policy? Reach out: