Privacy policy

Last updated: 14 October 2026

This policy explains what information IboMax Player (the Android app) and its add-playlist website handle, and why. In short: the app has no accounts, no ads and no analytics, and the website cannot read the playlists you send through it.

What the app is

IboMax Player is a media player. It does not provide, sell or include any channels, playlists or other content. You add playlists (M3U links or Xtream logins) from a provider you choose. Only add playlists you have the right to use.

Information stored on your device

Your playlists (including any username and password you enter), favorites, watch history, settings and a saved copy of your playlist's channel list are stored only on your device, in the app's private storage. We do not receive them. Uninstalling the app or clearing its data deletes them.

Connections the app makes

• Your playlist provider: the app connects directly to the servers in the playlists you add, to load channels, the TV guide and videos. Those providers are not run by us; their own privacy policies apply.
• Google Play: purchases and subscriptions are handled by Google Play Billing. We never receive your payment details. The app asks Google Play whether you own Premium.
• The add-playlist website (this website), only when you use the "From phone" option, as described below.

The add-playlist website

This website lets you type a playlist on your phone and send it to your TV. It is built so that we cannot read what you send:

• Your TV makes its own encryption key pair. The private key never leaves the TV. Your TV shows a short code that stays the same until you choose "New code" on the TV; your phone uses it to get the TV's public key and encrypts the playlist on the phone (P-256 ECDH and AES-256-GCM) before sending it.
• We store: a random identifier for your TV, its public key, a one-way fingerprint (hash) of its private access secret, its short code, the encrypted playlists and the time they were saved. We cannot decrypt the playlists, see your links, usernames or passwords, or link them to you.
• Saved playlists stay until you delete them on this website, until you choose "New code" on the TV (which deletes everything saved for that TV), or until the TV has not connected for 180 days, after which they are deleted automatically.
• The website is hosted by Cloudflare. To deliver the page and to block abuse, your IP address is processed by Cloudflare for rate limiting. We do not store IP addresses in our database and we do not use cookies, ads, analytics or trackers.
• If you tick "Remember this TV on this phone", your browser keeps a link to the TV (its identifier, public key and a send token) and the names of the playlists you sent, in local storage on your phone only. Untick it or tap "Use another TV" to remove them.

Sharing

We do not sell or share personal information. We do not use it for advertising.

Children

The app and website are not directed at children under 13.

Security

The website uses HTTPS only, strict security headers, no third-party scripts, and encryption on your phone as described above.

Your choices

• Delete any saved playlist on this website, or choose "New code" on the From phone screen in the app to delete everything saved for your TV.
• Delete playlists in the app at any time, or uninstall the app to remove all its data from your device.

Changes

If this policy changes, the new version will be posted on this page with a new date.

Contact

Questions about privacy: