Nokhba Player

To play anything, you supply your own source: an M3U or M3U8 playlist URL, a playlist file, an Xtream Codes portal with a username and password, or a Stalker portal with a MAC address. You may also build favorites and playlists, and the App records what you have watched so you can return to it.

All of this is written to local storage on your device and is never transmitted to us. We operate no server that receives it. Specifically:

• Playlists, channel lists, favorites, watch history, and playlists you create are held in a private database inside the App’s own storage area, which other apps cannot read.
• Xtream portal usernames and passwords are encrypted with a key held in your device’s hardware-backed Android Keystore, and are excluded from Android cloud backup and device-to-device transfer so they cannot leave the device that way.
• The channel database is likewise excluded from cloud backup.

The App includes services from Google that collect data in the background. We see these only as aggregated reports; they are not linked to your name or to any account.

Google processes this data as described in the Google Privacy Policy. Further detail is available for Firebase and for AdMob.

The App shows advertising supplied by Google AdMob. Where required — including in the European Economic Area, the United Kingdom, and Switzerland — the App presents a consent form from Google’s User Messaging Platform before any personalised advertising is served, and records your answer. You may change that answer at any time, and you may withdraw consent you previously gave.

Independently of the App, Android lets you limit ad tracking or delete your advertising identifier under Settings → Privacy → Ads. Doing so does not remove advertising, but it stops it being personalised.

When you play a stream, your device contacts that source directly. The traffic does not pass through any server of ours, and we have no visibility into it. The operator of that source will see your IP address and what you requested from them, and their own handling of that information is governed by their terms, not by this policy.

This applies to any playlist provider, Xtream portal, or Stalker portal you configure, and to Twitch where you open a Twitch channel through the App. We have no relationship with any of these operators and do not endorse them.

Everything held on your device stays there until you remove it. You can delete individual playlists and history from within the App, clear all of it at once through Android Settings → Apps → Nokhba → Storage → Clear data, or remove it entirely by uninstalling the App.

Analytics and crash data held by Google are retained according to Google’s own schedules, which for Firebase Analytics defaults to 14 months. To have data associated with your installation deleted from those systems, contact us at the address below and include the date and approximate time of use, since we hold no identifier that would let us find you otherwise.

The App is not directed at children under 13, and we do not knowingly collect personal information from them. Because playlists are user-supplied, the App cannot guarantee that a given source is free of material unsuitable for children; a filter is applied to obviously adult-labelled entries when a playlist is imported, but it is not a substitute for supervision. If you believe a child has provided us with personal information, contact us and we will delete it.

Provider credentials are encrypted at rest using Android’s hardware-backed Keystore. The App’s data is stored in private application storage that other apps cannot access.

Note that many IPTV portals are only reachable over unencrypted HTTP, and the App permits such connections so that those sources work at all. Where a source does not support HTTPS, the credentials and requests sent to it are not encrypted in transit. This is a property of the source you chose, and we recommend preferring providers that offer HTTPS.

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict its processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom hold these rights under the GDPR; residents of California hold comparable rights under the CCPA, including the right not to be discriminated against for exercising them. We do not sell personal information.

Because the App has no accounts, most data never reaches us, and what does is not linked to your identity. To exercise any of these rights, or to complain to a supervisory authority, use the contact address below.

We may update this policy as the App changes. The effective date at the top will be revised, and material changes will be signalled in the App or on its Google Play listing. Continuing to use the App after a change means you accept the revised policy.

Questions about this policy or about your data can be sent to [email protected].