Privacy Policy

Effective: May 24, 2026

1SPlayer is a personal IPTV media player. This policy explains what data the app collects, why, and how it's handled. We aim to collect as little as possible and to be precise about what we do collect.

The short version: 1SPlayer is a video player and playlist management tool. The app does not provide, host, distribute, or supply any content. The only data we store on our servers is the information you choose to sync across your devices (account, settings, favorites, watch history, playlist references). That data is encrypted in transit and is only readable by you.

1. What we collect

Account information (only if you sign in)

If you create an account or sign in, we collect:

Email address (for authentication and account recovery).
A unique anonymous user identifier issued by our authentication provider (Supabase).
For Sign in with Apple or Sign in with Google: the identity token issued by Apple or Google. We do not receive your password.

You can use 1SPlayer without an account. Without an account, none of the data below leaves your device.

Synced personal data (only if signed in)

If you sign in and enable cross-device sync, the following data is stored on our servers (Supabase) so it can move with you between devices:

Profiles you create within the app (names, avatars, restrictions).
Playlist references you've added (including the source URL, which we encrypt before storing because it often contains your provider credentials).
Favorites, watch history, channel renames / hides / custom groupings, custom categories, settings preferences, parental authentication state.

We do not store the actual media content. Channel lists and program guide data are fetched from your providers and cached locally on your device only.

Subscription information

If you purchase a subscription or lifetime upgrade, RevenueCat (our subscription manager) receives:

An anonymous user identifier.
Your subscription receipt issued by Apple or Google.

RevenueCat does not receive your name, email, or payment information. Your payment is processed entirely by Apple or Google.

Crash reports and diagnostics

If the app crashes, we receive a crash report through Sentry that includes:

The crash stack trace.
The device model, OS version, and app version.
A short trail of recent in-app actions ("breadcrumbs") leading up to the crash.

Before any crash report leaves your device, we strip email addresses, playlist URLs, authentication headers, and any other identifiable strings. We use this data only to fix bugs.

What we do not collect

We do not embed advertising SDKs.
We do not embed analytics SDKs that track behavior (no Google Analytics, no Firebase Analytics, no Facebook SDK).
We do not sell or share your data with third parties for advertising.
We do not collect contacts, photos, location, or device identifiers beyond what's listed above.

2. Third-party services

The app uses these services to function:

Supabase — authentication and cross-device data sync. Receives the data listed in §1.
The Movie Database (TMDB) — film and series metadata (titles, descriptions, poster images). We send title-search queries; we do not send any data that identifies you.
RevenueCat — subscription management. Receives the data listed in §1.
Sentry — crash reporting. Receives the data listed in §1, with PII filtered before sending.
Apple / Google — payment processing, identity (only if you choose Sign in with Apple or Sign in with Google).

3. How we use your data

To let you sign in and use the app.
To sync your settings, favorites, and watch history between your devices.
To process your subscription if you choose to upgrade.
To diagnose and fix bugs.

We do not use your data for advertising, profiling, or anything beyond what's listed above.

4. How data is protected

All network traffic uses TLS (HTTPS).
Playlist URLs are encrypted before being stored on our servers, so a database compromise would not reveal your provider credentials.
Authentication is handled by Supabase, which uses industry-standard hashed password storage.

5. Data retention and deletion

If you sign in, your synced data is retained until you delete it. You can:

Delete individual items in the app (remove playlists, profiles, favorites, history).
Sign out, which stops sync but leaves your data on our servers for later sign-ins on the same account.
Request full account deletion by emailing the address below. We delete all data associated with your account within 30 days.

6. Your rights

Depending on where you live, you may have rights to access, correct, port, or delete the data we hold about you (GDPR in the EU/UK, CCPA in California, similar laws elsewhere). To exercise any of these rights, email support@1splayer.app from the email address on your account.

7. Children's privacy

1SPlayer is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we'll delete it.

8. Content disclaimer

1SPlayer is a video player and playlist management tool. The app does not provide, host, distribute, or supply any content. 1SPlayer is made to work with content or playlists users create themselves using legally sourced material. You are solely responsible for the legality of the sources you choose to use.

9. Changes to this policy

If we make material changes, we'll update the "Effective" date at the top of this page and, where appropriate, surface a notice in the app. Continued use after a change means you accept the updated policy.

10. Contact

Questions or requests: support@1splayer.app