Privacy Policy

This Privacy Policy describes how ScanPlayer ("we", "us", "the app") handles information when you use the ScanPlayer mobile application, the ScanPlayer TV receiver application, and the ScanPlayer web receiver (together, the "Services").

1. Information We Process

1.1 Content you add (stored on your device)

• Playlists — M3U URLs, M3U files, or Xtream Codes credentials that you add yourself.
• Favorites, watch history, resume positions, and parental-lock settings.

This data is stored locally on your device. It is never transmitted to us. If you enable the optional Cloud Backup feature, playlists and favorites are stored in your private Firebase account space; we never store Xtream passwords or stream URLs in backups.

1.2 Casting session data

When you cast to a TV or browser, a short-lived session record (a random room code and the stream URL you chose to cast) passes through Firebase Realtime Database to connect your phone with the receiver. Sessions are anonymous, temporary, and deleted when the receiver starts a new session.

1.3 Automatically collected data

• Advertising data (free version) — Google AdMob may process your device's advertising ID, IP address, and coarse device information to serve and measure ads.
• Purchase data — if you buy a subscription or one-time upgrade, RevenueCat and Google Play process your purchase token to validate and restore purchases. We never see your payment card details.
• Analytics — anonymized usage events (e.g. "paywall viewed", "cast started") via Firebase Analytics to improve the app. These events never include stream URLs or playlist contents.
• Authentication — the app signs in anonymously with Firebase Authentication to secure casting sessions and cloud backups. No name, email, or phone number is required or collected.

1.4 Camera

The camera is used only to scan QR codes for connecting to a TV. Images are processed on the device in real time and are never recorded, stored, or uploaded.

2. Third-Party Service Providers

3. Advertising and Consent

The free version of ScanPlayer shows ads served by Google AdMob. Where required (for example in the EEA, the UK, and Switzerland), you will be asked for consent through Google's User Messaging Platform before personalized ads are shown, and you may choose non-personalized ads instead. You can change your choice at any time in the app's settings. Paid plans remove all advertising.

4. What We Do NOT Do

• We do not sell, rent, or trade personal data.
• We do not host, provide, index, or promote any media content, channels, or playlists.
• We do not read, inspect, or log the contents of your playlists on our servers.
• We do not require an account, email address, or phone number.
• We do not knowingly collect data from children under 13. The Services are intended for adults.

5. Your Content, Your Responsibility

ScanPlayer is a media player and casting tool. It does not include any channels, movies, or series. All content comes exclusively from playlists that you supply. You are solely responsible for ensuring that you have the legal right to access and view the content you load into the app.

6. Data Retention

• Local data (playlists, favorites, history) stays on your device until you delete it or uninstall the app.
• Casting sessions are deleted automatically when a new session starts.
• Cloud backups persist until you delete them in the app (Settings → Cloud Backup → Delete) or contact us.
• Analytics and advertising data are retained according to Google's published retention periods.

7. Your Rights

Depending on where you live (e.g. GDPR in the EU/EEA, CCPA/CPRA in California), you may have the right to access, correct, delete, or export personal data, and to object to or restrict certain processing. Because almost all ScanPlayer data lives on your own device, most of these rights can be exercised directly: clear the watch history, delete playlists, delete your cloud backup, or uninstall the app. For anything else, contact us and we will respond within 30 days.

You can reset your advertising ID or opt out of ad personalization at any time in your device's Google settings.

8. Security

All network traffic to our service providers uses encryption in transit (TLS). Casting sessions are protected by authentication and database security rules. Cloud backups are accessible only from your anonymous account.

9. International Transfers

Our service providers (Google, RevenueCat) may process data on servers located in other countries, including the United States, under appropriate safeguards such as Standard Contractual Clauses.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows the latest revision. Material changes will be communicated in the app.

11. Contact

Questions, requests, or complaints about privacy:
Email: support@scanplayer.app