Privacy Policy

01Introduction

Welcome to Xtream-Masters Media Player ("we", "our", "the app"). This Privacy Policy explains how our Windows desktop IPTV player application handles information. The app allows users to configure and play their own IPTV playlists using either the Xtream Codes API format or an M3U URL.

The app does not require user accounts. There is no email/password login. Access is based on a per-device licensing system with a free trial and paid activation.

02Information We Collect

2.1 Device Information (for license registration)

When the app is first launched, the following technical identifiers are transmitted to our licensing server to create a device record:

• Device ID, a one-way SHA-256 hash derived from your motherboard serial and CPU ID. We cannot reverse this hash to obtain your actual hardware serials.
• MAC address, used to bind the license to your device.
• Computer hostname, used only for admin display purposes.
• Operating system info, Windows version and system architecture.

2.2 License Data (stored on our server)

• Device ID (as described above)
• Activation status (trial / active / expired / revoked)
• Registration timestamp and last-seen timestamp
• App version installed on the device

2.3 Buy Codes order data (website only)

When you buy activation codes on this website, we store your email address, selected language, order reference, package, amount, payment status and delivery status. We use your email only to send your invoice and activation codes, provide order support and prevent fraud. Our Paksat mail relay receives your recipient address and the email content solely to deliver that message.

Reseller accounts also store a bcrypt password hash, code ownership, purchase/redemption dates and transfer history. Login passwords are never stored in plaintext. A one-time welcome password is encrypted until the welcome email is delivered, then removed. Optional authenticator secrets are encrypted; setup is enabled only after a valid 6-digit code. Transfers to another reseller email share the recipient address and notification content with the same mail relay.

When you use My Playlist on the website, we store your host URL, playlist username and password in encrypted form, plus an optional playlist name, creation dates and your chosen primary playlist. We use these details to verify the line and let the player connect. Your optional Protection Auth code is stored only as a one-way hash, never in plaintext. Private notices you add and notices set by your reseller are stored with the playlist account or activation code so they can be shown in your panel.

2.4 Locally Stored Data (never sent to our server)

• IPTV playlist credentials (server URL, username, password)
• Favorites list
• Last-used playlist
• Player settings and resume positions

03How We Use Your Information

The limited information we collect is used exclusively for:

• Verifying that a device holds a valid trial or paid license
• Preventing license abuse (e.g. one license being shared across many devices)
• Communicating app update availability
• Providing technical support if you contact us
• Delivering Buy Codes invoices and activation codes, and reviewing payment issues

We do not sell, rent, or share your information with any third parties for marketing, advertising, or analytics purposes.

04Data Storage and Security

• Server data is stored on our secure VPS and protected with HTTPS in transit and access control at rest.
• Local data on your device (playlists, credentials, favorites) is encrypted using industry-standard algorithms and stays on your machine.
• API responses from our license server are cryptographically signed (HMAC-SHA256) so the app can detect tampering or fake responses.

05Data We Do NOT Collect

06Third-Party Services (Your IPTV Provider)

• You are solely responsible for the legality of the playlists and content you access.
• We are not affiliated with any IPTV content provider, channel owner, or broadcaster.
• Communication between the app and your IPTV provider is a direct connection, we do not proxy, log, or inspect that traffic.
• The privacy practices of your IPTV provider are governed by their policies, not ours.

07Children's Privacy

This app is not directed at children under 13 years of age. We do not knowingly collect information from children. If you are a parent or guardian and believe your child has provided information to us, please contact us so we can remove it.

08Data Retention

• Device and license records are retained while your license is active.
• Expired or revoked device records may be retained for up to 12 months for anti-abuse and support purposes, then anonymized or deleted.
• Activity logs (register / check / activate) are retained for up to 6 months.
• Buy Codes order and email-delivery records are retained as needed for support, fraud prevention and accounting.

09Your Rights

You have the right to:

• Access, request a copy of what device data we hold about your license.
• Delete, request permanent deletion of your device record and license history.
• Rectify, request correction of inaccurate data.
• Withdraw, uninstall the app at any time; local data on your device is removed with the uninstall.

To exercise any of these rights, email us at the address in the Contact section with your Device ID. We respond within 30 days.

10Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top will reflect the latest revision. Material changes will be announced in the app or on our website. Continued use of the app after changes take effect constitutes acceptance of the revised policy.

11Contact Us

Questions about this Privacy Policy? Reach out: